Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/54b5ac8289e327b68f1c174409e529a4d8c133a2.roa
File:                     54b5ac8289e327b68f1c174409e529a4d8c133a2.roa (raw, json)
Hash identifier:          akxKsl1OiF+DKRbHQ8z0WPpHdfA9RTJTn3G+y/K0bbg=
Subject key identifier:   3D:26:AA:E9:34:31:ED:0F:BF:DD:3E:4A:10:DF:D6:C0:88:48:59:48
Certificate issuer:       /CN=444e0076eea4611dce8c3e39bffef12743fb4711
Certificate serial:       05D1C7
Authority key identifier: EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/54b5ac8289e327b68f1c174409e529a4d8c133a2.roa
Signing time:             Wed 24 Mar 2021 14:29:56 +0000
ROA not before:           Wed 24 Mar 2021 14:29:56 +0000
ROA not after:            Tue 24 Mar 2026 14:29:56 +0000
asID:                     270055
IP address blocks:        2803:81e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381383 (0x5d1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=444e0076eea4611dce8c3e39bffef12743fb4711
        Validity
            Not Before: Mar 24 14:29:56 2021 GMT
            Not After : Mar 24 14:29:56 2026 GMT
        Subject: CN=54b5ac8289e327b68f1c174409e529a4d8c133a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:95:5a:79:08:be:e7:f2:34:b2:25:14:8b:74:
                    7c:42:70:ce:99:33:54:2f:7c:ec:24:27:c3:37:e7:
                    34:43:c4:0e:4b:a1:3a:a5:e5:b4:fe:be:2d:c2:d1:
                    b3:62:23:30:45:93:e0:bf:8f:f3:30:df:fc:d3:b2:
                    e6:cc:9f:fc:3b:ef:2d:dc:6e:74:1e:03:89:31:59:
                    b3:8e:8a:0e:a1:9a:95:34:45:36:62:92:4b:e7:12:
                    33:e2:c0:28:90:1a:3c:4c:ac:2c:c6:46:2c:7b:de:
                    77:28:e7:68:20:3b:ac:5a:4d:02:40:9e:c3:72:8b:
                    4f:c0:ed:01:db:59:16:22:bf:11:8f:30:d8:da:14:
                    61:49:d7:22:33:56:62:b8:26:5b:ad:2d:e3:bc:d7:
                    c0:94:dc:2a:07:f3:b6:a7:82:de:9a:a0:3b:36:67:
                    51:52:c4:1c:0f:e4:f9:3c:e1:a7:52:d6:06:c6:ca:
                    17:15:08:45:96:b8:fe:fa:21:26:85:a7:1c:b2:78:
                    3c:6f:b5:67:ad:9c:7d:b0:cf:c8:6b:80:be:71:8e:
                    ee:25:c8:4a:98:8b:e8:45:e8:ab:b2:7c:41:26:15:
                    88:58:80:b9:79:0a:eb:a7:8e:dd:59:24:d5:99:fe:
                    63:a5:f0:d2:ef:fe:74:cd:a4:1f:3e:af:f2:59:27:
                    15:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:26:AA:E9:34:31:ED:0F:BF:DD:3E:4A:10:DF:D6:C0:88:48:59:48
            X509v3 Authority Key Identifier:
                keyid:EE:26:82:A5:CE:1B:FE:87:23:F4:04:B2:48:79:20:48:7B:18:9A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/444e0076eea4611dce8c3e39bffef12743fb4711.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/54b5ac8289e327b68f1c174409e529a4d8c133a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3a541bed-35c3-4634-8b3e-4aada922aace/444e0076eea4611dce8c3e39bffef12743fb4711.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:81e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:4e:0b:5c:8c:26:11:04:e9:01:40:8d:a8:50:0c:ac:e2:08:
         26:8c:de:38:16:5f:cc:ac:06:40:f2:8e:ab:e1:fd:05:de:46:
         ad:cd:55:bf:79:42:95:d8:e8:f8:2e:b9:40:d2:de:16:0e:a4:
         c3:77:a5:a9:3d:75:ee:e4:99:ef:90:2a:81:87:22:0a:86:9c:
         e3:1e:09:60:01:14:77:ee:0e:6e:7d:0a:24:d1:88:b2:18:90:
         d3:5f:22:66:f2:04:66:73:d3:02:94:76:59:f6:00:c6:48:bd:
         17:53:d5:19:9a:64:0e:33:2f:3d:34:29:b5:10:a2:35:9a:16:
         3c:76:99:b9:fe:9f:f5:f6:56:3c:75:c8:a4:68:91:79:03:dd:
         64:bc:b3:53:04:4a:82:35:14:97:8e:e4:bf:b7:f0:03:08:2f:
         3d:f1:38:5f:67:c9:d7:b3:ab:bf:eb:77:53:3c:8b:de:74:95:
         1e:48:c1:af:b7:4d:45:62:31:ab:9f:60:91:2e:18:c0:1a:1c:
         ed:62:b3:fd:a4:26:31:93:8c:86:85:3c:10:6f:a4:98:52:0d:
         c5:5c:f3:3e:b8:7d:7a:9c:47:5d:5f:8c:6a:10:a2:cd:a2:71:
         20:8e:c0:b5:66:87:96:f8:fc:dc:4c:1b:97:ec:30:26:d4:ee:
         f9:ec:d9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----