Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/e594a1c896dd60d51f40c5c4b06affbbb9b374b5.roa
File:                     e594a1c896dd60d51f40c5c4b06affbbb9b374b5.roa (raw, json)
Hash identifier:          +LWs13sl4T2YKxd+yAuY9o/RPJWWiSzcO3D7qHQnsEo=
Subject key identifier:   54:58:28:EB:7D:9B:CE:7F:E8:AB:57:CA:3C:D9:AD:DF:45:70:F9:95
Certificate issuer:       /CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
Certificate serial:       0D60F6
Authority key identifier: E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/e594a1c896dd60d51f40c5c4b06affbbb9b374b5.roa
Signing time:             Wed 24 Mar 2021 14:40:34 +0000
ROA not before:           Wed 24 Mar 2021 14:40:34 +0000
ROA not after:            Tue 24 Mar 2026 14:40:34 +0000
asID:                     264668
IP address blocks:        2803:bc20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876790 (0xd60f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a7ade91da7f5fcb5c011218c0c9b39ada6823b
        Validity
            Not Before: Mar 24 14:40:34 2021 GMT
            Not After : Mar 24 14:40:34 2026 GMT
        Subject: CN=e594a1c896dd60d51f40c5c4b06affbbb9b374b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c4:4a:1e:2a:94:ae:67:9c:b3:d8:6d:20:51:
                    09:72:50:cb:35:a6:6a:3d:df:38:1a:a4:a0:43:59:
                    d7:78:38:c3:ea:34:4e:7f:51:65:d0:bd:fb:60:04:
                    7d:fe:0e:f6:a5:e8:cb:40:55:5c:60:8f:ab:e5:f1:
                    45:52:d9:57:c6:3c:5b:d9:3f:44:b0:16:12:69:28:
                    b0:b8:20:72:48:c7:63:66:76:0c:e7:26:ed:66:1a:
                    ac:38:1f:30:8f:b8:7e:ee:47:48:09:5c:25:28:7e:
                    1f:f3:4e:34:0e:88:f5:60:66:38:bf:e2:7c:4d:a4:
                    20:18:e8:fc:74:1f:8d:71:31:b7:6d:7b:0a:61:27:
                    c0:60:c7:0a:69:0c:cb:f9:30:c4:c0:5c:9c:89:fa:
                    b2:5b:70:be:11:5e:aa:10:ae:51:a6:ea:4e:eb:1d:
                    01:55:26:aa:80:15:9a:75:3f:2f:8e:bc:5d:64:3f:
                    62:15:02:5a:b1:19:7e:8c:3a:c9:e9:64:fa:a7:af:
                    24:e0:3e:3d:40:76:18:20:9e:68:ed:00:04:ad:55:
                    d3:24:bd:4e:1d:66:22:c5:f7:3d:e3:e0:f5:d9:7b:
                    5e:bc:b8:7b:1c:eb:b1:0d:59:1a:61:27:d1:36:95:
                    fd:04:60:a9:c1:73:54:13:4e:21:f4:01:8b:48:2b:
                    cb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:58:28:EB:7D:9B:CE:7F:E8:AB:57:CA:3C:D9:AD:DF:45:70:F9:95
            X509v3 Authority Key Identifier:
                keyid:E1:0F:9F:FA:D3:5C:F4:16:A5:B3:B4:30:F3:9A:88:03:AF:6D:6E:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/e594a1c896dd60d51f40c5c4b06affbbb9b374b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dc14db9-7ba6-481f-a897-88edea193853/05a7ade91da7f5fcb5c011218c0c9b39ada6823b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:76:fa:aa:73:c5:c2:43:ef:e1:b0:73:8d:75:3d:9f:55:e9:
         24:82:c3:6a:02:ab:ca:83:80:7c:0c:9b:62:f7:9c:ac:c2:c1:
         93:f7:4d:7b:d0:ca:8b:fa:a6:09:e7:d6:40:be:79:94:1b:cc:
         5e:2c:d3:43:52:d6:5a:af:5b:5d:23:35:af:57:c0:be:1c:78:
         6d:bb:e4:26:ba:ff:1c:52:67:1e:e1:df:22:21:43:fa:97:6b:
         f8:f2:f5:8c:e0:46:4e:3e:0a:96:73:d3:33:c1:6d:5a:b8:43:
         24:91:30:c9:56:0f:64:2a:9c:37:8b:af:98:64:17:73:e7:d6:
         9c:70:9e:12:37:65:be:dd:a4:70:df:34:f2:1d:e2:53:b2:e6:
         86:2e:dc:7e:27:e5:57:5b:15:7a:d7:7f:52:fa:c8:01:67:b4:
         87:92:6e:17:7d:38:22:ed:f4:85:d8:8a:33:f6:ef:58:80:2d:
         e7:76:fc:5b:aa:66:45:bc:06:0e:fb:90:71:04:1e:a5:d2:7a:
         79:b1:fd:65:61:8e:48:18:8b:1c:74:2d:f7:af:a9:e1:12:24:
         68:4b:c8:21:01:e6:e9:d5:d0:11:5b:ab:ba:07:65:a0:4a:63:
         63:f4:97:75:27:db:49:d2:c6:ea:ce:23:63:59:80:d9:25:4f:
         de:f7:78:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----