Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/134ef7442b5f0ba7a4b0be50d4e70498b0cad0fb.roa
File:                     134ef7442b5f0ba7a4b0be50d4e70498b0cad0fb.roa (raw, json)
Hash identifier:          AAqEgGeTEHBVZwWj4u7K7s9YOVU+izwTwyxk+huHaTU=
Subject key identifier:   52:D9:54:A7:B7:A3:CD:DF:61:8D:0E:8D:7D:5C:CA:0E:F2:38:D9:0E
Certificate issuer:       /CN=cf47512a1a6566f37a0da36f74206b83a801d6d9
Certificate serial:       0D9D5E
Authority key identifier: 8C:0B:F1:D7:52:CE:4E:D9:E2:40:D4:EF:48:0F:BE:71:DB:DD:80:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf47512a1a6566f37a0da36f74206b83a801d6d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/134ef7442b5f0ba7a4b0be50d4e70498b0cad0fb.roa
Signing time:             Wed 24 Mar 2021 14:30:59 +0000
ROA not before:           Wed 24 Mar 2021 14:30:58 +0000
ROA not after:            Tue 24 Mar 2026 14:30:58 +0000
asID:                     61493
IP address blocks:        2803:eb80:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892254 (0xd9d5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf47512a1a6566f37a0da36f74206b83a801d6d9
        Validity
            Not Before: Mar 24 14:30:58 2021 GMT
            Not After : Mar 24 14:30:58 2026 GMT
        Subject: CN=134ef7442b5f0ba7a4b0be50d4e70498b0cad0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d8:3e:4d:cf:9e:e1:74:ec:b9:d2:d4:08:ed:
                    a2:f7:04:a9:a1:6f:0b:e3:21:b1:69:99:6c:6a:4d:
                    9b:89:63:6f:17:63:7a:c8:60:12:50:bc:83:24:5e:
                    31:d0:99:43:30:bf:1b:87:3a:21:a7:27:1d:69:a7:
                    cb:2d:3e:29:60:07:61:18:12:f0:2f:05:18:60:44:
                    a2:5c:98:28:f4:81:45:87:15:79:eb:af:6b:d1:f2:
                    b3:38:97:bd:a5:29:9a:24:a0:fe:48:a8:83:17:fc:
                    56:ef:57:2b:0c:f6:12:c8:3e:8c:a6:ca:b1:73:5b:
                    1f:27:c8:e5:a7:1e:59:df:8d:e2:20:2a:7a:ca:d5:
                    26:83:f7:48:53:04:6b:8e:b8:81:11:da:15:1e:53:
                    17:67:8b:48:40:c5:99:18:82:03:23:8a:8e:30:c4:
                    9f:6f:64:32:6e:c4:14:eb:08:de:54:94:c3:55:66:
                    c9:da:a6:fd:5a:e6:f4:7a:d8:4c:99:24:32:c0:2c:
                    8f:12:31:a9:70:0e:01:39:40:d6:62:89:e8:db:be:
                    97:a3:19:c1:b5:af:25:09:db:a6:a1:6c:9e:9a:eb:
                    1f:bc:b7:dc:12:eb:5c:cf:92:af:ce:dd:a8:3c:6d:
                    b6:e1:99:7f:3c:a7:b1:23:91:28:11:e1:56:b8:8d:
                    e4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D9:54:A7:B7:A3:CD:DF:61:8D:0E:8D:7D:5C:CA:0E:F2:38:D9:0E
            X509v3 Authority Key Identifier:
                keyid:8C:0B:F1:D7:52:CE:4E:D9:E2:40:D4:EF:48:0F:BE:71:DB:DD:80:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf47512a1a6566f37a0da36f74206b83a801d6d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/134ef7442b5f0ba7a4b0be50d4e70498b0cad0fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/cf47512a1a6566f37a0da36f74206b83a801d6d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb80:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:18:64:8c:c6:de:23:6e:c8:d2:0f:ee:88:4b:c8:90:56:a9:
         a8:f2:cf:bc:12:99:de:d1:87:6d:d5:cf:80:19:9a:a2:88:b2:
         df:b8:20:57:5f:a4:0b:80:d6:b5:0d:cc:da:08:9e:90:a1:94:
         1f:59:14:92:44:49:92:88:96:39:4b:4d:77:d8:5c:6c:55:96:
         64:aa:c5:13:37:0b:c9:cb:38:cd:24:57:ae:b9:79:6a:e6:4f:
         84:79:42:24:b2:74:2e:42:b6:c1:2c:38:b1:bd:bc:33:5f:7b:
         fa:49:fd:96:b8:42:c9:49:53:d1:4c:7d:b2:1a:66:80:7a:43:
         f1:75:72:48:a4:dd:35:5c:b4:9a:ea:58:5e:6b:10:e4:74:58:
         67:2a:1d:8a:86:d9:ff:63:bc:9a:44:7e:5b:93:ef:a8:94:13:
         8f:9d:31:88:83:01:e9:b8:c5:43:19:bb:f4:ad:9d:99:bd:1a:
         23:6a:a6:75:5b:b9:15:e9:1d:a5:08:42:53:ef:a7:c6:e1:ef:
         97:59:a3:98:00:ef:d9:8b:99:e1:4a:ed:55:9f:63:d5:78:c2:
         f4:34:21:44:ee:36:c0:96:5a:e7:a6:2a:f3:f2:f4:7b:23:fc:
         9f:68:94:87:41:f0:76:a7:9c:6a:60:3f:66:fb:6d:46:65:03:
         af:75:52:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----