Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/b599f9128e4d466ff2d986ec2dd2a866cdd1c272.roa
File:                     b599f9128e4d466ff2d986ec2dd2a866cdd1c272.roa (raw, json)
Hash identifier:          CUQVhdyueHMxQraE5MHwePS7FjIep0nBHjHj4xztKm4=
Subject key identifier:   8C:30:D7:6C:A6:DB:38:F1:47:7A:ED:E2:BB:1C:7E:46:00:04:2F:AD
Certificate issuer:       /CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
Certificate serial:       0D2690
Authority key identifier: C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/b599f9128e4d466ff2d986ec2dd2a866cdd1c272.roa
Signing time:             Wed 24 Mar 2021 14:42:24 +0000
ROA not before:           Wed 24 Mar 2021 14:42:24 +0000
ROA not after:            Tue 24 Mar 2026 14:42:24 +0000
asID:                     264773
IP address blocks:        2803:f0c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861840 (0xd2690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0042db77b74ea2762ddae10bb68f8cc86bcbb8ba
        Validity
            Not Before: Mar 24 14:42:24 2021 GMT
            Not After : Mar 24 14:42:24 2026 GMT
        Subject: CN=b599f9128e4d466ff2d986ec2dd2a866cdd1c272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ba:dd:a3:b9:39:03:8e:c3:cc:4b:8b:d6:09:
                    43:61:74:e5:37:a8:42:e8:9e:d8:03:17:6c:71:6b:
                    1c:03:cd:d0:f2:f6:0b:14:de:73:48:f6:c0:ef:44:
                    02:67:14:44:42:0d:bd:10:b8:cc:16:f9:f0:44:2f:
                    b0:a8:ff:79:61:26:db:b6:09:55:d2:3c:4c:b7:cd:
                    e2:90:cd:37:5d:c0:4c:31:94:51:95:3e:ce:09:a3:
                    df:d8:51:56:8e:7d:a2:c1:84:0e:81:65:94:6d:73:
                    fc:18:9d:e9:84:6a:6f:3c:c3:5a:ef:67:5e:60:85:
                    1a:3d:a5:f7:44:f8:74:2f:03:e5:d0:ef:4c:17:ec:
                    cd:74:20:f5:ae:0b:0a:46:6f:52:ea:60:18:af:80:
                    ee:f5:f6:76:75:8c:20:80:59:88:9c:b1:08:54:00:
                    21:6f:fc:1f:13:e3:97:b8:03:2e:cc:ec:fe:42:c9:
                    1e:6a:80:ca:f1:48:44:1f:71:d4:59:52:95:cb:20:
                    03:09:2f:63:86:2b:a4:60:b0:6b:41:a7:cb:0d:dc:
                    d7:8d:2c:6d:96:f3:77:da:81:67:53:41:f7:2a:fa:
                    8c:e7:54:90:47:db:eb:47:ab:9a:d6:47:e7:8b:cc:
                    df:b2:f1:c4:a8:66:71:5a:42:b4:4d:c3:01:3a:13:
                    9e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:30:D7:6C:A6:DB:38:F1:47:7A:ED:E2:BB:1C:7E:46:00:04:2F:AD
            X509v3 Authority Key Identifier:
                keyid:C2:16:FF:16:26:BA:27:D4:8A:94:8F:2A:9B:C2:C7:46:A7:73:8C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/b599f9128e4d466ff2d986ec2dd2a866cdd1c272.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ced7349-5dfc-4b6f-b997-ca81af877934/0042db77b74ea2762ddae10bb68f8cc86bcbb8ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:08:a6:92:fb:99:9a:06:2b:c2:9b:34:5b:59:bc:ad:29:85:
         c5:63:0d:d8:1a:c7:1f:66:e5:df:11:d3:6f:a9:f5:23:3e:d4:
         cb:4b:c2:97:29:d2:7c:0c:a7:25:b7:5e:82:0e:20:07:ec:58:
         29:e2:e4:a8:1d:49:3f:4a:64:62:60:82:72:6f:71:97:f4:a2:
         6e:34:17:c6:7b:c5:f6:df:86:1e:72:45:da:1c:7c:ce:d6:9e:
         08:3d:a8:f0:5f:74:ec:82:1e:c9:08:00:b5:bc:f0:cd:df:19:
         60:f6:61:65:54:9a:9a:72:15:a5:71:9d:5e:c4:49:98:4a:c8:
         7c:87:ea:2f:e1:20:20:ce:02:17:06:4f:2b:7b:1a:74:95:43:
         3b:e9:1e:c6:52:d4:d4:2a:bc:eb:60:17:10:3a:5b:6f:70:b6:
         9c:cd:91:60:fa:ec:f1:9f:b7:10:46:69:21:7d:3b:19:f4:e7:
         59:a8:93:54:d8:9b:b8:b2:04:0a:28:5a:91:04:15:74:3e:0e:
         49:7c:91:5d:90:37:0f:1c:6a:2f:f3:87:71:58:02:c1:2e:8d:
         79:7d:91:ff:75:61:34:c2:d0:ac:4a:c5:74:db:d9:1d:3d:0f:
         92:67:e9:2c:d8:d6:12:da:f1:dc:a3:db:30:7d:15:50:f8:88:
         54:50:ac:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----