Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/f23aa6406dc9cba8a762769b9803bb2a5c6675d3.roa
File:                     f23aa6406dc9cba8a762769b9803bb2a5c6675d3.roa (raw, json)
Hash identifier:          YyVpiBV6bsdM9xjWZmxZcAdpb9cEvpEc7tY6DtU0PEg=
Subject key identifier:   76:7D:F0:25:1D:38:83:B2:C5:9F:F2:AC:FB:CE:AC:F4:80:E1:5A:AD
Certificate issuer:       /CN=1b671156f163047022ae7a64ac80be646ca248ce
Certificate serial:       0B8DAA
Authority key identifier: CB:8F:FF:F1:2F:4A:72:E2:CE:AD:42:DA:90:A3:49:09:6F:0C:D0:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b671156f163047022ae7a64ac80be646ca248ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/f23aa6406dc9cba8a762769b9803bb2a5c6675d3.roa
Signing time:             Wed 24 Mar 2021 14:36:05 +0000
ROA not before:           Wed 24 Mar 2021 14:36:05 +0000
ROA not after:            Tue 24 Mar 2026 14:36:05 +0000
asID:                     10620
IP address blocks:        2801:15:4800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757162 (0xb8daa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b671156f163047022ae7a64ac80be646ca248ce
        Validity
            Not Before: Mar 24 14:36:05 2021 GMT
            Not After : Mar 24 14:36:05 2026 GMT
        Subject: CN=f23aa6406dc9cba8a762769b9803bb2a5c6675d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:40:a7:76:f4:be:75:f3:db:58:78:2a:ab:f6:
                    2c:b6:6b:fc:eb:1e:f9:06:f6:cd:8a:70:65:ce:de:
                    d2:fd:49:92:12:37:a6:33:87:ae:e9:da:cc:8d:1b:
                    c9:4f:38:11:cb:aa:6b:b9:ff:9a:84:d6:b3:74:fa:
                    9b:ac:cd:b8:bb:11:3b:9d:4a:6e:c7:ac:38:71:22:
                    ea:23:27:7b:7c:f3:5e:24:4b:50:26:1a:b4:d9:84:
                    49:5d:79:45:0e:54:95:be:ac:75:ac:67:db:ab:f0:
                    55:c5:68:aa:d7:96:d1:19:ed:a2:a5:81:92:b7:61:
                    7c:b3:d9:e3:82:70:bc:3d:26:ca:c1:6f:58:aa:de:
                    fa:8f:65:bc:74:38:68:9f:14:3f:bc:4f:34:b0:d6:
                    0a:26:14:10:34:d0:44:a7:1a:b2:3f:70:6c:46:44:
                    c8:5b:8e:4d:58:58:a8:4f:e0:9b:d7:72:c0:f1:97:
                    ac:3d:2c:d8:97:03:77:30:7f:cc:fe:dd:1f:b9:e2:
                    26:3a:92:e7:58:3e:4b:aa:ea:88:cb:0f:d9:3c:c1:
                    95:f1:b8:ad:0d:fb:08:4c:12:4a:24:a9:99:a9:7e:
                    98:66:fc:1f:8f:65:94:c5:26:f8:79:63:2a:86:ab:
                    60:33:95:7b:b5:19:6c:62:9a:73:f7:4f:50:a4:e4:
                    1f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7D:F0:25:1D:38:83:B2:C5:9F:F2:AC:FB:CE:AC:F4:80:E1:5A:AD
            X509v3 Authority Key Identifier:
                keyid:CB:8F:FF:F1:2F:4A:72:E2:CE:AD:42:DA:90:A3:49:09:6F:0C:D0:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b671156f163047022ae7a64ac80be646ca248ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/f23aa6406dc9cba8a762769b9803bb2a5c6675d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d8abf8a-c6f9-4ae9-9b17-3cd234535f1d/1b671156f163047022ae7a64ac80be646ca248ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:0a:2a:d4:54:e9:8d:03:82:e2:1d:72:3f:5e:0f:f5:7f:c7:
         22:72:da:59:5d:0d:eb:e0:ea:0a:96:ee:9f:dc:93:7e:2d:60:
         e4:c2:22:68:46:e8:55:fc:66:56:68:c5:29:f9:a6:c8:27:b7:
         fe:1f:c3:2a:98:06:34:48:4c:91:e7:a1:ee:6b:ca:11:a5:a3:
         f3:2b:57:e0:c6:f8:e6:ae:2d:38:2e:db:ea:b9:72:b2:d7:8f:
         60:1f:05:19:71:c3:cb:d9:a8:22:23:4d:6c:04:38:fb:16:8c:
         6e:52:79:35:7d:09:fb:dc:8b:75:87:a5:0c:cd:7e:f8:79:47:
         ce:31:84:0c:4c:0d:39:53:98:d2:a6:17:68:52:87:ca:70:9d:
         1a:fc:ca:00:6b:7f:4b:31:a4:ec:5c:b3:36:07:63:22:ad:74:
         13:de:27:f3:92:3d:bb:2a:85:bc:d4:59:bd:49:4b:89:f5:ba:
         db:ab:f1:fa:42:0c:3a:6e:c1:2b:dc:ae:ec:09:4b:93:ca:38:
         be:4f:30:80:92:50:e9:ea:66:fd:4c:89:39:42:d2:f7:3b:34:
         91:c5:fd:9c:85:ca:4d:0a:82:20:7e:f3:45:8c:00:1d:06:67:
         4d:fb:57:06:a6:7d:6b:7b:cc:f0:6b:32:5d:f7:18:b4:d8:94:
         ea:6f:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----