Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/6c43177a40a03e1bf64799d735f6525b4fad6327.roa
File:                     6c43177a40a03e1bf64799d735f6525b4fad6327.roa (raw, json)
Hash identifier:          JBRur3CcHieMRKhl1NkfMN6JuBorRa64BGfwU/qA5hE=
Subject key identifier:   EA:D4:C0:CD:72:FE:2B:06:26:09:AD:6B:D7:84:31:77:E8:6C:0C:82
Certificate issuer:       /CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
Certificate serial:       0E4E30
Authority key identifier: F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/6c43177a40a03e1bf64799d735f6525b4fad6327.roa
Signing time:             Sat 08 May 2021 02:16:51 +0000
ROA not before:           Fri 07 May 2021 03:00:00 +0000
ROA not after:            Sun 07 May 2023 03:00:00 +0000
asID:                     52330
IP address blocks:        2803:8340::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937520 (0xe4e30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff1cca9f77f27742b485aae3810060fa869e1fa9
        Validity
            Not Before: May  7 03:00:00 2021 GMT
            Not After : May  7 03:00:00 2023 GMT
        Subject: CN=6c43177a40a03e1bf64799d735f6525b4fad6327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c3:a8:b1:1b:34:4e:67:8c:ab:b1:fc:1a:22:
                    b8:bc:b1:d7:0d:20:2a:cc:eb:5c:6a:f0:e6:ed:c6:
                    c8:f9:f0:c6:24:9a:48:e2:4b:13:6d:b3:f5:d2:8b:
                    e4:88:4d:16:2c:3b:1c:bf:a2:78:05:97:86:7d:67:
                    58:f8:78:2d:64:c1:9f:3c:51:f2:b0:6d:5f:a1:a4:
                    5d:df:10:5e:e4:f0:4b:f7:ed:28:81:a5:73:d3:ad:
                    1a:80:1a:8a:98:53:35:c5:eb:66:27:83:f4:88:cd:
                    b4:2d:1a:97:7b:93:9a:e9:cc:b6:b8:a4:3f:04:73:
                    71:62:68:73:91:a9:97:b5:07:ff:35:37:3d:29:fc:
                    6c:81:f8:ae:17:21:6b:37:1a:17:c1:d5:51:86:6e:
                    f5:f6:47:04:fe:5b:a7:bc:f1:8f:7c:a5:fd:34:a0:
                    8d:e3:0b:89:ab:5c:d2:6c:af:a2:4c:1f:75:49:43:
                    e2:8f:5f:08:db:d2:5d:20:a1:98:6a:5e:36:6a:46:
                    af:40:a2:10:8b:83:2d:76:4b:56:c7:2f:fc:e3:a5:
                    92:7b:45:c2:1f:cc:9e:0a:a7:1d:1c:95:a3:ea:63:
                    d5:6c:ca:5f:f5:5d:3b:14:83:95:71:bb:e8:13:26:
                    82:de:c4:7c:a0:1b:d6:84:53:8c:47:c1:d3:07:c8:
                    33:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D4:C0:CD:72:FE:2B:06:26:09:AD:6B:D7:84:31:77:E8:6C:0C:82
            X509v3 Authority Key Identifier:
                keyid:F2:DE:02:B9:29:4C:D5:DD:05:FE:0E:25:D7:E7:1D:16:FB:BE:45:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff1cca9f77f27742b485aae3810060fa869e1fa9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/6c43177a40a03e1bf64799d735f6525b4fad6327.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c66760-f962-4578-8f05-2e6902ccc2d7/ff1cca9f77f27742b485aae3810060fa869e1fa9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8340::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:94:d2:28:12:12:a9:55:4f:d0:7c:dd:fb:a5:87:67:e7:82:
         a3:c8:14:ac:e9:98:09:fd:97:64:3d:6f:a7:b6:13:b7:86:21:
         28:05:da:51:96:2f:ad:b3:db:6e:8a:ba:43:52:79:9b:9b:6e:
         39:97:3a:05:5f:ff:91:a8:aa:ce:4a:30:79:65:59:1c:1a:2d:
         f7:ad:b2:88:f5:fe:14:6c:d0:c0:64:1c:82:de:fd:e6:21:c2:
         ba:aa:8c:bf:1e:64:80:ff:cd:8f:34:8e:8c:61:ed:09:86:e2:
         78:17:61:53:ab:1a:0d:c4:28:36:01:9a:7f:de:18:8a:1a:54:
         70:cb:e2:5b:33:cc:ed:f3:c7:b5:b2:8a:14:a4:38:fe:13:2f:
         73:91:b8:a6:cb:dd:91:bc:c9:9e:bb:2d:25:06:96:c1:ae:6a:
         2a:fc:55:0e:3e:5d:98:46:15:5d:da:62:15:d1:5d:95:08:54:
         7b:ae:02:22:7a:a5:59:8c:e7:1c:25:97:66:61:b3:3a:dd:e7:
         49:78:9f:7b:f7:fe:5c:43:1e:5c:9f:e8:13:db:b9:f8:49:03:
         f3:5f:90:3b:c0:f7:e0:ef:e1:81:0f:3f:dc:00:92:e2:1a:e9:
         c9:df:25:22:d2:d9:62:a2:8a:e8:5e:6a:8f:1a:55:2c:0a:24:
         23:9b:13:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----