Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/aa0e42125ebf2e0ca32da320af4853d3c427d3be.roa
File:                     aa0e42125ebf2e0ca32da320af4853d3c427d3be.roa (raw, json)
Hash identifier:          Je1iVeBDrDuVVCXg4l6Y4pkXPTaJXp+lip206T7KgDA=
Subject key identifier:   C0:0C:0D:16:3A:71:1F:EE:F1:0D:08:EC:BA:DF:75:E1:F5:9B:0E:DF
Certificate issuer:       /CN=9fcf3302c6615af1974dce9c8e8304499ee53acc
Certificate serial:       0D8A99
Authority key identifier: 0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fcf3302c6615af1974dce9c8e8304499ee53acc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/aa0e42125ebf2e0ca32da320af4853d3c427d3be.roa
Signing time:             Wed 24 Mar 2021 14:32:52 +0000
ROA not before:           Wed 24 Mar 2021 14:32:51 +0000
ROA not after:            Tue 24 Mar 2026 14:32:51 +0000
asID:                     264789
IP address blocks:        2803:38c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887449 (0xd8a99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fcf3302c6615af1974dce9c8e8304499ee53acc
        Validity
            Not Before: Mar 24 14:32:51 2021 GMT
            Not After : Mar 24 14:32:51 2026 GMT
        Subject: CN=aa0e42125ebf2e0ca32da320af4853d3c427d3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:76:e7:95:0d:03:38:24:cd:b5:15:3f:af:32:
                    4c:08:d9:28:ff:fb:b1:5c:35:14:4f:9d:d6:c8:f1:
                    e0:89:52:fe:b8:8e:0e:54:49:6e:fd:87:64:70:69:
                    3e:c6:fd:a6:b1:92:49:be:e6:c9:d0:02:ba:3b:40:
                    97:95:0a:9b:96:e0:f8:6b:3b:94:90:8a:fa:be:b6:
                    fd:0c:40:d1:80:5e:88:96:8d:b5:ec:c1:65:14:27:
                    82:da:3f:f7:66:ba:69:5a:71:37:42:14:b4:3e:34:
                    06:38:26:bd:9e:6e:f0:20:e7:4a:6f:9b:a5:db:cc:
                    40:13:4e:c9:fb:d6:74:4a:74:2e:92:bc:a3:a9:5e:
                    ab:ba:39:09:b8:4f:cd:81:d3:00:83:55:6c:e7:0c:
                    3d:bd:5b:a2:23:54:78:9d:00:28:8b:c0:21:b7:ae:
                    7b:3c:40:65:4a:71:24:0a:83:77:e9:d1:d5:9e:44:
                    1d:13:c2:fe:a5:c6:75:68:4a:a8:f0:64:20:a6:3c:
                    a7:ed:39:27:95:cd:1a:e0:a7:34:f1:5b:68:dd:99:
                    a5:a4:81:0a:1c:50:68:96:73:9b:80:e3:f8:57:be:
                    5e:10:66:09:80:5b:82:08:74:0c:21:4e:a3:78:4d:
                    8e:6d:09:3e:7b:df:f5:4f:b2:bc:f6:34:e9:3c:11:
                    36:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:0C:0D:16:3A:71:1F:EE:F1:0D:08:EC:BA:DF:75:E1:F5:9B:0E:DF
            X509v3 Authority Key Identifier:
                keyid:0C:2B:E8:0C:8A:F6:87:11:C5:E1:13:00:62:89:C4:8B:A8:1F:E8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fcf3302c6615af1974dce9c8e8304499ee53acc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/aa0e42125ebf2e0ca32da320af4853d3c427d3be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5c148db6-14b1-4240-92ed-f16b54c09a69/9fcf3302c6615af1974dce9c8e8304499ee53acc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:38c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:92:22:ed:54:9c:dc:fa:52:8c:5f:6a:0e:e8:5b:d4:0b:07:
         22:83:13:33:1c:d6:94:00:5c:04:9f:59:ec:1e:1b:3d:41:2a:
         c4:af:14:75:6a:84:45:96:87:ba:c4:c6:08:65:6c:42:bc:8e:
         82:d2:bf:cd:58:7e:0b:23:63:fb:7f:13:6c:24:51:17:f0:a8:
         6d:8b:2b:76:69:53:7d:92:f4:03:a8:67:c0:8a:18:70:2e:37:
         9b:ca:46:e4:da:68:8f:5a:dc:36:05:80:e5:31:6f:05:14:a3:
         45:48:38:1f:fc:f3:85:1a:57:a5:18:4b:e1:58:56:72:3c:ad:
         ce:00:a5:6c:3a:52:53:e7:9d:1a:0f:a3:eb:a5:25:47:29:1a:
         52:aa:ed:91:73:d2:63:18:9c:04:e6:cf:87:43:e9:ea:40:72:
         9f:9f:ae:9c:9f:a8:a0:d0:fe:9c:32:4d:fc:d8:cb:a7:cd:93:
         24:59:e7:6e:18:76:b3:d9:d1:4e:e4:f2:5b:12:5c:50:a8:be:
         29:52:97:53:c7:1b:51:e9:d0:b6:c9:6b:17:04:52:81:ca:64:
         7e:96:3a:35:ad:91:24:df:c5:01:f6:28:dd:91:19:58:f8:76:
         fb:eb:1c:67:68:56:78:71:a3:fe:d6:eb:01:42:13:cd:28:07:
         de:88:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----