Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/c6103dfb23ca10fe5bab818409a2994a32d6b314.roa
File:                     c6103dfb23ca10fe5bab818409a2994a32d6b314.roa (raw, json)
Hash identifier:          EM7MlZl9uKVbFTNgRWFbY92FgHBMmqpuODp8uwOdMds=
Subject key identifier:   B1:8E:C1:07:E0:E4:0F:AA:56:A1:1A:DB:D4:66:71:2F:DB:91:3C:98
Certificate issuer:       /CN=8b6dd3a80ea4cbdb37061c93296421e4a7217d0c
Certificate serial:       0D5A57
Authority key identifier: 8C:83:00:3C:04:82:E5:40:32:9F:D8:42:31:87:23:F4:94:EC:1E:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/c6103dfb23ca10fe5bab818409a2994a32d6b314.roa
Signing time:             Wed 24 Mar 2021 14:39:54 +0000
ROA not before:           Wed 24 Mar 2021 14:39:53 +0000
ROA not after:            Tue 24 Mar 2026 14:39:53 +0000
asID:                     264668
IP address blocks:        2803:6ec0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875095 (0xd5a57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6dd3a80ea4cbdb37061c93296421e4a7217d0c
        Validity
            Not Before: Mar 24 14:39:53 2021 GMT
            Not After : Mar 24 14:39:53 2026 GMT
        Subject: CN=c6103dfb23ca10fe5bab818409a2994a32d6b314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:a0:53:d6:ec:d8:39:5d:dd:e2:6a:ef:99:
                    c9:46:e5:54:be:91:ae:73:6d:2a:a4:07:ce:c2:00:
                    8b:04:77:3f:7f:62:ba:a1:43:35:54:ae:a9:ba:f1:
                    d1:16:d1:de:e1:bd:8f:40:6d:98:38:2d:05:10:b2:
                    98:13:ae:5e:20:63:56:56:0e:e7:4a:11:90:07:4d:
                    b2:c6:da:23:30:66:cf:27:a4:38:91:99:63:f0:34:
                    8b:80:c1:9c:5d:be:a0:ef:cf:bd:d8:f7:01:a2:ef:
                    86:d6:08:c2:c2:a3:19:75:58:e0:e3:32:f6:3c:ae:
                    ec:dd:26:1e:b7:61:46:f6:13:a4:74:77:09:09:4a:
                    e0:5b:13:0e:bb:73:1d:e6:12:b1:67:be:c1:3a:cc:
                    0d:25:80:26:ca:6f:39:a8:d5:4c:c1:5f:ca:97:b2:
                    a1:49:9a:3d:ff:63:13:f3:09:fd:20:7b:17:e0:66:
                    29:ef:80:92:bc:bc:29:f2:a4:f7:ef:41:90:15:a5:
                    f2:15:e6:34:67:2f:df:48:8d:a7:bc:c4:f9:14:24:
                    94:ab:7d:8c:53:bf:50:6a:c6:38:07:4f:9c:c3:f7:
                    a5:85:df:bf:08:33:dd:4d:d3:87:2e:63:14:de:aa:
                    a2:ed:e5:e6:a1:a6:15:ff:ae:66:ff:62:50:99:c2:
                    59:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:8E:C1:07:E0:E4:0F:AA:56:A1:1A:DB:D4:66:71:2F:DB:91:3C:98
            X509v3 Authority Key Identifier:
                keyid:8C:83:00:3C:04:82:E5:40:32:9F:D8:42:31:87:23:F4:94:EC:1E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/c6103dfb23ca10fe5bab818409a2994a32d6b314.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6ee6cc91-1e55-4ec8-9db9-920b08533749/8b6dd3a80ea4cbdb37061c93296421e4a7217d0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ec0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:2b:e9:aa:e9:62:5c:02:8c:1f:db:bd:fe:1a:df:ba:b0:91:
         7b:f9:0b:6f:39:1a:1e:e1:53:15:b0:13:c8:0a:1c:ed:85:28:
         10:70:ae:87:3f:e5:93:c8:bd:69:cc:4d:02:c4:68:bb:86:3f:
         45:e1:d5:97:84:d2:9c:3e:5c:66:93:89:56:8c:b7:3d:d2:61:
         0d:7b:5c:3c:3c:4f:97:c8:54:2b:62:42:8c:33:b7:64:7a:a5:
         7a:bd:7a:91:2d:73:46:22:b0:ff:3d:f9:24:d9:6b:47:ba:7a:
         e2:dd:42:9a:7b:5d:7c:5e:34:da:dc:cb:81:bc:7e:32:d1:18:
         de:47:91:04:de:57:31:6a:44:5c:04:73:de:1b:fd:6c:04:96:
         de:23:c6:de:98:5a:f5:8d:65:8f:51:5c:ee:e6:9e:cc:43:19:
         c2:1b:a0:9b:e5:b5:3b:7a:a2:9e:52:ad:60:2c:f4:50:2e:b2:
         ab:51:8e:e0:35:db:fb:85:27:7f:87:d1:ac:07:fa:4a:87:59:
         46:fe:98:3f:95:e5:c9:82:57:aa:3e:0b:7a:49:5d:cc:63:b0:
         52:e2:14:9e:94:84:2c:f2:a6:56:e1:d2:19:44:aa:8b:a6:b4:
         13:65:05:45:51:87:61:b0:33:d3:d4:a0:dd:4f:51:20:64:49:
         97:e5:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----