Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/a7003e6395e6b7701dc24c40d5d14e07ba77b71e.roa
File:                     a7003e6395e6b7701dc24c40d5d14e07ba77b71e.roa (raw, json)
Hash identifier:          c/VpSRz1WYhkRaQRaD82NSIxMPz1RqCuKPQlacq09A8=
Subject key identifier:   E4:42:09:9A:42:ED:B0:CD:1A:70:35:E8:CD:9A:C7:71:6B:F6:14:18
Certificate issuer:       /CN=f85a010f5e6f009917c8e2019f5f208cfeb5f75e
Certificate serial:       0D868A
Authority key identifier: BF:78:75:62:F9:EB:8F:C9:8B:B6:0E:D4:74:95:67:5F:4E:E2:72:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85a010f5e6f009917c8e2019f5f208cfeb5f75e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/a7003e6395e6b7701dc24c40d5d14e07ba77b71e.roa
Signing time:             Wed 24 Mar 2021 14:32:11 +0000
ROA not before:           Wed 24 Mar 2021 14:32:11 +0000
ROA not after:            Tue 24 Mar 2026 14:32:11 +0000
asID:                     10697
IP address blocks:        2803:7e80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886410 (0xd868a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85a010f5e6f009917c8e2019f5f208cfeb5f75e
        Validity
            Not Before: Mar 24 14:32:11 2021 GMT
            Not After : Mar 24 14:32:11 2026 GMT
        Subject: CN=a7003e6395e6b7701dc24c40d5d14e07ba77b71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8c:48:ea:24:b8:de:11:d1:6c:3e:0d:71:2d:
                    cd:27:3d:36:f7:7f:93:1c:3b:54:4f:07:71:c7:3d:
                    6f:bc:0b:93:41:d3:52:fb:28:1f:0a:20:21:c5:eb:
                    01:7d:2b:9b:de:f3:56:51:81:f7:80:d7:13:45:99:
                    0d:b6:a0:4c:39:f0:52:ee:6a:f4:27:ac:30:f9:a6:
                    f6:4a:9a:e2:03:ad:b7:39:55:cb:66:25:5c:8c:bf:
                    1c:ee:cb:c9:b5:2b:47:da:99:95:01:6f:a4:15:e7:
                    71:72:3b:29:89:55:ef:d9:5d:64:94:8b:92:ca:82:
                    c4:4d:6d:65:d9:96:94:e0:dc:b2:00:76:bb:c4:f1:
                    8c:80:9d:e6:21:cf:25:39:96:67:b9:ab:20:43:9e:
                    db:b3:8c:c8:3e:82:51:7d:1a:68:71:0b:a5:72:76:
                    7c:ff:42:11:4e:dd:93:a3:f1:16:4c:9c:7a:d3:54:
                    65:f0:8b:84:cc:cb:09:71:2a:ba:27:44:25:95:ef:
                    71:cb:e0:9d:b9:64:3f:20:9d:56:ac:6f:a1:92:f4:
                    30:2f:20:22:63:8e:b7:7b:dc:6a:53:f8:06:fa:1f:
                    5a:e0:b0:12:45:a9:5b:fa:f1:13:fe:dc:e8:27:ee:
                    d4:85:15:29:91:93:a2:b8:cb:20:77:c3:ed:5f:b6:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:42:09:9A:42:ED:B0:CD:1A:70:35:E8:CD:9A:C7:71:6B:F6:14:18
            X509v3 Authority Key Identifier:
                keyid:BF:78:75:62:F9:EB:8F:C9:8B:B6:0E:D4:74:95:67:5F:4E:E2:72:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85a010f5e6f009917c8e2019f5f208cfeb5f75e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/a7003e6395e6b7701dc24c40d5d14e07ba77b71e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/f85a010f5e6f009917c8e2019f5f208cfeb5f75e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:28:86:1d:77:b4:44:f7:a2:4a:ad:9d:88:0f:af:c9:5f:5f:
         a5:d8:5f:8e:aa:b2:bc:e8:eb:8d:37:17:56:4b:71:89:bf:aa:
         4a:cc:2c:2a:dd:5f:99:b4:fe:2b:52:64:88:e6:a5:bd:7a:e9:
         78:42:c3:c3:0b:b9:1e:22:ab:d9:aa:1c:d9:0e:32:85:94:78:
         55:f8:4d:72:e9:f6:7c:62:8e:d7:ae:94:e6:c3:60:2e:34:78:
         dc:c5:1c:cc:78:d8:7e:af:c2:5a:8e:be:9f:f6:97:26:81:44:
         52:57:6f:77:43:e5:0b:94:a0:7f:4e:33:d0:c0:83:3a:03:66:
         af:54:79:e1:4d:7c:4f:b7:98:16:7d:ed:29:c4:82:e3:36:46:
         3d:c8:b3:17:e0:80:01:12:e7:f4:58:d4:8d:e1:2f:b9:bf:82:
         cc:0c:82:fc:ab:d1:dd:77:9a:49:1e:0b:04:5b:f0:28:67:e5:
         61:9f:dc:42:a3:c3:dd:1f:91:6b:57:fb:1c:02:92:29:d2:75:
         bc:d7:1d:be:a8:d9:bf:a8:a0:dd:4a:4d:97:73:53:cf:7b:29:
         e2:4d:35:c2:f3:f8:e6:68:9b:3d:fa:70:1e:39:18:b4:af:0b:
         bc:35:63:a5:f5:b2:c4:d6:40:45:55:7f:ab:d0:c9:4e:8b:43:
         f1:34:04:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----