Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2926c06f-ba2d-4e65-ad31-8f4624af014d/7156e452ffad6eb91f783d880c6c68fb8f1827d2.roa
File:                     7156e452ffad6eb91f783d880c6c68fb8f1827d2.roa (raw, json)
Hash identifier:          ZbuQXrtd1EBdy9ifYOs2yJmR55lHrI+CHhIuEaSrhiM=
Subject key identifier:   D1:D1:36:04:A7:0D:E7:6F:C1:82:2A:0A:88:F4:98:00:92:08:B2:AB
Certificate issuer:       /CN=2dde38fe78dc839ff0813912559c7f274a63d47d
Certificate serial:       0B23AE
Authority key identifier: 1A:9C:45:00:F3:CC:CD:ED:C6:E9:4E:B1:B7:4D:22:D7:83:88:23:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dde38fe78dc839ff0813912559c7f274a63d47d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2926c06f-ba2d-4e65-ad31-8f4624af014d/7156e452ffad6eb91f783d880c6c68fb8f1827d2.roa
Signing time:             Wed 24 Mar 2021 14:41:17 +0000
ROA not before:           Wed 24 Mar 2021 14:41:17 +0000
ROA not after:            Tue 24 Mar 2026 14:41:17 +0000
asID:                     269825
IP address blocks:        2801:13:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 730030 (0xb23ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dde38fe78dc839ff0813912559c7f274a63d47d
        Validity
            Not Before: Mar 24 14:41:17 2021 GMT
            Not After : Mar 24 14:41:17 2026 GMT
        Subject: CN=7156e452ffad6eb91f783d880c6c68fb8f1827d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5d:3b:e0:8b:90:ed:b4:4a:59:66:a5:80:f9:
                    72:f5:e3:c7:d1:08:29:7a:b4:6b:29:40:60:47:c6:
                    60:95:cd:67:81:f3:19:2a:62:a2:e0:ff:84:80:0b:
                    97:47:3c:b9:58:9d:8f:5e:59:03:f9:70:3e:22:70:
                    42:08:5f:d1:45:b1:c4:5b:8d:f9:87:75:ce:3f:87:
                    2c:e4:4e:43:ef:47:28:68:b3:1b:12:b9:c6:d5:be:
                    4d:61:d2:6a:9b:2c:ee:65:81:7e:7f:20:1e:77:8d:
                    a0:3e:e7:dc:7d:e2:59:e3:ce:23:cd:ee:d0:6c:5e:
                    00:3c:18:e7:20:5c:7d:6a:1e:f1:79:df:ae:2a:5d:
                    5f:6e:1b:f9:1a:c1:bb:44:d9:4f:fc:e5:cb:ed:23:
                    4d:79:91:c6:08:26:76:20:d3:af:e4:20:e2:62:33:
                    37:e5:ec:67:1f:32:74:47:9c:95:b1:ab:1a:d4:f0:
                    8c:ce:f2:07:40:93:5e:20:2e:51:9b:3e:d6:06:83:
                    88:b2:a8:35:c8:d8:92:dd:de:9a:ab:9e:21:97:a2:
                    5e:22:b0:d6:2a:71:40:5f:4f:ad:e9:68:03:89:53:
                    86:8e:da:d8:c8:fe:a0:77:cf:e6:90:36:a0:78:9c:
                    2d:b8:fe:8f:db:2e:f2:33:36:5b:9b:3b:44:87:96:
                    c2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D1:36:04:A7:0D:E7:6F:C1:82:2A:0A:88:F4:98:00:92:08:B2:AB
            X509v3 Authority Key Identifier:
                keyid:1A:9C:45:00:F3:CC:CD:ED:C6:E9:4E:B1:B7:4D:22:D7:83:88:23:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dde38fe78dc839ff0813912559c7f274a63d47d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2926c06f-ba2d-4e65-ad31-8f4624af014d/7156e452ffad6eb91f783d880c6c68fb8f1827d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2926c06f-ba2d-4e65-ad31-8f4624af014d/2dde38fe78dc839ff0813912559c7f274a63d47d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:a3:c7:1a:24:5c:fa:e9:6e:9d:82:9e:fd:ed:25:96:7f:
         3f:fa:e3:a5:51:1e:20:e7:45:e9:2c:5f:12:89:94:6a:5d:c8:
         54:52:22:3f:ed:f4:82:14:f5:03:50:36:d7:49:8a:2f:c3:8c:
         dd:a7:09:46:3c:df:b0:39:66:1b:66:69:73:f1:18:d4:c9:26:
         44:b0:5b:ac:c2:6b:6b:82:e0:92:3b:cd:ce:d0:42:28:3f:c9:
         49:89:96:4f:e4:f2:19:2f:c3:b3:a1:96:03:3b:a7:d9:80:5e:
         ab:79:5b:18:f8:a2:23:88:60:6f:41:fa:29:81:0b:31:e0:b3:
         4f:3b:95:6a:5c:b8:1f:3c:b6:ac:4c:1d:c6:3b:8c:0f:5c:cf:
         3a:54:11:4b:b9:54:5c:40:51:35:2d:3b:52:96:e5:c7:72:81:
         f9:57:75:72:33:0e:cc:1c:3d:c6:71:7a:72:6f:4f:4d:69:83:
         0a:33:74:a3:f1:97:47:31:fa:d2:06:7e:90:55:24:1d:51:a1:
         be:60:b3:07:95:d2:03:08:92:b0:d3:69:d5:70:59:53:8c:12:
         4e:c6:88:e1:28:a3:f6:35:c4:95:4a:53:9b:dc:86:dd:52:cf:
         6d:dd:7f:a1:d4:ae:e9:0f:d8:1d:b6:9c:5d:3d:30:0b:04:30:
         af:72:e7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----