Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f0d05a70a6a7b623f13daa19d02ec952aead7a71.roa
File:                     f0d05a70a6a7b623f13daa19d02ec952aead7a71.roa (raw, json)
Hash identifier:          WWPeoIKJ2LWH/oX2gVc8OuDA25BNVnHH1WirkMvXcfg=
Subject key identifier:   EA:C2:6F:0B:61:AC:7F:A8:9D:BE:C9:C4:C5:D7:53:8A:D3:F9:A7:C1
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0E9849
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f0d05a70a6a7b623f13daa19d02ec952aead7a71.roa
Signing time:             Wed 24 Mar 2021 14:29:30 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        2800:600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956489 (0xe9849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=f0d05a70a6a7b623f13daa19d02ec952aead7a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:81:56:25:2a:46:0a:6a:cc:fe:db:38:7a:2d:
                    ea:12:04:82:6b:dd:b8:19:29:e6:cd:43:88:66:05:
                    9c:c4:78:41:11:38:2c:37:0c:ab:a7:60:3a:08:eb:
                    4d:2b:de:78:22:fd:22:a7:09:62:6f:a7:e7:63:d2:
                    55:ee:13:8a:89:af:06:10:e2:e5:c3:bc:05:7b:59:
                    ba:a9:e0:df:9a:eb:7f:c9:ad:18:29:d5:28:02:04:
                    1b:62:94:4a:ef:22:75:01:2b:fd:21:74:ff:d4:28:
                    bf:a4:f6:88:4f:27:a0:79:f8:06:fe:dd:23:44:b9:
                    da:48:2c:15:66:6c:0e:5d:1a:ab:ed:f2:e6:88:a3:
                    f8:9b:ce:67:10:f8:7b:bf:cc:75:f2:a8:28:6c:95:
                    77:da:ee:9a:25:dd:21:82:0d:de:48:e9:72:32:d1:
                    a5:7b:c9:e3:98:77:7e:55:0e:7d:11:8f:8b:85:f8:
                    4d:6d:0d:fd:32:f2:48:a1:6a:87:f3:02:76:25:24:
                    4b:c7:5d:71:35:46:5a:5a:32:6a:51:4f:f4:c8:b2:
                    4f:fc:4a:f6:5c:5d:d3:f2:21:dd:e7:be:11:10:30:
                    ca:6c:db:8a:ab:2f:03:e9:2c:bf:f0:a3:f8:e0:19:
                    93:d8:cb:a1:f9:fc:62:84:8b:97:fc:fd:05:4d:39:
                    e6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C2:6F:0B:61:AC:7F:A8:9D:BE:C9:C4:C5:D7:53:8A:D3:F9:A7:C1
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/f0d05a70a6a7b623f13daa19d02ec952aead7a71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:600::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:42:e0:33:ea:29:1f:00:2b:c7:c5:03:4e:be:5b:40:51:a7:
         9b:77:8e:ec:a6:76:e4:64:71:70:e3:ab:47:78:40:ed:8c:62:
         4a:70:51:fd:e5:a8:49:f9:34:06:3c:65:40:80:28:a2:2d:72:
         1c:88:80:0b:1d:0b:74:33:6c:0d:0b:7e:1e:46:ab:37:bd:17:
         b5:75:fb:69:53:0d:4d:80:3c:d0:2d:c8:2a:9a:64:5a:f5:a9:
         d4:18:35:12:4e:db:ca:28:aa:b4:4e:4b:82:ed:0e:f9:10:e8:
         6e:ca:e5:fc:5e:88:be:6a:66:8a:11:7e:48:8f:40:de:12:9d:
         9b:f3:1e:45:06:fe:54:10:08:d6:7e:a5:b6:21:dc:23:e1:ea:
         43:9d:1e:c2:7f:fd:90:dc:4a:4c:90:c6:29:94:c3:5d:15:9e:
         cc:ec:a0:7d:0e:20:df:6b:f4:3e:ec:b7:64:86:e8:7d:0f:25:
         69:0b:50:dc:ac:18:56:c2:02:82:4e:30:9f:41:37:1b:1b:2c:
         6f:34:48:dd:74:d2:5c:a8:c7:cd:2a:19:33:50:84:11:b6:19:
         e3:eb:3a:b7:53:7e:dd:a9:32:fd:e3:b8:d9:29:8a:d2:e9:10:
         59:db:da:8c:57:0d:87:95:ac:dc:2c:40:a2:20:d2:41:03:b3:
         54:7c:5a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----