Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/fd20cf9009350c79fb26451682613da21b7fdeea.roa
File:                     fd20cf9009350c79fb26451682613da21b7fdeea.roa (raw, json)
Hash identifier:          RchSkRrVB1sMhtbcCQ42F/Cz4aaRk+vECCVfsLx9//o=
Subject key identifier:   D5:08:9D:BC:CF:E6:3A:C6:6A:ED:05:AB:94:DA:DC:04:FA:64:D7:AA
Certificate issuer:       /CN=702a8ccc0bc2940e8862741717474a0961649f65
Certificate serial:       0D0378
Authority key identifier: 2A:BE:3A:F9:99:D4:0C:CA:AC:54:7E:5C:BF:25:FA:51:AF:C5:C0:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/702a8ccc0bc2940e8862741717474a0961649f65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/fd20cf9009350c79fb26451682613da21b7fdeea.roa
Signing time:             Wed 24 Mar 2021 14:35:30 +0000
ROA not before:           Wed 24 Mar 2021 14:35:30 +0000
ROA not after:            Tue 24 Mar 2026 14:35:30 +0000
asID:                     18747
IP address blocks:        2801:10:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852856 (0xd0378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702a8ccc0bc2940e8862741717474a0961649f65
        Validity
            Not Before: Mar 24 14:35:30 2021 GMT
            Not After : Mar 24 14:35:30 2026 GMT
        Subject: CN=fd20cf9009350c79fb26451682613da21b7fdeea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:3f:c0:f7:ac:bc:d3:9d:39:a8:ac:39:4b:
                    db:29:7e:4f:db:f4:bb:ae:33:35:b8:83:f6:2b:07:
                    45:d1:f3:b3:94:39:a4:81:65:7c:d9:96:b5:9e:73:
                    d0:10:51:6e:ca:ff:a0:8d:6a:14:84:f1:51:4b:3f:
                    22:32:85:d6:64:73:08:0e:c2:b2:00:95:7f:ed:5b:
                    94:53:6b:51:62:40:6a:96:e2:1c:1b:0b:b1:7d:41:
                    f5:f8:d5:45:c2:b3:7b:81:5e:5c:4b:31:81:08:6e:
                    30:ad:a2:30:49:7d:8d:72:0c:85:fb:27:04:e2:1e:
                    32:fe:9f:fd:9c:3d:30:d0:7d:0b:1a:f3:13:87:e1:
                    d3:7b:c2:99:48:dc:26:2b:ca:0f:d1:f1:93:49:7c:
                    54:e7:f2:ba:18:51:14:76:e7:36:ef:0d:22:36:5f:
                    39:97:36:e6:c7:79:6f:66:82:a9:e2:61:ae:37:07:
                    83:87:9c:b7:86:a2:ac:ed:77:3a:9b:eb:b7:9a:da:
                    df:3b:1c:8f:2b:e5:ce:43:5c:76:01:f9:ec:b3:8a:
                    78:b8:63:38:36:b4:ee:f3:57:91:63:56:27:5b:a8:
                    3f:f2:f5:ad:9b:f3:75:51:e6:c0:a0:74:19:94:b3:
                    6f:33:08:88:dd:28:ff:b6:9b:60:ca:ac:88:bd:3a:
                    84:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:08:9D:BC:CF:E6:3A:C6:6A:ED:05:AB:94:DA:DC:04:FA:64:D7:AA
            X509v3 Authority Key Identifier:
                keyid:2A:BE:3A:F9:99:D4:0C:CA:AC:54:7E:5C:BF:25:FA:51:AF:C5:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/702a8ccc0bc2940e8862741717474a0961649f65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/fd20cf9009350c79fb26451682613da21b7fdeea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:4e:59:28:1a:e8:69:b0:01:b3:84:9b:b0:6f:e4:2f:58:3e:
         ff:e1:86:51:fb:f1:93:24:12:b1:0c:9b:2d:c9:c0:b8:1f:67:
         99:4d:2d:7f:5f:00:ab:61:74:ed:b4:f7:07:7c:ce:6f:79:19:
         22:85:db:28:6a:d8:56:55:6c:7d:91:87:bf:cd:bb:39:4f:41:
         56:99:46:a8:1f:68:76:73:ec:24:b5:a0:3d:15:b2:d4:de:18:
         63:d5:13:02:b8:02:7f:62:78:c1:49:32:99:58:84:4d:a1:ec:
         a8:43:8c:04:8f:ea:a7:8c:0f:8f:4a:76:9c:82:d4:e6:67:b4:
         c3:36:4a:3e:1d:4c:a4:56:00:a2:fc:ee:34:bc:02:8d:ee:09:
         c6:a3:d7:39:98:18:f3:05:b7:12:64:4a:93:b9:cf:0a:a6:8d:
         84:5d:34:73:43:db:a9:b7:b8:3f:5f:cf:2e:72:b6:60:ad:7a:
         59:86:ff:35:af:55:6a:aa:e2:5b:28:12:b9:54:ec:2e:2f:7a:
         cf:06:78:2a:f7:05:ba:49:49:e1:00:54:8d:aa:29:81:d6:64:
         c9:d3:94:7f:a6:aa:5f:bc:28:99:27:31:2a:9d:08:a7:6a:08:
         a7:1e:a6:5c:28:46:97:3a:7d:3f:92:a1:a1:fa:ae:dc:61:25:
         cd:c9:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----