Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/40b12fe2b8118cb8221fb1a89606e3c304d52b54.roa
File:                     40b12fe2b8118cb8221fb1a89606e3c304d52b54.roa (raw, json)
Hash identifier:          Dsv72FXJif3AXwSaG92TZh+a4/bll6Mn6lc8m8F9z3w=
Subject key identifier:   F7:E6:1F:32:CD:7B:DA:B1:68:03:FB:62:0E:61:A6:37:46:CF:C9:02
Certificate issuer:       /CN=466e9c553c1e6136fda5fe5189aa28c81ce61dec
Certificate serial:       0D548F
Authority key identifier: 44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/40b12fe2b8118cb8221fb1a89606e3c304d52b54.roa
Signing time:             Wed 24 Mar 2021 14:47:26 +0000
ROA not before:           Wed 24 Mar 2021 14:47:26 +0000
ROA not after:            Tue 24 Mar 2026 14:47:26 +0000
asID:                     264837
IP address blocks:        2803:22c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873615 (0xd548f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466e9c553c1e6136fda5fe5189aa28c81ce61dec
        Validity
            Not Before: Mar 24 14:47:26 2021 GMT
            Not After : Mar 24 14:47:26 2026 GMT
        Subject: CN=40b12fe2b8118cb8221fb1a89606e3c304d52b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b2:43:0d:42:3f:68:06:0a:63:73:1f:3c:53:
                    4f:c5:09:af:2a:48:af:9a:9b:3a:9b:42:6d:49:e2:
                    98:3f:1a:72:db:77:b7:f1:97:d6:e2:ae:47:d4:6a:
                    a1:d7:9d:15:b7:b4:4c:a0:7c:45:33:e6:d8:ea:37:
                    b4:fb:0c:20:cf:82:35:35:88:30:fc:3d:52:a9:a8:
                    5c:5b:ab:72:2a:5c:e8:2d:9b:49:65:35:a1:37:b4:
                    b8:34:54:0b:dd:e6:37:38:2b:e1:1f:2b:49:d0:b7:
                    8c:62:56:ef:a1:16:99:ff:a7:b6:1c:dc:0b:7f:98:
                    94:fc:16:46:bb:8a:7b:7b:15:17:35:68:44:a6:da:
                    20:2d:08:0c:e7:91:3f:3c:07:e0:da:76:03:e9:f2:
                    e0:74:48:cc:e0:23:87:bb:2b:ac:5a:6f:e7:11:7f:
                    82:9c:04:7b:56:1c:34:46:19:29:32:ba:75:c2:a9:
                    8c:ad:57:0d:14:fe:2d:c5:b9:84:d9:b0:15:22:cf:
                    2a:e3:a7:8e:da:7e:de:62:58:43:26:9d:6b:ca:3f:
                    37:e7:f1:02:28:e6:04:b5:e6:bf:82:38:de:55:94:
                    2f:91:db:df:b0:dc:0b:c2:5b:97:0e:23:e0:dd:a8:
                    eb:f1:50:b5:29:27:7f:24:a8:9d:b3:42:58:49:fe:
                    a3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E6:1F:32:CD:7B:DA:B1:68:03:FB:62:0E:61:A6:37:46:CF:C9:02
            X509v3 Authority Key Identifier:
                keyid:44:97:A8:BD:7C:6E:64:1D:7D:8F:BD:1C:40:97:78:38:5B:7E:9D:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e9c553c1e6136fda5fe5189aa28c81ce61dec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/40b12fe2b8118cb8221fb1a89606e3c304d52b54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36e29e88-0a15-4bfd-8f7e-3d1fc97b8c50/466e9c553c1e6136fda5fe5189aa28c81ce61dec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:22c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:6c:20:84:5d:09:40:01:ff:23:21:c5:5d:4b:94:7e:ae:33:
         56:4a:36:ec:44:61:17:61:b7:fd:ee:ac:67:43:ff:96:c8:5a:
         78:a2:71:a5:59:00:ce:0f:30:0b:93:03:ec:6d:e9:1b:45:ef:
         0f:81:a1:c7:47:27:bb:f7:70:a2:c4:c7:c6:59:37:8f:36:a3:
         69:63:0a:ec:a6:1b:a4:68:3d:6a:d1:de:b0:47:bc:9e:65:bf:
         e7:7d:7e:e0:78:66:76:e0:4c:a4:6e:2a:83:5b:40:66:ee:13:
         b4:7c:e1:94:87:d9:90:bf:80:ea:9f:5a:e0:68:fb:15:cb:96:
         7f:30:7a:d9:d1:c9:21:bd:49:2d:57:54:5f:6b:b6:76:c0:92:
         d6:26:30:67:08:68:ff:7e:ec:f0:f9:5f:fc:96:ac:f9:b4:ed:
         a0:c0:fc:02:61:3f:c8:25:fa:ff:d6:22:6b:da:af:c3:70:9f:
         c1:97:44:28:31:e6:f8:60:50:af:8e:33:fe:72:96:b6:38:1f:
         2d:4a:de:c6:45:d1:3b:12:79:c0:82:4b:af:78:0a:8d:dc:e4:
         af:d1:aa:85:42:28:63:25:ff:d4:54:62:70:2a:b2:8f:32:f0:
         4c:3a:4f:aa:36:f2:bb:1d:34:87:6b:2b:81:da:bb:e7:f3:7c:
         11:1a:0d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----