Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/ee7e154660c554b6dff8197e512a853f000c890a.roa
File:                     ee7e154660c554b6dff8197e512a853f000c890a.roa (raw, json)
Hash identifier:          3rEP8Gm5r/TfdFXLj7ImYhL+YA3YUk/yr8kXiILU1pM=
Subject key identifier:   0B:0D:91:3E:3B:B0:92:E8:07:B4:B0:6A:A4:56:8E:EF:74:D7:3B:3A
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       1214E2
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/ee7e154660c554b6dff8197e512a853f000c890a.roa
Signing time:             Mon 23 Aug 2021 15:27:57 +0000
ROA not before:           Mon 23 Aug 2021 15:27:57 +0000
ROA not after:            Sun 23 Aug 2026 15:27:57 +0000
asID:                     16814
IP address blocks:        2800:40:12::/47 maxlen: 48
                          2800:40:14::/46 maxlen: 48
                          2800:40:18::/46 maxlen: 48
                          2800:40:28::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184994 (0x1214e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Aug 23 15:27:57 2021 GMT
            Not After : Aug 23 15:27:57 2026 GMT
        Subject: CN=ee7e154660c554b6dff8197e512a853f000c890a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d8:9a:00:9a:e9:8f:c1:99:64:a5:21:b9:22:
                    36:80:70:88:fa:89:25:42:a2:d3:d9:22:db:0b:8d:
                    ab:75:eb:75:63:4b:e7:2f:d8:fa:9c:2f:67:1f:9a:
                    1b:21:bd:ca:81:ac:53:b7:d8:f5:48:c3:61:41:62:
                    e3:cc:cd:cf:06:dd:69:b5:4a:2e:02:05:36:f3:2e:
                    ea:e7:c5:aa:33:41:ca:ec:c6:41:dc:4d:51:c2:de:
                    85:97:12:2a:b3:2b:f4:54:35:8a:45:3f:c7:c2:c5:
                    f2:97:11:e4:be:6f:72:22:5a:c9:c3:8a:84:e1:b4:
                    89:98:11:a3:0f:17:66:0e:13:6f:5e:1d:fd:16:e7:
                    fd:d2:fa:66:bc:ef:19:14:ef:b5:fa:e0:ce:62:69:
                    78:55:1c:1d:de:bd:cc:44:26:e9:f2:b8:86:83:35:
                    55:55:d3:82:37:f5:cc:91:e8:3e:54:5f:20:c6:6e:
                    4e:26:2d:93:51:fe:3f:e7:1e:3b:9b:85:d6:a4:12:
                    ac:f6:d7:30:b3:3c:fe:a1:20:c5:5c:f7:5e:33:58:
                    ca:72:12:a1:be:bc:46:5b:b5:b4:29:97:b9:3b:62:
                    36:38:5c:48:5e:36:4e:41:8a:99:41:2b:cc:8a:84:
                    a3:23:19:0d:9c:58:23:a8:51:58:2f:3c:26:2f:78:
                    72:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0D:91:3E:3B:B0:92:E8:07:B4:B0:6A:A4:56:8E:EF:74:D7:3B:3A
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/ee7e154660c554b6dff8197e512a853f000c890a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:40:12::-2800:40:1b:ffff:ffff:ffff:ffff:ffff
                  2800:40:28::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:19:f3:19:5f:b7:1a:a0:fb:49:b6:22:a3:df:5e:f4:d8:4e:
         bd:87:42:48:36:3c:11:d0:c3:71:8a:63:c4:9e:24:bd:22:4d:
         18:22:5c:c4:03:02:d3:51:b0:31:57:9f:9f:97:e6:05:44:c0:
         10:33:ea:01:fb:21:0b:48:b7:9b:81:44:11:0e:1a:0d:41:02:
         40:e0:20:90:9f:7f:51:8e:cb:ec:1f:80:74:12:ec:fd:76:85:
         32:64:e3:ef:2e:3b:a2:71:01:cd:5e:a2:9d:5f:46:69:d7:ae:
         ea:f8:ef:e1:20:99:9c:70:bc:2c:b4:93:1d:49:d5:b4:46:bd:
         7a:4e:d1:48:2e:07:0d:ac:38:5b:30:6d:b2:8e:af:31:d4:6f:
         2d:8f:42:81:62:6e:99:76:f3:5c:d6:7c:63:95:97:d8:ca:aa:
         20:88:99:63:64:8a:25:5e:5a:d2:bd:6d:9c:27:f2:42:f3:58:
         03:9f:47:2d:d8:9e:e6:c6:87:a5:e5:21:74:ac:b9:69:0d:a2:
         a1:8f:ea:26:84:5f:77:5a:d0:45:ae:a9:0c:bd:e6:a7:ac:02:
         13:79:11:e6:87:2a:2a:e1:de:d0:c4:78:91:3e:ec:c9:50:f5:
         8d:e1:7a:56:ef:e9:e3:b2:fb:39:dc:ff:42:06:f0:3d:3f:bc:
         50:dc:0c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----