Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/710c6afbd0a2295bf9a605da8da82d12b062b24d.roa
File:                     710c6afbd0a2295bf9a605da8da82d12b062b24d.roa (raw, json)
Hash identifier:          v5YKGEUwLYCAbc+piX5Hgfny9xsPC+f/r2mU9fSxdms=
Subject key identifier:   90:D3:96:5D:FB:2B:0C:ED:87:71:BF:C1:06:05:33:79:80:CD:B5:F3
Certificate issuer:       /CN=8a25370ef6240a33a5dee984da551ba55fa78abf
Certificate serial:       0DB220
Authority key identifier: B4:C8:40:EA:6B:59:67:49:EF:C7:65:01:D1:D4:09:F0:B3:82:C4:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a25370ef6240a33a5dee984da551ba55fa78abf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/710c6afbd0a2295bf9a605da8da82d12b062b24d.roa
Signing time:             Wed 24 Mar 2021 14:41:58 +0000
ROA not before:           Wed 24 Mar 2021 14:41:55 +0000
ROA not after:            Tue 24 Mar 2026 14:41:55 +0000
asID:                     52286
IP address blocks:        2803:ba00:100::/44 maxlen: 44
                          2803:ba00:300::/40 maxlen: 40
                          2803:ba00:400::/39 maxlen: 40
                          2803:ba00:d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897568 (0xdb220)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a25370ef6240a33a5dee984da551ba55fa78abf
        Validity
            Not Before: Mar 24 14:41:55 2021 GMT
            Not After : Mar 24 14:41:55 2026 GMT
        Subject: CN=710c6afbd0a2295bf9a605da8da82d12b062b24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:9d:f3:d4:58:ca:06:c9:50:3c:66:24:e4:
                    eb:c2:1b:45:1e:3b:48:7d:ce:cc:6f:ba:c3:f7:ed:
                    94:6b:14:18:bf:14:39:07:3f:83:a1:5d:85:fe:c3:
                    a8:99:d8:19:a8:bc:c6:e6:39:68:c6:26:02:e7:da:
                    ad:bd:90:f6:f9:54:25:f6:07:0c:c2:53:89:9f:a5:
                    4e:a5:a4:19:d9:cb:03:92:f4:7a:6b:7e:17:22:15:
                    9e:23:ec:e6:00:ec:83:87:2f:a3:bf:e1:2d:5d:1b:
                    83:cc:c4:4d:fb:eb:07:d3:7a:a1:c1:4d:5b:9a:6b:
                    61:31:6d:9a:9e:cd:f2:1d:56:d0:40:88:f1:e5:ec:
                    8c:37:80:4c:75:01:b6:6a:c4:f1:ed:3a:3c:4b:3c:
                    31:4c:74:c7:c2:3c:fa:03:bd:6a:29:53:4b:c6:f3:
                    70:e6:69:14:e3:25:a6:e6:83:13:9e:b2:7e:69:8c:
                    c0:a5:cd:d5:20:08:02:bd:7f:83:cc:d6:1d:52:14:
                    2a:82:cf:19:b8:26:1c:5d:1a:31:a1:51:83:9c:4e:
                    74:50:21:30:33:ca:c2:df:34:8d:a2:ac:da:cf:f7:
                    0c:a1:bf:e4:95:ce:69:c3:49:54:0c:6b:a9:3f:18:
                    91:ff:24:c7:54:d1:77:47:48:8c:38:2f:7d:b0:4c:
                    e1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D3:96:5D:FB:2B:0C:ED:87:71:BF:C1:06:05:33:79:80:CD:B5:F3
            X509v3 Authority Key Identifier:
                keyid:B4:C8:40:EA:6B:59:67:49:EF:C7:65:01:D1:D4:09:F0:B3:82:C4:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a25370ef6240a33a5dee984da551ba55fa78abf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/710c6afbd0a2295bf9a605da8da82d12b062b24d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7cd328b4-73d3-4700-9ca9-b3e8ca53bd7c/8a25370ef6240a33a5dee984da551ba55fa78abf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ba00:100::/44
                  2803:ba00:300::-2803:ba00:5ff:ffff:ffff:ffff:ffff:ffff
                  2803:ba00:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:32:14:e7:4e:e6:b5:de:d3:be:5a:55:c1:cc:18:39:54:
         bc:66:23:fd:6c:2d:1a:b1:8a:7f:f3:3f:af:10:42:e4:71:e3:
         b6:63:eb:fe:06:23:01:71:dd:a6:3c:3a:53:7b:7d:4f:fc:cf:
         03:f7:04:ba:51:9b:d8:71:b5:97:a3:eb:c7:22:51:10:9f:29:
         03:8e:c1:16:41:c7:b0:86:3d:9f:8a:86:2c:85:d1:63:68:b3:
         57:0b:15:49:94:25:25:2e:1f:ca:53:8c:74:5e:67:d4:5e:4f:
         01:92:46:3a:be:53:4d:3c:99:04:87:17:29:15:09:31:b5:e3:
         97:89:c8:ba:fb:e2:51:eb:a3:3f:dc:18:f8:ec:8a:17:14:e3:
         91:e3:7c:4d:5a:b2:93:df:06:aa:bf:64:8b:84:ab:08:aa:b1:
         21:b3:06:f7:3b:3c:51:90:8b:0a:eb:fc:ca:34:1b:c7:b0:c2:
         e9:70:77:5e:aa:68:82:0d:40:8b:12:c7:35:c8:46:45:9d:b2:
         17:37:2d:8f:e0:58:ea:f1:91:60:f1:e8:19:d7:2c:de:b1:b6:
         91:14:e7:73:21:eb:70:bd:fd:13:b3:21:a4:dc:14:6b:f9:f6:
         40:1b:90:bf:9c:95:19:99:2f:eb:08:34:eb:4d:27:c1:ed:d7:
         cf:58:eb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----