Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/f4ca78e6abe0d69395d2bf364b6f25e27c45c23d.roa
File:                     f4ca78e6abe0d69395d2bf364b6f25e27c45c23d.roa (raw, json)
Hash identifier:          S/RqOJJlsGy9i5SfjdYnXM/D/MXtaMEyaT7Rm5lnd4I=
Subject key identifier:   66:B3:B5:33:84:66:BF:E0:9E:78:A0:78:25:38:A5:B9:3E:D0:F0:8C
Certificate issuer:       /CN=0c9d15f0b793ce01d9a5e1070b5047a9e1264605
Certificate serial:       0942A2
Authority key identifier: 0A:D2:99:50:58:AC:0F:87:83:2C:1C:9E:40:2B:35:E8:38:B8:BB:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/f4ca78e6abe0d69395d2bf364b6f25e27c45c23d.roa
Signing time:             Wed 24 Mar 2021 14:35:01 +0000
ROA not before:           Wed 24 Mar 2021 14:35:01 +0000
ROA not after:            Tue 24 Mar 2026 14:35:01 +0000
asID:                     61463
IP address blocks:        2801:0:3c0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606882 (0x942a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c9d15f0b793ce01d9a5e1070b5047a9e1264605
        Validity
            Not Before: Mar 24 14:35:01 2021 GMT
            Not After : Mar 24 14:35:01 2026 GMT
        Subject: CN=f4ca78e6abe0d69395d2bf364b6f25e27c45c23d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dc:88:5a:1e:58:a0:ec:89:87:46:74:4f:41:
                    d1:35:20:5e:6a:8c:eb:a1:d4:38:dc:91:5b:19:1a:
                    09:da:43:16:ad:4a:1f:b0:fa:53:99:d4:a7:05:2d:
                    ac:d2:51:26:75:c1:ca:fd:5b:2a:1d:73:20:4a:3e:
                    3e:62:b3:88:a2:6a:ab:23:07:2d:39:bb:d4:24:75:
                    ab:fc:f3:dc:cb:66:47:13:d0:71:fd:5a:fe:dc:41:
                    b8:4d:6e:e8:03:08:ac:82:ea:d9:5e:3f:2b:b9:f9:
                    23:f4:93:11:e1:26:55:a7:83:2a:c0:8a:4d:5e:7f:
                    da:ed:db:89:b0:73:1f:79:bf:c7:65:fc:f9:86:02:
                    f6:cf:74:7b:cd:3f:b7:86:51:32:ee:9d:68:e8:b7:
                    bd:d4:61:0d:02:14:f7:02:e9:ac:b0:a3:4a:ec:27:
                    24:3b:ca:de:6c:db:c3:49:4d:56:31:31:66:1e:58:
                    89:ed:a8:fb:4f:9c:9b:1c:62:db:59:76:9c:0e:10:
                    37:d9:6c:6e:e3:17:cf:7d:3c:d3:90:39:98:94:17:
                    77:5f:86:28:5c:d8:70:3d:e9:2c:bf:4f:ad:a3:8e:
                    f5:85:df:5d:7b:3a:7f:6e:e3:d6:47:1c:0a:9f:08:
                    3e:6b:7f:09:fa:d5:f9:ed:d6:f8:f9:3d:e1:7d:05:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B3:B5:33:84:66:BF:E0:9E:78:A0:78:25:38:A5:B9:3E:D0:F0:8C
            X509v3 Authority Key Identifier:
                keyid:0A:D2:99:50:58:AC:0F:87:83:2C:1C:9E:40:2B:35:E8:38:B8:BB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/f4ca78e6abe0d69395d2bf364b6f25e27c45c23d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3fa6cc67-24fe-4e06-b7cf-5f3506d1d2a5/0c9d15f0b793ce01d9a5e1070b5047a9e1264605.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:32:b8:cb:17:a7:86:c5:15:d4:b1:0b:ca:c2:2b:2e:5b:09:
         d7:45:ee:de:a9:02:08:65:cf:4d:f0:3e:7a:ca:85:97:16:12:
         82:1d:17:1a:e3:d4:81:c3:fe:0f:c4:89:d6:71:c6:cb:cd:3e:
         22:d7:17:2b:f3:04:b0:fc:0f:63:e2:1e:80:72:42:f0:2c:64:
         45:9c:5d:60:0c:6f:19:ec:83:e6:c0:a6:8f:e3:83:2d:77:66:
         ce:2e:bf:ca:1d:ed:fa:05:18:bb:ca:d3:a7:0e:83:8a:38:bd:
         14:b9:49:42:45:fc:dc:bf:9f:a6:57:1c:f0:7d:9c:61:74:f7:
         be:5b:2d:c3:b5:c9:2b:40:9d:89:4a:83:de:3d:1e:6e:8f:4a:
         ff:a1:12:d9:71:5a:d8:55:8b:3c:b2:e9:38:da:4f:5d:ee:27:
         a6:7f:f5:d6:dd:23:51:ec:11:d1:45:b4:9a:55:8b:54:d1:24:
         f0:7d:a1:ad:97:7b:b1:c2:ed:a8:26:8b:18:2a:98:04:50:40:
         71:d6:f3:90:09:41:d2:e4:4e:7e:a1:65:a1:d1:27:49:47:1b:
         94:8e:8c:00:91:8c:5c:5a:4f:17:c4:c7:c4:dc:0c:8a:dc:f0:
         69:12:2c:ac:9e:00:40:1a:37:40:c0:ef:2d:1e:a0:13:52:de:
         4e:a1:cf:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----