Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/58e9ff9cd345bd080ee63f60ff98ad095e864cd7.roa
File:                     58e9ff9cd345bd080ee63f60ff98ad095e864cd7.roa (raw, json)
Hash identifier:          d8kWSw7ExGMerrWNcGHXPAOovyR/5I5BURrTZOtd6Xk=
Subject key identifier:   31:A8:39:01:4F:FC:B9:BA:8B:26:9F:7E:52:69:0C:C9:5A:9E:87:2B
Certificate issuer:       /CN=9bec122f444854416c46c5b459d8853cc0cb2e76
Certificate serial:       0C438C
Authority key identifier: 00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/58e9ff9cd345bd080ee63f60ff98ad095e864cd7.roa
Signing time:             Wed 24 Mar 2021 14:48:00 +0000
ROA not before:           Wed 24 Mar 2021 14:47:59 +0000
ROA not after:            Tue 24 Mar 2026 14:47:59 +0000
asID:                     266809
IP address blocks:        2803:60a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803724 (0xc438c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bec122f444854416c46c5b459d8853cc0cb2e76
        Validity
            Not Before: Mar 24 14:47:59 2021 GMT
            Not After : Mar 24 14:47:59 2026 GMT
        Subject: CN=58e9ff9cd345bd080ee63f60ff98ad095e864cd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:f9:a0:5f:91:76:0b:e8:a9:9b:68:4c:c1:
                    6e:7f:58:c4:98:a5:d3:56:79:2c:ac:cd:50:84:b9:
                    90:df:fe:2d:a9:fd:82:91:bb:47:77:0a:5c:c9:14:
                    e4:d8:76:09:3a:97:14:1e:a2:69:53:d9:0d:16:d9:
                    b8:bd:3d:4f:5b:23:64:75:e4:fd:47:d5:5e:12:ed:
                    4d:08:95:fe:79:f4:7e:e1:05:ac:b6:35:86:95:3b:
                    c5:27:3b:d5:56:24:54:73:0b:a1:0a:78:c6:9d:14:
                    4c:a6:ab:f8:aa:19:fa:9b:bf:c8:7e:be:75:97:d2:
                    8f:2f:6b:7c:52:15:93:3b:65:b8:67:dd:c0:90:5b:
                    78:f9:98:0e:ff:38:19:04:6f:ef:f0:d2:23:7c:46:
                    70:7c:ac:d1:f1:3f:32:06:22:b0:c7:f9:f5:cd:01:
                    8e:86:35:28:9e:39:e9:31:14:a3:1a:4a:94:fe:94:
                    35:36:67:a3:5a:7e:78:72:a0:0e:ea:d0:2f:d8:1f:
                    77:2c:00:10:46:a4:d1:a9:c4:20:a9:05:88:44:21:
                    c3:0f:73:a0:a4:47:9e:5f:6e:67:ca:38:d6:b5:12:
                    bc:0f:cf:40:2c:d7:2d:81:d0:92:db:0d:eb:30:c9:
                    fc:0d:2a:ff:e1:a3:6f:ef:ee:9e:c2:25:aa:43:fb:
                    8a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A8:39:01:4F:FC:B9:BA:8B:26:9F:7E:52:69:0C:C9:5A:9E:87:2B
            X509v3 Authority Key Identifier:
                keyid:00:36:54:27:4E:AD:70:E0:1B:DF:36:7A:94:A8:B7:5F:75:8A:73:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bec122f444854416c46c5b459d8853cc0cb2e76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/58e9ff9cd345bd080ee63f60ff98ad095e864cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55a48b38-424a-4e49-bcf6-18b3cb12251c/9bec122f444854416c46c5b459d8853cc0cb2e76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:60a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:2d:a6:2b:0c:ad:1d:d2:7d:1d:2e:e2:c7:b7:10:49:51:56:
         24:9b:36:6c:ff:b3:c4:94:cc:9c:ff:64:0d:7d:50:3b:34:83:
         1c:82:af:3f:7c:dd:70:13:67:55:48:52:11:61:57:33:02:e6:
         18:46:87:93:c9:79:ce:bf:91:d4:ed:fd:27:00:3d:1b:a1:6c:
         44:b7:64:8e:ac:33:67:9f:d9:fe:87:ca:dc:28:8f:e1:4b:f1:
         94:fd:82:76:61:a1:5e:8a:8e:52:4c:ac:0f:ab:a9:f6:89:96:
         db:97:44:3b:e3:ed:8a:17:f2:3a:8d:84:cb:47:54:9d:95:52:
         c5:72:5e:a6:81:68:14:ac:d4:c5:6a:b7:8f:db:5d:80:78:5b:
         86:78:bb:10:01:07:26:24:5b:c4:bc:e4:1f:01:18:16:be:f0:
         fd:9f:1a:76:43:13:4e:87:ae:e2:44:4b:3b:b7:41:1b:54:d7:
         ed:38:a8:d7:71:07:0e:76:e9:d9:26:5f:d3:e8:3f:98:53:bb:
         20:a7:f6:d0:18:a7:a4:d9:bd:f6:c3:33:35:f0:10:df:da:31:
         4d:d5:b7:6b:39:6c:a4:6c:c4:e2:62:04:b7:3d:9b:ff:63:fb:
         68:37:cf:ec:31:d4:17:2f:46:38:03:99:14:7c:df:85:1c:b9:
         39:81:ba:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----