Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/0929065af8863aae5924a23675e9eaac5198adba.roa
File:                     0929065af8863aae5924a23675e9eaac5198adba.roa (raw, json)
Hash identifier:          1zI3AamZtHdQ9Ge0wfHX6axN+gfPQNZOfP74PtsCqcs=
Subject key identifier:   7C:59:F5:4B:8F:B7:9A:0C:A1:C0:60:31:AB:29:EF:5D:E1:D1:B4:07
Certificate issuer:       /CN=8d9ca26cda476eac56c2da41cd111c8e4a1b1f36
Certificate serial:       0D17C9
Authority key identifier: 7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/0929065af8863aae5924a23675e9eaac5198adba.roa
Signing time:             Wed 24 Mar 2021 14:40:32 +0000
ROA not before:           Wed 24 Mar 2021 14:40:32 +0000
ROA not after:            Tue 24 Mar 2026 14:40:32 +0000
asID:                     264668
IP address blocks:        2803:fc20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858057 (0xd17c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d9ca26cda476eac56c2da41cd111c8e4a1b1f36
        Validity
            Not Before: Mar 24 14:40:32 2021 GMT
            Not After : Mar 24 14:40:32 2026 GMT
        Subject: CN=0929065af8863aae5924a23675e9eaac5198adba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ea:69:ee:9a:3e:c7:cf:c7:00:0b:4c:6e:50:
                    73:5b:89:ad:24:90:c7:e4:9b:11:f8:5d:05:38:7b:
                    8e:02:27:48:bc:b1:4f:bd:d8:ef:8d:e2:fa:ef:33:
                    34:c0:70:ff:82:12:4b:85:a6:ee:de:9e:72:cf:e9:
                    92:a6:1e:7a:ed:c2:16:82:33:2d:3f:5c:bb:31:3f:
                    86:e5:54:a8:d9:77:50:8c:3b:5f:7b:8c:0e:51:99:
                    36:c7:77:ea:5e:26:0b:ef:4f:60:75:45:f1:9a:2f:
                    f1:60:aa:1c:50:03:93:68:77:2d:16:12:1f:c1:5e:
                    8e:af:dd:25:80:55:a9:2e:11:69:f1:c3:81:94:96:
                    44:dd:8b:c7:0c:73:69:46:dc:55:8a:7a:38:89:48:
                    e4:f7:99:f4:98:a0:79:a3:65:f3:89:05:64:66:be:
                    51:2e:a2:a3:39:f5:ac:44:e0:a7:0a:c4:4a:e0:d3:
                    f4:77:07:3e:31:c7:b0:ef:89:57:0d:98:15:4a:65:
                    be:80:d7:03:8c:d0:1a:23:48:00:ea:2f:96:02:eb:
                    69:ea:38:dc:1b:45:64:ab:21:a6:08:1c:16:b0:a5:
                    ff:c8:f6:c2:da:23:f1:9f:60:85:26:c5:65:21:a8:
                    ef:ed:0e:4d:9e:b1:4b:46:27:2f:40:da:6b:0c:28:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:59:F5:4B:8F:B7:9A:0C:A1:C0:60:31:AB:29:EF:5D:E1:D1:B4:07
            X509v3 Authority Key Identifier:
                keyid:7E:FA:29:AF:AA:2C:F6:B6:97:AD:DE:DF:78:63:8F:06:E0:B7:E7:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/0929065af8863aae5924a23675e9eaac5198adba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/73d3e4e0-1104-465f-8046-3d000f7984d1/8d9ca26cda476eac56c2da41cd111c8e4a1b1f36.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fc20::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:ae:3f:fc:37:ed:ab:2b:2a:92:91:99:12:58:c3:6d:1d:ec:
         e2:06:6c:8f:94:c2:d0:b5:d0:47:45:f3:68:9e:09:92:52:c4:
         73:aa:70:89:2b:be:24:66:a2:3f:c5:18:fb:f5:2a:0f:93:e8:
         af:ba:72:ab:50:fc:13:32:e2:29:58:10:69:96:91:93:b7:ad:
         41:5d:6c:34:5c:3a:8f:6d:95:d6:ca:e2:46:c7:f4:28:e0:47:
         94:8b:70:5d:66:cc:b8:1b:3a:ed:48:67:1a:b1:40:4c:81:df:
         0a:7b:8e:62:7e:95:38:f0:2d:9d:44:e0:2a:43:76:80:6b:74:
         e4:12:26:3b:9a:bb:9e:1e:59:18:9a:6f:02:c6:bb:bc:ff:a4:
         59:de:9e:05:22:53:73:2c:2e:c0:00:d4:6d:1e:e0:6e:ec:33:
         51:2a:f4:cd:fd:e6:17:aa:2d:39:97:3b:00:a1:02:0e:fc:fc:
         5a:29:80:72:79:3c:ec:27:de:a2:08:80:fd:ed:69:77:e0:d2:
         5e:55:1e:03:d2:41:b2:22:54:32:45:16:74:06:6a:d2:02:9f:
         1e:45:20:fa:05:9e:8b:93:f6:32:0d:98:ef:42:19:05:ea:79:
         f6:4d:52:86:a4:e3:99:be:9a:5c:6b:69:ef:16:23:ce:ae:c4:
         c1:ff:f4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----