Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/c7cc54aa9b84e0d587697b208c79c518dee9b007.roa
File:                     c7cc54aa9b84e0d587697b208c79c518dee9b007.roa (raw, json)
Hash identifier:          GKzD/IH8O3aoRzKweHlvG6mxXViCH04Yd68gw4jaZ1k=
Subject key identifier:   25:5F:20:6A:64:6F:4B:20:64:E2:8A:04:ED:C9:98:89:7B:30:4D:62
Certificate issuer:       /CN=76ccd0d67eef4385f6211f2abd0d8f9b34227ca5
Certificate serial:       01B9
Authority key identifier: F2:87:90:48:2C:F5:B5:65:13:0D:DF:B5:D9:19:9E:9E:A7:11:2F:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76ccd0d67eef4385f6211f2abd0d8f9b34227ca5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/c7cc54aa9b84e0d587697b208c79c518dee9b007.roa
Signing time:             Tue 17 Aug 2021 17:50:39 +0000
ROA not before:           Tue 17 Aug 2021 03:00:00 +0000
ROA not after:            Thu 17 Aug 2023 03:00:00 +0000
asID:                     174
IP address blocks:        2803:9be0:ff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ccd0d67eef4385f6211f2abd0d8f9b34227ca5
        Validity
            Not Before: Aug 17 03:00:00 2021 GMT
            Not After : Aug 17 03:00:00 2023 GMT
        Subject: CN=c7cc54aa9b84e0d587697b208c79c518dee9b007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:06:e8:0a:56:e6:a7:4d:b4:4d:bb:15:c6:
                    e2:33:9f:88:26:f9:85:c6:35:08:31:5a:3a:b7:6b:
                    e7:75:37:73:6e:33:dd:d7:a9:10:df:cc:a7:ac:d1:
                    28:79:ac:bb:38:b3:dc:f3:37:1c:d5:7b:74:15:ea:
                    4f:f5:69:b0:57:30:b4:f3:d3:65:ae:72:ff:33:d8:
                    0d:04:35:6d:81:3a:5e:b2:d1:68:ce:a0:be:9f:3a:
                    41:9b:6f:7a:b3:90:f0:f2:f2:90:b9:c8:ee:da:af:
                    70:a7:3f:c9:62:1b:ef:9f:5f:fe:38:df:93:bb:5b:
                    3e:6c:3b:d1:50:a6:97:f8:9d:c0:c2:ac:67:b3:dc:
                    d4:7e:b2:82:b2:4b:36:dd:5d:02:99:3f:ce:58:31:
                    96:b6:bf:e8:74:69:dd:9a:b8:21:cf:94:8f:45:8d:
                    88:93:c6:6f:8f:25:04:af:a8:a2:b4:c2:e2:eb:a4:
                    c2:f3:6e:1c:25:40:6a:d2:2b:a0:5d:45:e3:e9:de:
                    f2:9a:5b:b8:ed:b0:49:4d:5e:33:16:1b:68:6f:5b:
                    44:01:cd:62:10:88:2a:b8:d4:03:e7:1f:94:5f:bd:
                    15:5f:1f:bf:09:91:95:bd:2a:fe:1f:31:6c:39:6e:
                    44:c4:49:cc:7d:c1:6a:3a:8f:dc:e0:2b:1d:50:88:
                    f4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5F:20:6A:64:6F:4B:20:64:E2:8A:04:ED:C9:98:89:7B:30:4D:62
            X509v3 Authority Key Identifier:
                keyid:F2:87:90:48:2C:F5:B5:65:13:0D:DF:B5:D9:19:9E:9E:A7:11:2F:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76ccd0d67eef4385f6211f2abd0d8f9b34227ca5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/c7cc54aa9b84e0d587697b208c79c518dee9b007.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63c9b956-6a57-4ed4-80ef-e39b568c284f/76ccd0d67eef4385f6211f2abd0d8f9b34227ca5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9be0:ff::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:38:c0:a4:85:ae:fd:2e:74:cb:51:10:32:24:41:45:06:88:
         eb:3f:5c:e5:a1:4f:87:95:3d:43:7f:37:77:d6:13:f8:72:38:
         8a:93:11:b9:86:b0:86:43:fd:b2:c0:78:59:e7:04:a1:8f:61:
         4d:9a:38:4e:09:54:2a:3a:f9:6f:59:eb:6c:88:4e:b2:b4:d8:
         76:26:ce:dd:74:2e:65:f1:17:8f:5a:97:d2:ee:78:2e:b6:68:
         44:6b:d6:67:5e:47:6d:1f:4a:1b:11:9c:a1:35:1e:d8:7f:e7:
         e3:bd:db:07:d0:86:cd:0b:07:36:49:b0:22:ac:03:dc:01:0a:
         6f:f3:26:a6:e6:29:b2:5c:68:e8:7f:ee:82:ed:01:3a:45:7a:
         46:ec:10:d9:ee:4c:5b:d7:2f:76:3f:ba:2a:aa:2e:50:49:72:
         d2:42:8d:35:50:0e:84:3d:d9:50:e4:1d:09:f5:55:f2:c9:7a:
         22:0e:fb:52:0f:e2:0a:35:25:b1:8e:45:4c:65:d0:93:16:68:
         ba:aa:e5:30:ec:8a:ef:6f:d2:db:d6:d1:5f:1f:80:ab:6a:93:
         2a:db:ea:a4:4c:c7:6d:54:c9:b5:35:04:96:d5:8f:9d:db:9c:
         f1:5c:e5:09:9e:a3:5a:e0:9f:dc:fc:04:b0:57:37:51:aa:52:
         77:54:1a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----