Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9a0ee063-12a6-404e-8c1d-e8ab23df0516/c2324d7257342ab891d2a7732b391e393d422414.roa
File:                     c2324d7257342ab891d2a7732b391e393d422414.roa (raw, json)
Hash identifier:          /0cPWtRbaf1E6BWzRhLr1mFF4SnMnQJVyZYwj46YLjU=
Subject key identifier:   53:81:41:96:BE:D5:5C:84:13:2C:2A:FA:4A:76:E0:EA:35:EB:40:26
Certificate issuer:       /CN=ed1a81b0f0510274433e6b7ae3bb2cf968e3061f
Certificate serial:       0558
Authority key identifier: 1F:97:69:97:2B:15:69:94:1B:AB:CA:F1:B5:FA:1F:5A:B2:01:81:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed1a81b0f0510274433e6b7ae3bb2cf968e3061f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9a0ee063-12a6-404e-8c1d-e8ab23df0516/c2324d7257342ab891d2a7732b391e393d422414.roa
Signing time:             Mon 05 Jul 2021 12:01:57 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     265822
IP address blocks:        2803:a10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1a81b0f0510274433e6b7ae3bb2cf968e3061f
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=c2324d7257342ab891d2a7732b391e393d422414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:20:52:e1:e4:d1:46:87:0f:f9:89:8f:9d:2a:
                    4e:e5:5d:d6:16:d3:62:f6:27:39:2b:f9:1a:1a:19:
                    ea:62:d9:8b:97:c3:cb:c9:ca:b7:75:62:c1:c4:73:
                    f5:a4:05:d2:c4:2f:a4:c1:74:d0:7a:27:fa:f5:56:
                    a0:52:6f:cc:ee:7d:4d:a7:11:d9:a2:79:e7:9c:b7:
                    31:3b:fe:b9:7f:4c:56:d8:89:05:72:17:93:bc:ee:
                    42:d2:bb:00:0f:7d:a3:96:d0:d3:8e:71:af:66:23:
                    70:ab:0b:31:78:b1:01:80:31:3b:58:d3:ca:02:05:
                    be:b0:fc:98:99:20:76:99:8f:0e:86:24:76:9f:8e:
                    8c:c5:62:fe:72:85:59:b7:8d:28:a4:db:d0:34:63:
                    ba:f0:64:27:a8:a5:47:99:e5:48:1a:b2:93:57:66:
                    2d:fd:ef:27:24:42:2a:fc:49:9b:45:d5:0b:e3:d4:
                    16:44:f8:65:44:11:b5:16:fd:5a:ff:12:2e:df:d5:
                    40:e6:a3:12:a7:61:7a:83:87:56:74:3a:3f:17:f7:
                    de:69:9e:03:d8:93:5d:9c:39:e8:4f:53:ca:0d:94:
                    5e:a9:83:6f:e5:9c:fb:a7:18:2f:0e:b7:c2:b0:4e:
                    63:3a:b4:ab:1f:c5:79:a7:1d:56:99:ba:9f:f1:19:
                    7f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:81:41:96:BE:D5:5C:84:13:2C:2A:FA:4A:76:E0:EA:35:EB:40:26
            X509v3 Authority Key Identifier:
                keyid:1F:97:69:97:2B:15:69:94:1B:AB:CA:F1:B5:FA:1F:5A:B2:01:81:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed1a81b0f0510274433e6b7ae3bb2cf968e3061f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9a0ee063-12a6-404e-8c1d-e8ab23df0516/c2324d7257342ab891d2a7732b391e393d422414.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9a0ee063-12a6-404e-8c1d-e8ab23df0516/ed1a81b0f0510274433e6b7ae3bb2cf968e3061f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a10::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:59:df:de:f0:45:ed:03:7e:0b:94:de:d6:12:b1:ac:c2:14:
         7b:2d:20:79:fa:02:ba:e8:2e:64:58:7d:a5:e8:c9:c1:61:77:
         89:45:59:7f:d2:f3:db:f2:1a:40:37:14:31:c5:72:a4:54:39:
         73:d8:55:45:b8:0b:eb:9c:53:0a:3c:04:e2:b1:d6:17:16:64:
         08:8b:af:ce:fd:8f:e3:33:e8:48:19:f6:4a:e4:7e:a7:f5:85:
         0b:39:c4:85:d9:18:6d:8f:ce:13:6c:66:13:9b:95:85:5d:36:
         0a:9c:47:2e:ab:6a:08:a4:e2:b3:3d:47:0b:da:51:b5:34:66:
         2c:b8:ff:75:fc:4c:a8:52:e8:a5:4a:a3:9b:68:12:77:1a:f2:
         87:70:ca:3a:81:ae:d1:2a:f1:31:f2:e5:f1:be:80:35:e4:68:
         0c:b8:24:5d:b5:7d:95:2a:67:4a:69:c2:a7:ab:93:89:70:13:
         15:62:53:04:98:ad:a3:fa:89:a0:09:97:af:2c:bd:71:4e:32:
         7e:b0:54:00:ba:bd:33:f0:79:de:15:96:d5:a6:d7:2e:b1:ab:
         fb:66:27:61:80:d1:b8:d4:4f:a7:48:e5:f7:f1:fd:dc:d7:e2:
         80:4b:ca:d9:6e:9b:1c:ba:d5:8e:d8:87:89:08:dc:7e:5f:3f:
         52:bb:f9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----