Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/f7a949732675d07fb9dc9e4c2f74d4750b6cfc14.roa
File:                     f7a949732675d07fb9dc9e4c2f74d4750b6cfc14.roa (raw, json)
Hash identifier:          ChIQ8CqU6fClR+Gq1iE6Lh4mneMlwggbmWj4ajnXVT0=
Subject key identifier:   24:E8:F3:29:88:AA:93:4B:15:EE:BD:47:4A:10:7B:68:12:FE:83:2C
Certificate issuer:       /CN=dba2d4475bfb2b85f06dce9699918d5f9c2d2510
Certificate serial:       0C5620
Authority key identifier: F1:71:B2:BB:34:ED:0B:65:29:C4:30:65:1F:09:46:4D:2C:6D:60:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/f7a949732675d07fb9dc9e4c2f74d4750b6cfc14.roa
Signing time:             Thu 11 Nov 2021 22:03:00 +0000
ROA not before:           Thu 11 Nov 2021 03:00:00 +0000
ROA not after:            Wed 11 Nov 2026 03:00:00 +0000
asID:                     14080
IP address blocks:        2801:11a::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808480 (0xc5620)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba2d4475bfb2b85f06dce9699918d5f9c2d2510
        Validity
            Not Before: Nov 11 03:00:00 2021 GMT
            Not After : Nov 11 03:00:00 2026 GMT
        Subject: CN=f7a949732675d07fb9dc9e4c2f74d4750b6cfc14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fd:48:d8:79:44:7d:4b:50:36:dd:8a:e3:2d:
                    90:ab:23:83:db:93:4a:f8:f9:16:79:f1:4d:5b:01:
                    04:67:f5:ab:07:d2:0f:97:eb:52:b6:83:9a:31:5e:
                    68:d4:4d:e4:a4:35:17:43:8c:b9:da:e4:95:be:dd:
                    82:9c:22:6c:62:6e:76:3a:12:0f:db:0e:70:a4:a0:
                    8a:2f:9c:2f:26:db:9a:20:45:ef:14:cc:6f:d6:71:
                    3e:53:e7:a5:61:98:84:ab:68:7f:ea:56:33:6e:0f:
                    4f:aa:9c:84:6c:87:4a:f7:b7:97:21:fb:33:4b:a4:
                    41:09:66:6c:ad:4c:dc:07:c2:25:dd:d3:d8:6b:7d:
                    45:a5:9f:f6:ea:0e:b6:e7:74:25:56:fd:1b:f8:36:
                    95:0e:1f:d8:85:37:88:cf:e1:c9:41:37:cc:9f:3c:
                    08:7c:12:5e:c2:5f:f2:c1:bc:f0:ea:8e:a3:db:d1:
                    a4:f4:fd:e6:83:16:0d:ed:c8:1c:75:9f:9c:dc:96:
                    01:26:a8:e3:13:c1:b6:b1:9b:3a:a1:10:41:55:dd:
                    2d:6a:66:ff:78:59:3c:36:d8:5a:00:53:46:05:f0:
                    6c:d6:83:4f:2a:bb:41:b1:34:d4:3a:5d:a7:c5:dc:
                    c4:8d:eb:2a:15:e5:84:0d:12:00:ca:00:e6:f6:53:
                    23:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E8:F3:29:88:AA:93:4B:15:EE:BD:47:4A:10:7B:68:12:FE:83:2C
            X509v3 Authority Key Identifier:
                keyid:F1:71:B2:BB:34:ED:0B:65:29:C4:30:65:1F:09:46:4D:2C:6D:60:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/f7a949732675d07fb9dc9e4c2f74d4750b6cfc14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11a::/40

    Signature Algorithm: sha256WithRSAEncryption
         b5:9e:e0:76:20:ad:42:4b:56:2f:4d:61:d7:93:a6:83:b5:32:
         c7:e0:d3:d9:7c:2d:fb:46:61:4f:3b:ec:09:ee:51:02:b0:51:
         b2:03:62:4b:e3:54:6f:10:6b:2a:ce:b1:81:83:40:b9:96:1a:
         92:dd:59:88:0c:cb:b7:57:9f:8c:06:a2:30:08:16:bc:a3:07:
         aa:c7:cb:c1:90:95:ed:21:02:c6:cc:1f:14:75:15:5b:06:ed:
         b8:48:88:9e:43:35:61:2d:e5:b0:8e:d1:b2:6d:71:a7:4b:24:
         10:86:2b:1d:1a:3b:6b:be:80:33:cc:7c:c2:bc:c8:fe:9d:30:
         19:dd:40:9b:25:e1:b2:7c:65:d2:e1:24:15:3d:ab:a5:fa:9f:
         9d:45:ce:a5:2c:9c:cd:89:da:39:ac:68:4c:e7:41:37:df:23:
         1c:65:01:76:5f:7f:6a:f8:fa:c3:ae:4d:37:4d:0f:9b:a0:ca:
         7e:3c:e6:ea:1f:e0:f3:20:1e:0c:76:ff:6e:b5:81:5d:3e:de:
         58:2d:85:24:4f:6c:a4:27:cf:10:47:6f:04:ab:d8:ef:90:2e:
         dd:71:2e:e3:9c:e6:fd:fd:97:17:bf:16:de:19:d5:cd:45:c2:
         e7:a6:da:c2:9f:8e:f5:76:e9:29:1b:24:e4:5a:23:2c:71:ab:
         28:38:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----