Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/d3c5ae830466857bea0ecd8c6fceafa9391034d9.roa
File:                     d3c5ae830466857bea0ecd8c6fceafa9391034d9.roa (raw, json)
Hash identifier:          zb5YhhEkZBQQAlIpsZP7ck2shwz8s/QBl7wyEYn+wrc=
Subject key identifier:   AB:5C:CF:4F:52:EC:D6:CE:DA:FC:06:75:86:55:21:CA:1A:84:C1:7F
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E3BAB
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/d3c5ae830466857bea0ecd8c6fceafa9391034d9.roa
Signing time:             Wed 24 Mar 2021 14:39:08 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     27947
IP address blocks:        2800:68:30::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932779 (0xe3bab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=d3c5ae830466857bea0ecd8c6fceafa9391034d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4e:fd:54:80:58:29:24:29:fa:09:23:38:fd:
                    fe:85:b0:6c:b5:1e:1f:29:de:9a:c4:5c:b5:91:91:
                    76:9e:01:4e:39:18:c5:ee:39:9d:a6:04:df:37:cb:
                    55:7d:55:2f:f5:93:f3:59:0a:b3:31:4c:02:9e:62:
                    24:4a:5a:a1:6b:7f:77:71:2d:46:81:ad:d2:fa:bf:
                    2a:ca:ca:7f:cc:77:1a:be:24:0a:42:51:9c:d5:9f:
                    c1:96:81:09:ec:bc:89:d2:7a:c5:22:6c:e2:16:e3:
                    b2:66:19:aa:44:a8:4d:15:54:4e:3e:81:fd:01:c1:
                    5b:6c:d2:c8:4f:ad:4f:af:23:8a:35:96:a4:56:80:
                    fa:0a:1d:c0:c8:9d:a3:94:18:f2:1c:fc:7a:3a:c7:
                    eb:85:67:fb:31:0e:0a:0a:cf:a3:dd:6b:a9:1d:a1:
                    a3:85:94:f5:3d:3b:61:17:77:9f:cd:0d:72:9b:60:
                    32:f6:99:ea:d6:43:aa:bf:d1:61:87:9d:9a:f1:4c:
                    59:87:11:c0:4b:7e:fc:79:6e:f3:81:3c:78:05:46:
                    94:cd:95:0a:d8:37:4d:92:e3:f1:01:1b:75:f1:18:
                    ec:84:41:6f:4d:95:69:1f:44:d4:a1:ee:d1:f0:35:
                    99:d6:f5:a2:75:ac:df:2f:27:c6:a7:c3:76:80:95:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5C:CF:4F:52:EC:D6:CE:DA:FC:06:75:86:55:21:CA:1A:84:C1:7F
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/d3c5ae830466857bea0ecd8c6fceafa9391034d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:30::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:3f:7b:4e:fe:1e:99:67:9d:1a:e7:06:05:49:35:24:7f:a1:
         36:3d:12:d6:d8:88:ee:3d:13:33:67:13:42:98:75:fa:6f:68:
         64:9b:59:a4:93:ee:ee:65:3c:4c:31:a6:d0:fc:f1:59:42:30:
         d0:64:d0:56:a4:70:47:1a:a0:3d:b5:9a:3d:87:f3:4c:26:90:
         f2:fd:82:5a:93:32:98:de:0d:98:3b:48:fe:50:b8:c6:28:76:
         e5:03:16:d1:fd:05:3e:f6:c3:2c:8f:39:10:a3:35:f6:ed:7a:
         bd:af:6e:ba:ce:39:c7:ad:16:c1:c7:70:0d:fc:f2:72:4d:be:
         43:af:e8:e6:17:ce:90:39:20:6b:85:8b:0c:eb:d3:b6:e6:48:
         f9:f4:91:c6:7e:c5:7e:d2:bc:46:15:c0:44:a5:0e:87:3b:e9:
         7a:1f:6b:c3:1b:52:57:b1:f9:04:83:80:8e:c4:a7:23:46:5a:
         68:19:f4:48:b4:36:cc:e0:67:e9:eb:13:3b:aa:c6:40:c9:eb:
         79:fe:08:98:b3:45:26:f8:7f:c6:98:76:ad:9f:55:7a:59:9d:
         11:aa:e2:74:df:0a:dc:e6:f8:b2:a3:5f:32:be:a3:dd:f9:bd:
         58:79:8c:fe:dc:3f:45:dd:8f:34:f8:5c:54:41:2f:0c:da:ae:
         64:25:18:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----