Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/f94fce6e0fc8df4485f6a6e4d34d5cd4642e2db1.roa
File:                     f94fce6e0fc8df4485f6a6e4d34d5cd4642e2db1.roa (raw, json)
Hash identifier:          OHcrTp8+zLjkWfJTROw3DslNdf/8ArFd4aEXeH3Jws0=
Subject key identifier:   73:B8:11:24:82:45:8A:0F:10:FC:8D:B3:B6:F2:C1:FF:12:4B:64:D4
Certificate issuer:       /CN=bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06
Certificate serial:       0D4D80
Authority key identifier: C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/f94fce6e0fc8df4485f6a6e4d34d5cd4642e2db1.roa
Signing time:             Wed 24 Mar 2021 14:37:21 +0000
ROA not before:           Wed 24 Mar 2021 14:37:21 +0000
ROA not after:            Tue 24 Mar 2026 14:37:21 +0000
asID:                     264820
IP address blocks:        2803:dcc0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871808 (0xd4d80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06
        Validity
            Not Before: Mar 24 14:37:21 2021 GMT
            Not After : Mar 24 14:37:21 2026 GMT
        Subject: CN=f94fce6e0fc8df4485f6a6e4d34d5cd4642e2db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4b:f7:47:9b:c9:1b:ca:02:15:e5:c8:9f:95:
                    a1:2c:d6:1f:40:63:21:90:74:fa:32:a1:af:fd:40:
                    35:9c:5e:de:36:66:2e:26:38:c0:ee:da:d0:74:a9:
                    a8:7a:d6:b0:12:d4:6f:ef:bf:fd:b1:8b:70:c9:5c:
                    85:ab:4a:12:d4:14:b5:7a:ad:4c:80:16:87:77:cf:
                    71:8d:65:8b:54:17:ce:04:33:f0:5c:e1:6c:35:a5:
                    93:cc:ca:55:64:32:e3:f4:62:8b:99:8c:b1:ab:27:
                    14:83:60:ab:89:27:12:a3:b2:b2:16:c9:e2:6e:61:
                    43:3b:38:7c:5a:e9:c0:33:89:67:96:8d:4f:e2:39:
                    f7:95:0a:e9:44:04:f7:03:63:f4:7c:e7:52:c7:1a:
                    23:c2:08:fa:88:fe:0b:03:b9:26:d3:bf:24:aa:38:
                    dc:0d:00:f2:01:20:53:6a:90:69:26:c4:66:4c:dc:
                    68:52:16:71:5b:da:61:d5:4a:71:1c:de:e6:66:07:
                    65:00:0d:32:12:a3:a0:46:64:7f:52:c2:79:f9:25:
                    ce:fe:81:ca:66:0e:6a:95:1b:5d:c4:8f:a4:23:71:
                    fe:ae:34:3d:8c:de:a6:dc:76:0b:a6:9c:30:2c:d0:
                    d9:46:70:12:e3:f3:60:cf:94:11:15:12:77:75:22:
                    7d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B8:11:24:82:45:8A:0F:10:FC:8D:B3:B6:F2:C1:FF:12:4B:64:D4
            X509v3 Authority Key Identifier:
                keyid:C5:C3:CF:AC:F3:AA:F1:DA:21:2F:18:CC:2D:EB:6B:A9:6C:D0:71:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/f94fce6e0fc8df4485f6a6e4d34d5cd4642e2db1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73128ded-500d-4f4f-aa65-f113a7e5085d/bf9ad01955abd5dc53ebc3ac77a9d96ca7f58d06.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:f5:d6:c4:ba:9d:bb:dc:20:e0:4c:41:8d:0f:b2:91:6b:52:
         9c:2e:59:73:75:e5:8d:b4:a9:56:07:98:bb:0d:f3:c3:5e:e2:
         74:79:35:1e:af:f7:ef:db:5b:dc:66:cd:15:e1:e5:bb:20:08:
         e1:5c:d8:91:8e:13:c1:f5:35:0f:36:dc:5f:2c:ac:41:01:5b:
         03:32:7c:dc:2f:15:f5:c9:5a:ca:f4:ed:e1:ca:eb:f6:15:1d:
         e4:66:07:af:b4:67:89:a3:7e:30:17:1b:ec:53:00:51:c8:d4:
         5b:96:c5:32:d9:59:d2:e6:92:0b:e7:ab:10:cc:61:82:1a:d4:
         4d:d0:5d:80:70:4e:1f:09:69:31:fa:47:0c:d8:39:bc:2c:64:
         ea:b2:87:ff:81:98:49:be:e1:4c:3d:ef:b0:ae:48:ce:19:69:
         28:8c:0c:5e:59:f2:94:fe:9d:79:02:1b:71:70:b1:fe:f0:57:
         3a:30:f3:58:db:31:bd:b4:b1:64:2b:6a:d3:92:fa:ab:bc:68:
         be:87:21:30:fb:58:57:2a:8b:7d:ca:3a:f0:48:70:e1:e2:74:
         36:81:bb:c0:3d:62:2e:d2:fe:24:f1:ab:61:2c:c6:68:ac:4c:
         38:fe:a5:84:52:74:cb:ff:83:cc:05:90:07:36:71:7a:f4:a0:
         fd:c9:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----