Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7b5e4a51-14bb-490a-90a9-586e15eb5176/8479e5dcc1b04135e18e118b5527abd5fd2e9dec.roa
File:                     8479e5dcc1b04135e18e118b5527abd5fd2e9dec.roa (raw, json)
Hash identifier:          0trAvwK1t0clNKHtyv/yfar5hFt0yr28VVv9UcKZYjo=
Subject key identifier:   2B:73:9D:55:71:96:66:CD:36:BB:35:37:59:55:17:6B:25:60:ED:89
Certificate issuer:       /CN=6dd894024e79ebcc0c2f899c8d0885648f794bcc
Certificate serial:       04194E
Authority key identifier: AD:8B:25:8F:C8:34:89:AF:B0:62:DE:7C:42:A1:B4:B5:0B:42:5D:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dd894024e79ebcc0c2f899c8d0885648f794bcc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7b5e4a51-14bb-490a-90a9-586e15eb5176/8479e5dcc1b04135e18e118b5527abd5fd2e9dec.roa
Signing time:             Wed 24 Mar 2021 14:36:34 +0000
ROA not before:           Wed 24 Mar 2021 14:36:34 +0000
ROA not after:            Tue 24 Mar 2026 14:36:34 +0000
asID:                     14080
IP address blocks:        2801:1b2::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268622 (0x4194e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd894024e79ebcc0c2f899c8d0885648f794bcc
        Validity
            Not Before: Mar 24 14:36:34 2021 GMT
            Not After : Mar 24 14:36:34 2026 GMT
        Subject: CN=8479e5dcc1b04135e18e118b5527abd5fd2e9dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:9a:7c:aa:3d:c9:4b:31:f3:84:e7:7e:db:
                    e3:fb:2a:76:01:ac:13:6d:7f:cb:70:ca:85:56:e5:
                    2a:98:a0:38:c3:7c:d5:1b:42:2a:88:43:91:3f:89:
                    af:45:0a:1f:86:e4:78:0e:7a:8c:3a:03:ef:3b:c7:
                    90:c9:ad:a9:af:d0:93:4b:50:3a:2c:f9:e3:2c:d8:
                    4c:a1:36:e1:1b:2f:a8:bd:1a:a2:2a:64:6b:11:64:
                    4b:82:0a:3d:f9:61:1e:3e:ba:6f:1b:a7:10:2b:43:
                    c5:60:82:3d:22:44:c7:80:20:0c:cb:bb:c3:f5:44:
                    61:7a:43:89:61:53:f8:cc:6d:95:23:10:b8:08:ef:
                    5d:28:21:97:8d:c9:98:91:66:86:60:3f:ac:91:a8:
                    07:ae:da:f7:37:dc:38:a0:68:a2:3a:4f:c7:1b:0f:
                    60:fd:bf:18:10:d8:f3:99:2b:48:d1:08:72:71:c0:
                    e7:74:b9:c4:30:3f:ef:68:a1:63:8f:63:42:1e:63:
                    c2:41:ee:02:03:bd:49:29:5d:95:16:d8:e3:a2:99:
                    91:8e:de:3a:bf:9f:17:26:7c:f6:48:0b:43:e9:a6:
                    43:1b:8a:ac:8e:87:7f:6d:27:57:b8:73:da:31:5c:
                    5b:25:9d:7f:f0:98:09:6d:0c:46:c1:c8:77:a7:dc:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:73:9D:55:71:96:66:CD:36:BB:35:37:59:55:17:6B:25:60:ED:89
            X509v3 Authority Key Identifier:
                keyid:AD:8B:25:8F:C8:34:89:AF:B0:62:DE:7C:42:A1:B4:B5:0B:42:5D:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dd894024e79ebcc0c2f899c8d0885648f794bcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7b5e4a51-14bb-490a-90a9-586e15eb5176/8479e5dcc1b04135e18e118b5527abd5fd2e9dec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7b5e4a51-14bb-490a-90a9-586e15eb5176/6dd894024e79ebcc0c2f899c8d0885648f794bcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b2::/44

    Signature Algorithm: sha256WithRSAEncryption
         7a:7f:04:4f:3a:6d:35:20:e2:ce:57:46:29:5b:01:c3:69:61:
         a1:00:cc:d0:63:24:91:d5:e0:57:d2:52:5b:e6:6c:53:54:5c:
         21:89:37:ef:bc:f5:07:d9:ec:61:4b:0b:59:bb:d5:43:a0:be:
         f2:19:45:39:17:7a:03:e4:7e:9d:3f:ad:4e:05:10:40:1a:ff:
         f4:5a:a0:da:07:f0:da:95:38:08:d8:b0:41:54:41:87:e6:fe:
         ef:28:ce:dd:d3:79:dd:e4:b2:1b:31:4b:30:f5:b2:8d:84:0f:
         5f:0a:49:af:7a:37:a3:7d:df:e5:4c:b3:b0:02:d3:a7:d1:eb:
         ae:72:84:ad:17:6c:a9:67:1a:9d:18:72:f6:0d:ed:69:66:4b:
         b7:5b:db:3c:02:43:f2:8b:f4:ee:e0:40:2f:cd:90:c4:d3:09:
         8e:c3:15:f5:42:87:6b:45:89:07:82:d3:4a:d2:85:e0:e3:2c:
         1a:77:2e:49:6c:50:41:9f:93:55:cd:24:23:17:4a:98:56:75:
         e0:4a:96:0b:74:ba:eb:5a:7c:cd:a6:a5:17:3c:68:f8:d8:3d:
         23:4a:fb:4d:47:8e:cc:95:76:ee:d9:18:bc:f0:87:26:5a:82:
         66:98:95:65:0c:62:06:a4:12:05:54:17:79:c7:6a:e7:67:7d:
         24:e2:96:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----