Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/ed1de8b0f81665936608d060334985a83924c74d.roa
File:                     ed1de8b0f81665936608d060334985a83924c74d.roa (raw, json)
Hash identifier:          btJ4Bv5YbHO5b0dC24f1MJZrQoEGyVwiifBonSEjxCA=
Subject key identifier:   5C:97:D6:F9:25:72:42:CC:CC:2B:24:4E:E8:B7:32:FE:99:B2:5F:E9
Certificate issuer:       /CN=05ae69d2f111c794165a01a865fe187b8831227d
Certificate serial:       0E413E
Authority key identifier: 82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/ed1de8b0f81665936608d060334985a83924c74d.roa
Signing time:             Wed 24 Mar 2021 14:39:08 +0000
ROA not before:           Wed 24 Mar 2021 14:39:07 +0000
ROA not after:            Tue 24 Mar 2026 14:39:07 +0000
asID:                     269844
IP address blocks:        2800:68:33::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934206 (0xe413e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ae69d2f111c794165a01a865fe187b8831227d
        Validity
            Not Before: Mar 24 14:39:07 2021 GMT
            Not After : Mar 24 14:39:07 2026 GMT
        Subject: CN=ed1de8b0f81665936608d060334985a83924c74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:68:31:75:64:b4:7a:0e:87:9a:d6:f8:60:12:
                    43:14:01:cb:c8:86:fb:31:99:07:a6:2d:53:61:e8:
                    47:f7:28:39:55:dc:2b:e3:df:d1:54:26:ef:49:b7:
                    67:b0:61:dc:9f:22:b4:8d:24:12:b0:bd:be:23:96:
                    0e:2d:d9:2b:86:e0:2e:cc:62:45:22:e9:dd:c4:90:
                    7f:0f:ed:10:2d:9b:ff:da:f8:1d:b4:89:fe:dd:ea:
                    6e:4b:51:b4:8d:f9:68:98:81:f0:91:00:2b:35:b3:
                    3a:eb:4b:46:d9:dc:8e:73:7f:ba:40:34:28:f5:50:
                    de:88:dd:f8:0e:03:5c:66:5b:0b:98:c6:3a:4a:67:
                    3e:5c:e4:2a:8d:1e:21:0a:b3:34:f8:9d:d9:35:bd:
                    f6:3a:34:04:e4:3a:d5:a6:30:16:f9:d2:f8:27:e2:
                    70:fc:3e:ea:20:1b:c5:de:26:4f:4b:b2:d3:23:88:
                    55:3a:64:a6:cd:38:cd:7d:a8:07:ea:4d:f6:e9:0a:
                    c5:83:00:1c:cd:3a:d3:4e:f5:c0:34:b7:71:d8:88:
                    d2:18:43:0a:73:f1:3c:e6:9f:90:8a:00:c7:be:11:
                    84:a7:c0:21:92:a6:0e:71:f1:16:ab:e2:7d:42:da:
                    c4:0f:60:cc:df:98:fb:37:64:51:ac:53:bc:b9:31:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:97:D6:F9:25:72:42:CC:CC:2B:24:4E:E8:B7:32:FE:99:B2:5F:E9
            X509v3 Authority Key Identifier:
                keyid:82:14:5E:DA:B6:58:1E:73:E4:BD:54:60:09:3E:CE:C9:76:0B:C4:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05ae69d2f111c794165a01a865fe187b8831227d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/ed1de8b0f81665936608d060334985a83924c74d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/05ae69d2f111c794165a01a865fe187b8831227d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:33::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:ba:ad:ad:85:87:67:76:c0:1b:da:60:da:d7:aa:0a:16:38:
         61:51:84:32:c0:8d:ec:2f:52:09:e4:0c:17:2d:06:b8:d4:40:
         12:8f:51:38:5a:83:d4:3e:82:4a:69:3b:9f:96:28:0e:74:11:
         b6:b3:a6:bc:98:20:b0:98:25:c1:5d:f9:de:0d:6f:d3:ef:4c:
         7c:3d:ea:52:14:68:94:14:68:9a:2c:2e:58:0f:a4:af:c1:a9:
         f7:4b:a4:8e:e6:40:3c:ec:5c:7c:63:6b:80:f8:b1:1d:fe:e8:
         ee:5b:2b:4f:a7:1c:d3:fb:a1:73:8f:e3:11:1e:e7:54:7d:bc:
         80:6a:90:73:07:92:86:f5:d1:dc:48:12:95:76:8a:86:4e:82:
         5c:17:1f:e1:9c:86:75:01:ef:4a:2e:e0:0c:03:40:8c:d0:43:
         95:bb:90:44:33:8c:7a:14:46:73:ac:fc:2d:80:78:e7:cf:f6:
         7e:5c:f1:f5:09:0a:e6:f1:be:19:d5:6a:f5:68:5d:c5:94:83:
         3b:96:d8:53:20:82:53:ae:d4:fe:a3:ec:18:7c:1d:27:92:42:
         20:b7:2d:26:0f:1d:73:c1:1b:f5:80:4a:13:5a:ad:05:6a:d1:
         a9:33:f8:8a:bc:5a:27:84:c4:6e:b7:dd:b6:f5:0f:a2:66:22:
         25:f0:91:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----