Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/9957698f8f7103b658912b94d513c68c27b421fb.roa
File:                     9957698f8f7103b658912b94d513c68c27b421fb.roa (raw, json)
Hash identifier:          oj7vt1L7dmIz3chekOMxNawLkLPhIdmU4IvFeZjHMdI=
Subject key identifier:   8D:AF:E0:79:2D:19:B3:EC:51:1D:DA:28:BF:72:1D:20:5B:AC:B5:09
Certificate issuer:       /CN=363d27b2e0e1ef390647383d7ba029d58848034b
Certificate serial:       0CD096
Authority key identifier: C3:6E:4D:A2:77:1D:D4:FE:C0:0B:E6:E9:78:C2:1D:B4:0C:6B:97:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/363d27b2e0e1ef390647383d7ba029d58848034b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/9957698f8f7103b658912b94d513c68c27b421fb.roa
Signing time:             Wed 24 Mar 2021 14:41:05 +0000
ROA not before:           Wed 24 Mar 2021 14:41:05 +0000
ROA not after:            Tue 24 Mar 2026 14:41:05 +0000
asID:                     264825
IP address blocks:        2803:6320::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839830 (0xcd096)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=363d27b2e0e1ef390647383d7ba029d58848034b
        Validity
            Not Before: Mar 24 14:41:05 2021 GMT
            Not After : Mar 24 14:41:05 2026 GMT
        Subject: CN=9957698f8f7103b658912b94d513c68c27b421fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9a:bb:d3:7d:03:40:24:10:fb:1b:29:88:b0:
                    7d:05:31:b9:dc:ce:cc:a9:23:bb:ca:5d:fd:8f:97:
                    24:75:9c:01:4c:2c:e9:a1:bb:f8:5c:76:1a:a5:6c:
                    df:16:3a:b6:f9:92:5f:f8:96:7a:fd:fc:2e:b8:b3:
                    19:4d:e2:c1:9d:f7:7f:05:74:58:6c:5c:51:b0:9e:
                    2c:d0:70:42:2b:68:5a:df:d4:4f:a9:52:f4:89:7f:
                    4c:c7:05:58:e5:9d:81:bf:15:a7:27:de:a6:2a:19:
                    4d:bd:e3:9d:24:0f:07:13:70:0f:10:ad:77:e4:f8:
                    46:28:fd:19:0f:7e:85:a8:72:ed:fb:53:30:0d:64:
                    60:c1:cc:c9:1a:4c:4f:a8:b2:06:6b:72:23:19:42:
                    92:04:cd:bf:d4:03:3f:79:a3:30:2d:62:7b:e6:00:
                    08:18:c5:ef:e1:3d:ca:0d:d5:b7:86:88:2b:c9:69:
                    1c:08:49:de:85:2b:41:f9:b0:67:ec:a9:0b:93:f0:
                    49:f1:cf:95:a2:b3:ce:e5:21:2e:d7:7e:ec:43:5b:
                    0c:52:0e:3e:72:d1:23:66:da:2a:6d:8c:e4:ca:29:
                    38:2d:b9:9e:bc:8b:fa:ad:82:23:0b:a5:9e:8e:82:
                    dd:bf:38:b8:0e:01:9b:af:24:fd:39:24:75:eb:bc:
                    32:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:AF:E0:79:2D:19:B3:EC:51:1D:DA:28:BF:72:1D:20:5B:AC:B5:09
            X509v3 Authority Key Identifier:
                keyid:C3:6E:4D:A2:77:1D:D4:FE:C0:0B:E6:E9:78:C2:1D:B4:0C:6B:97:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/363d27b2e0e1ef390647383d7ba029d58848034b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/9957698f8f7103b658912b94d513c68c27b421fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7dd5ae62-24ad-4276-be5c-e5410b1d42d2/363d27b2e0e1ef390647383d7ba029d58848034b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6320::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:01:38:49:b0:10:b7:d6:e3:9d:48:dc:92:59:80:f8:c8:2c:
         b6:0a:79:1c:94:50:53:15:46:7a:19:3a:a8:43:cb:ea:28:05:
         d2:fc:8c:91:7f:5b:53:c3:15:f6:2d:b7:73:9b:3d:77:75:34:
         2d:11:af:d8:a8:76:9e:6e:20:38:24:a0:8a:d5:dc:40:2c:29:
         2d:86:df:c9:f8:34:07:1b:c4:7f:4a:c0:39:a8:75:11:3c:3f:
         19:e3:39:eb:8f:37:9e:ce:19:cf:3f:95:96:b6:bb:75:c6:1e:
         0a:02:46:14:bc:c4:94:1f:7d:11:69:6e:2c:da:03:1f:af:0f:
         e7:ed:20:81:34:75:93:5f:8a:f8:f3:66:1e:3a:a1:16:b5:5c:
         83:69:74:aa:cc:d0:97:2c:7d:3e:dd:17:45:94:64:68:17:cc:
         40:d5:3f:3b:64:69:09:85:87:36:6a:b3:e4:50:65:5b:8a:83:
         39:6e:a6:0b:39:a4:16:8f:eb:ee:4e:7f:78:79:cb:fa:6d:ed:
         d4:d2:a0:36:36:6a:80:72:e6:32:9b:54:7a:fd:c0:dd:c5:52:
         16:22:9f:80:f8:c8:0b:84:36:a5:48:24:a4:7f:fd:69:68:63:
         27:84:c0:01:04:3c:ff:a2:42:3f:71:8d:b7:d5:4b:1f:4c:f8:
         31:1b:c3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----