Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/ed5f337e80c99f265d7d256028d988b714639ec1.roa
File:                     ed5f337e80c99f265d7d256028d988b714639ec1.roa (raw, json)
Hash identifier:          p5Cskzlt+Y+3X3OyZVwM7un3W/UqR8/1xoTNzq6iFP4=
Subject key identifier:   E1:F6:8D:01:FD:73:B9:C3:C7:7B:0A:69:B2:D6:11:AE:9C:09:DE:26
Certificate issuer:       /CN=4b7263ae996022ab55e14b7db69a858557a1bac5
Certificate serial:       011668
Authority key identifier: 95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/ed5f337e80c99f265d7d256028d988b714639ec1.roa
Signing time:             Tue 03 Aug 2021 01:10:09 +0000
ROA not before:           Tue 13 Jul 2021 03:00:00 +0000
ROA not after:            Thu 13 Jul 2023 03:00:00 +0000
asID:                     271927
IP address blocks:        2803:ea10:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71272 (0x11668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b7263ae996022ab55e14b7db69a858557a1bac5
        Validity
            Not Before: Jul 13 03:00:00 2021 GMT
            Not After : Jul 13 03:00:00 2023 GMT
        Subject: CN=ed5f337e80c99f265d7d256028d988b714639ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b1:29:2e:7f:ce:9a:bf:65:fb:63:62:36:32:
                    ca:b9:f9:34:a5:2d:3d:b9:05:62:58:37:2b:17:52:
                    89:49:e0:d8:65:87:99:85:73:e6:80:93:fe:dd:97:
                    8e:77:9e:f6:31:0b:64:d9:67:b5:c9:37:6a:1a:87:
                    e1:ef:be:7c:e7:dc:f1:33:ff:17:f0:73:a5:9a:1d:
                    a5:e7:b0:ec:a0:34:b6:1b:db:80:3d:0b:e4:ad:68:
                    2c:9b:2d:4d:47:5b:09:16:1d:e9:21:ec:18:77:39:
                    4e:16:4f:80:a4:c9:a8:78:0d:78:3e:b2:cb:c1:dc:
                    fc:40:eb:e0:72:da:6f:ef:b5:8a:1d:f6:42:fc:97:
                    d0:25:8a:cb:4e:ca:bf:ea:72:99:f4:0b:70:57:be:
                    78:48:6d:e1:a2:ab:fb:87:8e:1f:df:69:ca:99:61:
                    87:91:48:20:26:e9:d7:1c:16:15:43:38:40:bf:de:
                    b3:68:78:86:a6:13:0b:b9:62:6f:d2:d3:93:1d:25:
                    d2:a2:46:47:8c:b1:66:43:b0:53:45:9c:bd:3c:08:
                    ea:43:c7:67:d6:40:62:a3:f9:f3:e4:19:8f:50:ec:
                    76:b5:9b:a5:28:9d:9a:65:de:d9:02:16:5d:d6:2e:
                    32:44:77:d3:9e:6b:62:29:03:51:3e:83:cc:10:61:
                    a4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F6:8D:01:FD:73:B9:C3:C7:7B:0A:69:B2:D6:11:AE:9C:09:DE:26
            X509v3 Authority Key Identifier:
                keyid:95:02:9C:37:F3:B7:9D:EC:7E:C8:0A:A5:F3:E2:48:0A:C6:76:96:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b7263ae996022ab55e14b7db69a858557a1bac5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/ed5f337e80c99f265d7d256028d988b714639ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e237a1f-5c7f-421f-afc0-59fb4f330696/4b7263ae996022ab55e14b7db69a858557a1bac5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea10:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:60:47:a4:e2:40:c3:d3:90:22:f6:6f:ec:74:02:9e:cb:95:
         ab:5e:44:73:04:c9:f2:cc:6b:fb:64:77:a4:be:31:86:ae:34:
         7d:17:e9:86:dc:43:4f:2a:7c:92:30:91:4f:e3:20:fd:c9:1e:
         e0:72:d5:50:6b:90:cc:c2:58:e1:eb:be:9b:72:9b:4f:49:c9:
         a4:ae:0a:9c:ee:da:7c:8a:6d:72:1b:03:bf:d5:ad:f6:bc:7c:
         39:3e:89:9f:bf:1b:de:25:cb:96:df:a6:a3:dc:3f:93:6a:0a:
         60:43:af:b3:d3:11:38:2c:46:1f:18:85:75:a2:77:1c:3a:ff:
         84:db:7b:a8:78:82:7c:5d:f1:37:be:df:ee:5e:4e:c5:b4:b4:
         68:51:01:50:8a:11:ec:c2:46:72:f9:ad:51:19:5c:fd:b3:e6:
         55:15:14:53:d8:63:d7:8a:29:a0:76:64:55:3f:92:65:9f:4d:
         be:b6:ee:b8:48:44:d5:af:a0:e9:44:1c:85:54:66:1f:09:75:
         06:6a:50:ad:d7:a8:1c:61:c8:1a:a8:66:c8:a6:98:ac:bf:57:
         c1:88:c6:19:95:ec:8d:c7:43:6c:20:9c:31:14:08:53:8b:33:
         9c:ac:ac:5d:9f:d1:90:d6:d9:56:df:d3:6f:03:05:f1:40:ae:
         05:83:c7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----