Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/4a4a10df5866f00d807d2d01c814f30a6292e4f5.roa
File:                     4a4a10df5866f00d807d2d01c814f30a6292e4f5.roa (raw, json)
Hash identifier:          TNxh/jOqXj+i3XCbAwejP4zRQH4f6ntnHTUmSeKTUtY=
Subject key identifier:   B3:CE:C5:BD:85:4E:A4:CF:C9:1B:6B:E2:A4:4A:F6:2D:57:1C:FF:0B
Certificate issuer:       /CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
Certificate serial:       0D5FB7
Authority key identifier: AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/4a4a10df5866f00d807d2d01c814f30a6292e4f5.roa
Signing time:             Wed 24 Mar 2021 14:41:30 +0000
ROA not before:           Wed 24 Mar 2021 14:41:29 +0000
ROA not after:            Tue 24 Mar 2026 14:41:29 +0000
asID:                     52458
IP address blocks:        2803:480::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876471 (0xd5fb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cebcc65db675ffc3185449c18bd433794ea8ca5a
        Validity
            Not Before: Mar 24 14:41:29 2021 GMT
            Not After : Mar 24 14:41:29 2026 GMT
        Subject: CN=4a4a10df5866f00d807d2d01c814f30a6292e4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:68:b1:7a:0b:be:71:c9:04:83:f0:2f:69:66:
                    ed:1a:91:ce:c3:09:43:94:be:71:97:d8:11:1d:67:
                    09:5f:a3:9a:9c:ce:b8:5b:50:2f:14:e1:eb:55:70:
                    46:b2:5d:d5:f7:2b:d2:45:ab:73:75:8e:8b:78:15:
                    43:fc:7d:a3:e5:5a:9c:25:b2:4c:da:ba:76:c6:72:
                    be:af:d9:29:6e:e0:9e:39:fc:21:67:c1:fc:3a:3d:
                    3c:22:83:df:c6:8d:86:1b:df:5e:5b:0a:dc:74:6f:
                    ed:c5:1d:be:bb:27:fb:b4:c5:44:3d:a7:01:6a:3c:
                    77:c4:63:4c:ae:fd:63:1a:cd:9c:fb:6e:76:ee:1a:
                    bc:d4:e3:24:17:44:c6:12:9e:ac:bd:84:67:be:8b:
                    0a:61:60:e1:81:69:d4:1d:ef:5c:10:b9:22:1c:0b:
                    64:b2:48:37:77:3d:08:d4:e3:45:48:0f:de:29:73:
                    d7:3d:8f:72:17:89:c6:6b:6e:de:73:14:73:b9:e3:
                    7f:b4:f5:c5:19:dd:fb:69:62:44:b9:41:50:98:a0:
                    5e:97:94:cd:0d:8d:ba:a5:65:17:a0:53:93:1e:5d:
                    dc:85:6e:ab:c5:46:a8:dc:f3:f9:f5:67:cc:2b:80:
                    d8:14:a5:2b:c1:35:39:50:c3:a2:f0:a2:7f:cf:d9:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CE:C5:BD:85:4E:A4:CF:C9:1B:6B:E2:A4:4A:F6:2D:57:1C:FF:0B
            X509v3 Authority Key Identifier:
                keyid:AB:76:18:30:2C:32:35:53:57:29:DB:72:25:AB:2C:76:5C:95:FE:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cebcc65db675ffc3185449c18bd433794ea8ca5a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/4a4a10df5866f00d807d2d01c814f30a6292e4f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/67dc58cb-184d-4580-b850-0d8f1f3b8728/cebcc65db675ffc3185449c18bd433794ea8ca5a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:480::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:df:dc:8f:ee:26:4b:80:5e:f2:67:16:3d:f9:0d:ef:e9:6a:
         a7:fc:94:c4:61:6f:8f:17:0b:b0:94:46:3d:cf:b8:ba:db:ce:
         63:8b:71:10:74:e4:d0:0e:73:96:5d:d0:5b:92:08:ce:3a:d8:
         0c:ff:ef:97:95:04:8d:6a:35:37:b0:1c:a0:de:63:dd:2b:e5:
         3c:81:c1:be:fc:98:f2:8c:56:dc:0c:ee:aa:2f:ba:7e:73:e5:
         09:17:c5:d8:9f:fc:f2:f1:4b:1b:f0:68:38:12:ab:35:5b:4e:
         75:88:c3:9d:3a:d3:c8:ba:52:88:77:a1:87:4a:5a:b8:d8:ba:
         2f:ef:b8:bc:04:d1:01:c2:24:cc:fb:d3:71:43:85:6c:30:a1:
         01:b3:16:cf:3e:10:ad:a4:8f:ce:ed:18:e2:09:b7:f6:ef:1c:
         3c:b6:b8:aa:0b:bc:d4:59:39:25:ff:a3:2a:4e:a2:9c:a9:87:
         ea:ca:88:db:64:ef:b3:fb:c0:e2:2f:4d:ac:26:cd:13:8b:2e:
         98:9a:86:24:43:44:74:9e:a3:9e:83:74:b2:88:c9:05:c0:60:
         15:24:94:5e:d1:6f:a1:b1:c2:ea:6a:a9:a9:3d:b7:c4:86:d6:
         86:cc:24:1b:9b:d0:53:89:61:d5:e1:ba:47:b9:ca:43:c8:4b:
         06:09:16:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----