Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9bb1203102f44608dd6e2cfe7cce0da91500df62.roa
File:                     9bb1203102f44608dd6e2cfe7cce0da91500df62.roa (raw, json)
Hash identifier:          uQWlxbMJsbVIqsC+T/taS5G9St/+Wi2GHtkeo9su3Jg=
Subject key identifier:   BA:F9:16:27:29:46:82:D4:BF:0C:12:2D:38:CA:4B:22:57:EE:77:AE
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E58CD
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9bb1203102f44608dd6e2cfe7cce0da91500df62.roa
Signing time:             Wed 24 Mar 2021 14:39:09 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     61468
IP address blocks:        2800:68:1f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940237 (0xe58cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=9bb1203102f44608dd6e2cfe7cce0da91500df62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ed:6a:2b:88:ea:18:35:65:d6:ba:4d:7a:aa:
                    c2:0a:03:60:07:eb:fd:36:51:6a:84:2f:3d:12:ad:
                    7d:02:d2:33:32:4f:bf:9b:0d:97:57:17:22:60:7f:
                    e2:c7:69:5a:42:14:fa:53:6c:e5:35:11:5b:5d:32:
                    56:12:eb:1e:84:f6:c9:ef:b3:96:e5:7c:cf:df:ad:
                    4b:9b:5d:15:0d:31:5f:bc:9c:8b:df:e1:6e:1e:ca:
                    f0:93:45:51:21:a3:e4:07:d6:41:f6:62:5e:83:97:
                    3b:a4:78:08:40:d7:0b:c6:52:17:f2:db:0c:08:d2:
                    c2:8d:3b:e9:8e:da:24:ed:57:a2:a6:57:3d:c0:bd:
                    9c:cd:62:de:59:e8:de:14:05:4c:d5:2c:e3:b1:58:
                    0d:0a:61:68:10:6d:2d:ff:f6:3f:c5:32:23:1d:fa:
                    60:36:eb:a7:8a:ec:ef:8a:5d:29:2e:94:74:7b:13:
                    79:0a:c3:44:f4:fa:70:7f:a2:b0:83:c9:fb:8b:b0:
                    f9:5e:c7:2e:9e:4a:73:1a:e2:83:db:1d:6f:0d:e2:
                    7a:17:5b:c0:fb:8c:1a:c6:94:86:43:3e:aa:64:f1:
                    d1:61:9c:7d:b8:7a:1d:0f:f7:d3:6a:e9:23:9e:8c:
                    98:f6:5a:f2:16:14:0c:e5:c5:af:12:3b:34:72:0d:
                    ba:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F9:16:27:29:46:82:D4:BF:0C:12:2D:38:CA:4B:22:57:EE:77:AE
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/9bb1203102f44608dd6e2cfe7cce0da91500df62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:f0:2f:3a:a5:4b:9a:10:7d:af:c3:16:fd:7f:6e:2b:c3:49:
         56:1f:01:a2:32:d0:dc:52:c5:22:ab:f4:f3:63:bc:7c:58:56:
         7c:db:0b:c7:92:bf:38:6a:ed:0a:f1:c9:6d:41:93:d7:75:5a:
         d3:d8:36:26:31:36:b5:77:d5:b4:35:c1:af:fd:c9:c5:51:b9:
         a9:76:c0:93:60:eb:65:9c:ae:bd:a5:79:5a:e6:20:d5:d6:60:
         e9:fd:59:f3:fa:25:41:8f:8a:7c:c2:4e:ff:e0:e3:6d:9d:d8:
         ab:33:21:9a:2b:7b:13:dd:8d:80:3e:9a:d3:2d:c2:11:21:d6:
         fa:9f:40:b1:fd:de:2b:b3:af:b8:63:66:0a:f2:ab:cf:ab:fc:
         50:55:4f:61:8b:40:da:64:d9:2d:a7:d0:20:7a:43:96:55:c8:
         5a:50:e5:ba:6f:ae:07:53:90:59:33:7e:0a:a5:36:46:f4:86:
         1b:75:0d:73:ac:23:5b:50:da:1d:3c:94:1d:26:32:72:b8:a0:
         db:50:39:d9:97:41:12:fa:55:ea:38:f4:be:3f:a8:3f:fc:42:
         c6:0e:fa:0c:ee:79:06:68:f5:ab:f3:2b:41:40:cc:25:ee:ee:
         7d:ea:cb:da:56:46:4a:92:cc:9f:11:cc:44:7f:1d:be:48:36:
         80:cf:f9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----