Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/bf4b4a28fe09961c8a54bc1dad4399fbc245bdd5.roa
File:                     bf4b4a28fe09961c8a54bc1dad4399fbc245bdd5.roa (raw, json)
Hash identifier:          S6ImKnUd7AEC5Kk3MnofBH1jwtdhcuyjO2i5vJhHYFQ=
Subject key identifier:   D5:2A:6C:89:AE:B7:9F:80:C1:7A:97:8A:1B:1E:77:AB:EF:CA:EE:56
Certificate issuer:       /CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Certificate serial:       1166E5
Authority key identifier: 09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/bf4b4a28fe09961c8a54bc1dad4399fbc245bdd5.roa
Signing time:             Mon 02 Aug 2021 20:52:14 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     61449
IP address blocks:        2803:580::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1140453 (0x1166e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=bf4b4a28fe09961c8a54bc1dad4399fbc245bdd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ad:e8:72:63:78:7d:a3:83:71:2e:ba:56:54:
                    3b:1a:59:e5:29:dd:85:c7:85:03:c9:f5:56:f3:dc:
                    02:6b:83:62:3e:70:cb:c3:c1:6d:36:2e:74:1c:a3:
                    b8:df:60:16:57:78:5a:f4:a1:48:5c:ca:96:96:f3:
                    9d:28:b1:e3:ea:86:59:00:a6:a7:ff:56:71:cb:65:
                    f3:72:c4:16:fb:02:a0:d9:4d:d3:bc:0f:69:1f:44:
                    4f:5a:46:93:3c:7c:bf:26:a1:95:01:27:17:1b:02:
                    46:9a:f5:80:c7:a7:d1:2f:4e:33:86:f1:91:8c:88:
                    10:61:71:dc:27:bf:7e:e3:62:35:6c:9e:97:66:b4:
                    51:8b:3f:ad:53:f2:81:67:e9:76:96:d6:6f:29:e7:
                    c7:0c:d3:9c:1a:96:05:09:d0:f8:02:3c:13:9e:62:
                    17:96:f3:96:f5:e6:e9:3c:3f:b5:5b:4a:8a:82:b6:
                    a0:8c:9e:f1:58:d0:7c:c4:ad:a4:95:87:f2:50:45:
                    d2:ba:89:75:c1:1f:35:7e:88:7c:f3:f7:ef:f2:5d:
                    76:e0:b2:49:8b:a4:72:cb:0e:5f:40:b1:e3:d3:07:
                    8c:ed:8e:6d:e4:dc:24:d2:4e:fb:de:6a:20:85:c9:
                    c3:63:0e:55:9f:01:d5:72:f8:34:c7:1f:8b:c3:0f:
                    af:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2A:6C:89:AE:B7:9F:80:C1:7A:97:8A:1B:1E:77:AB:EF:CA:EE:56
            X509v3 Authority Key Identifier:
                keyid:09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/bf4b4a28fe09961c8a54bc1dad4399fbc245bdd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:580::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:d7:d8:f3:29:c3:a1:74:37:d7:43:34:49:5a:2d:ae:3b:bf:
         51:a5:a3:bc:1a:30:61:c6:85:2e:28:88:a7:0a:2b:71:b1:43:
         30:a6:d7:6d:bd:3a:0b:80:7a:d8:23:69:f5:1e:14:28:98:33:
         73:64:eb:ea:82:c1:17:91:07:c1:bb:55:3d:1a:ef:6b:83:d7:
         3d:31:d6:63:aa:61:36:f0:2b:9b:8a:10:6e:a3:11:31:39:4d:
         d7:56:84:d6:ea:38:b1:cd:78:f2:e9:97:44:9f:83:95:f9:31:
         cd:6e:a4:c5:bb:80:bc:eb:51:69:0b:54:2b:a7:aa:9c:78:a0:
         32:ab:bc:0e:59:dd:fe:6e:5d:79:37:e1:5d:53:cd:01:3a:19:
         d1:0a:1b:4d:c8:bd:70:69:34:61:8e:02:69:1e:5e:03:bb:8e:
         cf:ad:1f:57:c6:86:92:98:9d:59:10:4b:82:9e:7b:32:71:9d:
         a1:7c:22:5b:03:4d:03:61:c0:27:77:5e:7d:f3:6f:27:e0:33:
         7c:ed:10:5c:46:60:f6:37:df:6f:49:bb:f0:b8:61:8b:7d:9c:
         3b:2d:68:16:b9:46:a5:93:9e:b7:88:c9:22:e0:e2:dc:ed:ef:
         b1:c8:f9:5a:5a:8e:dd:6e:bd:d2:db:e3:e4:69:e4:ae:47:da:
         1e:d2:a0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----