Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/fc8939260cf4c4b3f3078d5948740891005690f3.roa
File:                     fc8939260cf4c4b3f3078d5948740891005690f3.roa (raw, json)
Hash identifier:          wZMCYnPVmgSEnMTIPbWmww7csGloEk0anHx0OCwrJho=
Subject key identifier:   E2:7B:22:6A:C6:89:5C:58:8E:8C:16:17:3A:BE:28:71:5F:35:14:A1
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       0EF372
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/fc8939260cf4c4b3f3078d5948740891005690f3.roa
Signing time:             Wed 24 Mar 2021 14:29:32 +0000
ROA not before:           Wed 24 Mar 2021 14:29:26 +0000
ROA not after:            Tue 24 Mar 2026 14:29:26 +0000
asID:                     52323
IP address blocks:        2800:600::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979826 (0xef372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Mar 24 14:29:26 2021 GMT
            Not After : Mar 24 14:29:26 2026 GMT
        Subject: CN=fc8939260cf4c4b3f3078d5948740891005690f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5c:a4:ea:10:94:21:44:9e:92:16:5a:d5:ec:
                    89:8e:4f:9e:b2:55:cb:d5:2f:9c:15:33:36:80:c4:
                    7a:df:d8:7d:9b:27:d7:0c:75:ee:ce:9b:ce:96:b2:
                    9e:dc:ce:c1:c7:e7:17:ce:b9:ee:39:07:0a:0b:10:
                    95:85:45:5c:0a:1e:5c:80:76:c7:b0:67:6e:7d:79:
                    1b:8d:a1:13:eb:85:60:cd:eb:89:96:44:9e:a5:79:
                    ce:f5:ef:9d:9c:de:7f:e9:c4:4d:9f:47:c8:b6:a3:
                    72:bf:27:60:d2:f3:a8:2f:5e:5f:8b:19:38:bf:08:
                    c5:65:32:65:bc:e4:9c:ec:ea:07:64:03:59:fe:f9:
                    c2:4d:c2:3b:fb:86:82:9b:9a:b7:31:ca:9b:99:f8:
                    3a:9b:0b:9b:f8:41:4b:66:4c:79:db:cb:9d:77:99:
                    bc:0a:9a:31:45:ef:42:3d:69:6b:41:bf:f6:fd:32:
                    49:4d:0c:b9:f8:99:7c:14:1b:e0:f9:1f:4c:3b:86:
                    66:17:7a:6e:68:e6:f3:79:8a:1e:54:aa:2e:4e:70:
                    ee:b6:07:7a:52:98:e5:1d:65:df:1a:23:47:a2:96:
                    b9:42:83:62:ff:83:11:4e:e6:f7:ef:22:39:b9:9d:
                    22:7f:da:5c:3f:39:3d:10:6e:0a:cd:2b:12:3d:7a:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7B:22:6A:C6:89:5C:58:8E:8C:16:17:3A:BE:28:71:5F:35:14:A1
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/fc8939260cf4c4b3f3078d5948740891005690f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:600::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:8a:b6:aa:5a:1f:13:ef:c2:d0:20:f4:22:db:97:a4:12:a7:
         74:78:4e:09:46:8d:48:d3:87:88:1d:2a:ba:f7:76:c9:95:f1:
         99:33:8b:59:37:2c:c3:fa:01:6e:aa:3b:66:a0:ed:35:0b:34:
         e3:a6:67:2d:5a:e8:c6:93:14:7e:70:50:88:3a:a5:a5:b5:48:
         56:ca:fb:f1:59:03:ac:ef:0b:ba:c9:3b:26:86:97:75:1c:8a:
         7c:72:35:4e:b3:da:54:36:d0:b8:7e:77:7c:ab:f6:bb:e7:24:
         6a:83:8c:fc:0c:57:e1:c0:8c:73:f0:d8:94:d9:f3:9a:b7:21:
         71:90:57:85:bf:6e:78:f5:58:d2:8b:1b:b8:eb:e7:40:34:90:
         69:5b:d1:1c:e3:7e:89:d9:7d:49:93:00:d6:f6:39:65:41:4b:
         be:df:94:cc:cc:00:a8:12:38:fb:52:2c:12:43:fc:a8:cd:b1:
         fe:7f:ce:a9:8a:f2:c8:6a:0d:59:c2:4d:45:3d:30:18:0a:64:
         7f:52:77:74:f8:c8:22:7e:1b:98:cd:81:3b:92:41:37:4e:42:
         ff:ff:95:bd:40:02:63:c5:5a:fb:38:ea:75:12:97:6f:4b:51:
         94:3e:ee:1e:e2:aa:78:73:21:77:1f:36:b5:bf:b2:97:c8:3e:
         31:d3:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----