Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/2d8fd660779109966fcbd2ae651b44898794f07b.roa
File:                     2d8fd660779109966fcbd2ae651b44898794f07b.roa (raw, json)
Hash identifier:          /SWNZ0K7yzlqVRtofbcp+JvF6htB3rIGai6JQr/VCZY=
Subject key identifier:   2F:A6:57:5D:B4:CF:2B:0E:C3:3E:39:8B:60:72:0C:35:8C:3C:2A:77
Certificate issuer:       /CN=cf47512a1a6566f37a0da36f74206b83a801d6d9
Certificate serial:       0DA3F0
Authority key identifier: 8C:0B:F1:D7:52:CE:4E:D9:E2:40:D4:EF:48:0F:BE:71:DB:DD:80:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf47512a1a6566f37a0da36f74206b83a801d6d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/2d8fd660779109966fcbd2ae651b44898794f07b.roa
Signing time:             Wed 24 Mar 2021 14:30:59 +0000
ROA not before:           Wed 24 Mar 2021 14:30:58 +0000
ROA not after:            Tue 24 Mar 2026 14:30:58 +0000
asID:                     61493
IP address blocks:        2803:eb80::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893936 (0xda3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf47512a1a6566f37a0da36f74206b83a801d6d9
        Validity
            Not Before: Mar 24 14:30:58 2021 GMT
            Not After : Mar 24 14:30:58 2026 GMT
        Subject: CN=2d8fd660779109966fcbd2ae651b44898794f07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:23:2c:b3:bb:91:da:86:01:c1:1a:a2:cc:
                    9a:95:f3:8e:b1:b4:46:ff:fe:85:57:83:5b:3b:72:
                    7f:9a:b5:d4:31:4a:30:71:70:a3:43:f4:af:87:f4:
                    26:9f:35:8e:89:25:55:42:7b:a4:da:94:95:d3:21:
                    82:05:f8:e6:5f:f6:f0:95:76:c7:7b:3f:ad:d1:22:
                    63:33:b6:e5:13:e6:a3:1a:00:0e:7c:83:52:69:2d:
                    17:de:c3:20:09:ac:e1:80:c9:13:de:14:ba:53:2c:
                    fa:6d:e6:ab:b6:04:02:b8:df:69:4c:19:78:5b:00:
                    06:d3:ff:51:9f:63:52:3a:01:fc:47:8a:c2:8d:55:
                    f6:99:eb:2e:c6:89:dc:c3:9c:80:b0:4a:3a:80:f0:
                    8b:cf:c9:95:f3:16:42:13:75:d1:3b:f0:2c:fe:78:
                    a9:ba:55:fd:f3:70:bd:ff:df:e1:91:85:c6:4f:46:
                    63:49:85:e3:c6:9e:b0:89:b5:9d:e1:7a:84:d0:58:
                    ea:7b:98:30:09:42:b7:cc:b8:bc:55:2b:95:21:dc:
                    59:9c:e7:98:32:a6:a7:88:4c:11:2d:2a:d6:8a:23:
                    4a:44:ff:7f:1c:74:1a:d8:e3:79:30:3e:e1:8c:33:
                    1e:a9:c1:fc:07:f7:61:9e:24:81:b6:7c:3f:38:ae:
                    61:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A6:57:5D:B4:CF:2B:0E:C3:3E:39:8B:60:72:0C:35:8C:3C:2A:77
            X509v3 Authority Key Identifier:
                keyid:8C:0B:F1:D7:52:CE:4E:D9:E2:40:D4:EF:48:0F:BE:71:DB:DD:80:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf47512a1a6566f37a0da36f74206b83a801d6d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/2d8fd660779109966fcbd2ae651b44898794f07b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/765275f9-87e2-4136-b464-167e9e51e902/cf47512a1a6566f37a0da36f74206b83a801d6d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:8b:fd:92:4d:d4:02:db:e3:2a:9f:a4:92:aa:90:d9:e4:22:
         0e:fe:41:86:2d:43:48:4a:04:2b:87:82:ee:e8:e2:65:ef:ff:
         bf:de:7a:e0:42:8a:15:74:fb:f5:94:1d:5a:8c:d4:97:56:33:
         fb:d7:07:3d:3a:69:2b:5c:6e:13:da:87:a8:26:c2:06:a8:42:
         66:b8:65:62:c6:a4:13:7b:ea:a7:9f:26:ef:d9:38:81:fb:54:
         f8:a2:3a:75:4c:c2:7c:ee:27:f4:9c:61:4c:31:d4:18:31:c6:
         a9:ac:f9:5e:5d:b1:e0:e2:46:f3:09:15:c7:c3:59:b2:59:e7:
         45:26:78:5e:aa:e7:5d:81:0c:07:7b:7b:e0:1b:39:67:09:3e:
         0d:ad:d9:47:41:dc:2a:79:46:ca:ed:28:f5:56:e9:6c:29:90:
         52:8d:63:f6:07:21:21:e4:e1:3c:58:27:24:82:0e:f4:4e:52:
         f4:c2:90:01:d5:15:2b:05:4a:bf:77:09:c2:1d:75:4c:35:f4:
         19:ca:86:e7:ba:62:0c:1d:3d:8d:90:1c:c1:eb:9f:fc:c5:e7:
         7f:aa:a4:10:83:a7:e0:43:3f:5e:64:83:40:b6:a3:a5:0c:fa:
         3f:f7:3c:92:95:1c:69:32:35:21:3a:89:fc:c6:31:1d:27:78:
         47:3e:93:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----