Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/881e082e-0544-431e-8d1b-6cb165c3a735/cd7134bee4efc52674fd46df5a1e61013c9e84ac.roa
File:                     cd7134bee4efc52674fd46df5a1e61013c9e84ac.roa (raw, json)
Hash identifier:          fwflhtFUUKVPngMjo6MRHn4JSjyyamyj80A+qVbhZ5w=
Subject key identifier:   03:78:D1:7B:58:2E:A9:10:3C:62:B1:0D:9A:61:58:2A:AF:4F:40:F9
Certificate issuer:       /CN=ae23196081a357896e28d16bad3ce2331a9f7ae0
Certificate serial:       0D799E
Authority key identifier: 21:48:4E:3D:15:00:AC:D5:8B:CA:1D:71:E4:FC:AA:FD:8D:6A:67:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae23196081a357896e28d16bad3ce2331a9f7ae0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/881e082e-0544-431e-8d1b-6cb165c3a735/cd7134bee4efc52674fd46df5a1e61013c9e84ac.roa
Signing time:             Wed 24 Mar 2021 14:31:44 +0000
ROA not before:           Wed 24 Mar 2021 14:31:44 +0000
ROA not after:            Tue 24 Mar 2026 14:31:44 +0000
asID:                     263718
IP address blocks:        2801:17:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883102 (0xd799e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae23196081a357896e28d16bad3ce2331a9f7ae0
        Validity
            Not Before: Mar 24 14:31:44 2021 GMT
            Not After : Mar 24 14:31:44 2026 GMT
        Subject: CN=cd7134bee4efc52674fd46df5a1e61013c9e84ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d6:c3:47:5c:48:a1:c0:58:35:1c:56:03:ea:
                    a4:fe:b8:ac:45:6b:fe:6a:01:bc:0d:73:51:24:94:
                    51:18:37:8d:3a:fd:89:c9:72:1e:cb:50:27:ce:0e:
                    dc:43:76:d9:4b:f9:67:91:30:94:75:11:01:cc:7d:
                    c7:72:32:40:6d:4f:64:e1:4e:24:4f:3b:a4:77:99:
                    c2:fa:3f:c0:c0:75:bb:45:34:7f:01:24:6c:b5:fa:
                    28:06:9e:24:ff:01:ed:90:97:d4:c7:49:b3:e7:e3:
                    f3:0e:4b:72:0e:23:06:e9:26:11:3a:88:1c:6b:66:
                    37:c9:03:e0:e8:22:6c:8c:5a:7e:4f:5a:69:dc:3f:
                    51:5f:35:35:a9:6f:8c:6b:23:b6:70:b7:eb:17:aa:
                    52:5a:52:fa:f9:c7:7e:45:4a:68:d0:14:b9:0b:f8:
                    49:79:01:3d:e6:49:d7:0e:d9:67:6f:da:d6:3f:c8:
                    47:ba:13:bd:7d:ea:cb:32:d8:2f:eb:eb:54:8f:41:
                    c1:9b:b6:ad:f4:e3:7e:ad:80:bf:89:44:27:7b:b3:
                    75:63:bc:00:70:a2:a3:31:c2:d1:cd:58:c3:4b:3d:
                    7c:69:cc:44:05:21:7f:ae:4a:9c:89:9d:c5:68:c1:
                    60:9c:b6:23:a8:ee:fd:54:79:8b:d1:fb:9a:e0:12:
                    52:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:78:D1:7B:58:2E:A9:10:3C:62:B1:0D:9A:61:58:2A:AF:4F:40:F9
            X509v3 Authority Key Identifier:
                keyid:21:48:4E:3D:15:00:AC:D5:8B:CA:1D:71:E4:FC:AA:FD:8D:6A:67:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae23196081a357896e28d16bad3ce2331a9f7ae0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/881e082e-0544-431e-8d1b-6cb165c3a735/cd7134bee4efc52674fd46df5a1e61013c9e84ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/881e082e-0544-431e-8d1b-6cb165c3a735/ae23196081a357896e28d16bad3ce2331a9f7ae0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:0f:a3:29:43:df:c8:e4:49:13:95:47:f4:13:b1:09:21:86:
         43:35:7d:79:fe:85:65:92:22:8c:6d:e7:7f:1f:cf:cb:33:6f:
         f9:52:e2:ed:39:d8:db:91:66:ab:92:92:53:e1:d0:be:72:4e:
         37:5a:1d:3c:17:dd:e4:02:bc:af:b6:c5:78:e6:28:f9:6a:11:
         a6:25:2d:55:3b:e5:b6:c5:75:58:ac:a8:26:f2:92:40:cc:7d:
         d0:e4:e1:c1:ae:48:21:ab:30:95:46:84:93:37:5b:50:fa:f8:
         a2:d0:bf:6b:ac:18:db:f8:77:fe:41:d8:f3:fd:9a:af:49:6d:
         b9:81:74:2c:26:6d:76:b8:c4:f9:3d:89:49:43:dd:dd:d5:5a:
         87:7a:68:a9:94:67:ad:67:9d:1f:ff:4d:d0:1f:6b:88:b6:95:
         aa:21:43:d4:9e:b7:90:c6:6a:80:03:ae:df:ea:51:2d:be:89:
         f8:7a:43:5e:19:cd:20:45:5a:f1:df:9c:ec:e2:8a:5a:36:f4:
         eb:fe:f6:6c:a0:1c:b7:1e:ff:7f:5a:20:fb:98:cc:d5:f3:6f:
         25:8e:27:ca:a0:3f:12:bd:2d:29:4f:4b:c5:11:71:5a:d5:80:
         19:93:49:f6:96:3d:4a:83:48:c1:13:84:e7:03:b7:94:6d:2e:
         64:a5:f8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----