Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/4037621e5f97feed02f75ae8686a9e81fb925c51.roa
File:                     4037621e5f97feed02f75ae8686a9e81fb925c51.roa (raw, json)
Hash identifier:          05HmFno1s96QLuOzvn3e8miMUPq6sSRh117LD/A1RFY=
Subject key identifier:   3A:B7:A4:19:C3:03:34:A2:3D:BD:BA:95:02:3C:77:C8:B2:E4:BE:F1
Certificate issuer:       /CN=baeea1c2e5b60654afd780eaa676eed50b19b634
Certificate serial:       149F
Authority key identifier: 53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/4037621e5f97feed02f75ae8686a9e81fb925c51.roa
Signing time:             Fri 15 Oct 2021 05:33:58 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Thu 15 Oct 2026 03:00:00 +0000
asID:                     271889
IP address blocks:        2803:210::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5279 (0x149f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baeea1c2e5b60654afd780eaa676eed50b19b634
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2026 GMT
        Subject: CN=4037621e5f97feed02f75ae8686a9e81fb925c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:dd:e8:5d:3c:fe:2b:1d:3c:29:28:c0:70:cf:
                    fd:b6:f3:19:60:e6:ec:f6:2a:15:a4:5c:f5:21:9d:
                    53:00:2d:2a:26:e4:aa:64:e3:2a:c5:dd:f6:6f:bd:
                    a9:b8:5b:0c:d0:e2:c0:69:63:ff:b0:04:aa:7c:bf:
                    21:a7:e9:6f:cd:ef:ea:46:63:0f:59:53:2d:04:76:
                    b9:ca:87:c5:65:37:5a:b9:8c:e0:93:08:67:78:0f:
                    41:eb:70:bc:12:bb:1b:c1:9d:38:2a:f2:01:5e:5d:
                    9d:a6:7a:77:b9:8a:65:0c:2c:63:63:c7:7a:d1:50:
                    17:89:42:c2:b3:39:35:37:58:c6:a2:df:7a:bb:59:
                    a5:4c:78:88:a5:ef:f2:14:2d:29:a3:2f:5a:ac:2a:
                    dc:3e:70:e5:07:8d:9f:68:d0:c5:92:05:f7:71:36:
                    76:3e:04:af:92:d0:28:bc:37:fa:d5:3d:74:39:dc:
                    65:86:da:25:df:15:9d:5d:27:6f:dd:3b:89:e0:24:
                    48:bf:30:76:9e:15:d8:54:79:c1:57:1c:4e:6b:bd:
                    b4:23:5c:dc:1a:37:e4:ff:83:29:60:3a:4b:82:49:
                    4c:92:48:9e:74:63:86:5b:d0:68:79:97:c4:d0:fb:
                    1c:95:61:e4:5a:b9:9e:5f:ed:12:1d:78:a1:bc:0c:
                    44:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:B7:A4:19:C3:03:34:A2:3D:BD:BA:95:02:3C:77:C8:B2:E4:BE:F1
            X509v3 Authority Key Identifier:
                keyid:53:E1:4D:56:4D:FD:A0:C6:2B:71:94:97:9A:74:98:81:ED:A5:F3:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/baeea1c2e5b60654afd780eaa676eed50b19b634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/4037621e5f97feed02f75ae8686a9e81fb925c51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98f94eff-83ee-46fd-8f70-313db674b8c3/baeea1c2e5b60654afd780eaa676eed50b19b634.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:210::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:06:21:2a:3f:14:a3:6c:76:44:7d:f0:ca:45:dd:8a:61:c4:
         83:66:4a:f0:0f:cf:0c:b3:ae:eb:5f:c4:48:84:e9:34:fd:64:
         19:f2:96:22:2e:83:75:3b:41:a8:20:2f:8b:a3:8b:4e:01:78:
         a3:57:97:1c:44:2f:1a:02:99:5d:d4:16:dd:fb:14:e3:ee:c7:
         51:58:cd:1e:10:f1:a7:45:d4:e6:ce:b7:6a:ed:24:31:9e:27:
         0d:61:db:1b:8e:d0:41:63:ec:aa:88:d7:10:9d:a5:cd:0c:a2:
         0a:e5:14:dc:16:a0:1b:34:65:06:92:69:53:dd:01:cf:85:82:
         b9:79:bc:4b:61:2e:4a:95:32:64:df:cf:92:ea:50:c7:d4:08:
         3a:41:b5:15:80:65:96:0a:8f:a5:08:65:25:ed:bc:74:ce:a8:
         40:3f:fa:9d:37:71:29:6f:4e:d3:7f:d4:94:27:e9:36:31:d7:
         7c:1e:f0:36:e7:bc:b1:b6:0e:da:76:9b:c0:ba:45:c0:33:4c:
         7d:ae:18:57:52:08:d1:0d:ed:c4:38:ec:b4:0b:1e:19:68:9f:
         45:88:99:cc:fe:43:08:33:a5:58:f9:1a:f5:6d:bf:10:88:3d:
         f9:8b:3a:d0:13:e2:48:4b:35:17:1d:fb:cd:89:d8:27:2f:59:
         54:de:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----