Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/ad32cce4d9db9e190317913e775902c2d7a409ae.roa
File:                     ad32cce4d9db9e190317913e775902c2d7a409ae.roa (raw, json)
Hash identifier:          xieGXJ4orih6cPlTMeFKEsS7LAfehJBduDZMBFENPSM=
Subject key identifier:   0D:60:D5:85:FC:86:EF:6F:C6:0B:AC:E8:6E:B4:CA:2B:AF:1A:CD:1D
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       0ABA30
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/ad32cce4d9db9e190317913e775902c2d7a409ae.roa
Signing time:             Fri 15 Oct 2021 08:48:51 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Thu 15 Oct 2026 03:00:00 +0000
asID:                     54235
IP address blocks:        2803:5ce0:e00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 703024 (0xaba30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2026 GMT
        Subject: CN=ad32cce4d9db9e190317913e775902c2d7a409ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:a1:e5:6b:ea:00:e8:ca:86:cd:b6:79:31:
                    17:de:84:92:5b:4e:57:a9:c9:c5:1a:4a:40:95:9c:
                    cb:88:61:c1:50:6d:69:02:81:81:b4:73:73:f4:13:
                    b2:d1:78:18:d6:02:07:81:64:3e:ce:e6:22:8b:c9:
                    6c:4c:fb:e7:1a:ef:67:9c:94:02:85:16:6e:45:da:
                    46:10:6e:eb:fc:25:e0:95:50:91:11:d6:bb:ad:66:
                    21:62:84:e1:be:bf:e7:c7:d2:e9:df:11:5e:0c:19:
                    8c:3c:94:8b:86:19:f0:ff:9f:43:1c:55:23:07:cc:
                    81:86:fb:8d:5d:55:f5:4e:92:ab:c3:62:8a:a1:3d:
                    fe:63:3c:07:4b:f4:76:69:ab:56:95:e7:80:2e:9b:
                    a2:33:ad:73:08:5f:a6:90:34:12:29:66:12:05:c4:
                    8e:43:dd:97:3a:c1:e5:0d:c1:b7:9e:c6:6c:a7:fa:
                    34:f9:3d:bb:f1:62:34:24:77:cb:2c:50:33:79:f2:
                    62:42:4d:24:d9:e1:7c:2e:66:8f:8e:a9:10:59:f8:
                    7f:38:8e:e8:d5:78:cb:06:e5:73:aa:d8:01:8d:a3:
                    c0:3b:4e:b8:10:c5:ed:20:68:6f:30:50:4a:9d:9d:
                    69:c6:b7:98:a9:d2:f3:c9:0f:29:a4:70:62:58:ff:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:60:D5:85:FC:86:EF:6F:C6:0B:AC:E8:6E:B4:CA:2B:AF:1A:CD:1D
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/ad32cce4d9db9e190317913e775902c2d7a409ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:e00::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:40:35:d8:ef:2a:14:0e:2b:26:7b:11:70:4a:9b:03:fb:0e:
         3d:fd:78:cb:7c:bc:e8:bf:ab:95:a2:c6:28:ba:12:23:98:48:
         77:b6:ec:92:df:e8:07:cb:0f:ca:97:68:5b:c8:68:7b:f5:1b:
         c4:54:83:a2:ba:8f:63:f8:f8:e6:c0:30:3d:9d:e6:cd:f5:a2:
         d4:ad:7f:fa:52:d1:af:04:f0:47:52:4d:d1:46:23:62:56:17:
         d6:ea:c2:83:5a:8d:62:b5:10:bb:d4:1b:05:6a:3e:f7:58:31:
         d6:71:c5:6f:47:ee:8c:bf:99:fb:9b:a1:24:84:4c:85:92:86:
         d1:67:5f:dc:0f:ab:1d:32:3b:14:77:e5:34:1c:19:78:68:0e:
         69:70:4f:ef:f0:d2:42:86:68:6f:46:a5:83:b0:47:31:c7:f8:
         c0:9d:52:a9:a6:64:7d:94:cb:79:57:48:b0:4a:9a:d8:49:f5:
         1e:b6:b1:aa:16:dd:34:1a:36:2b:c9:7b:d0:47:76:08:72:23:
         e1:91:59:e5:79:2c:97:69:ef:13:da:3c:9b:8e:5e:f7:98:1b:
         ac:3d:1c:52:25:6a:e6:c8:6b:88:95:4b:17:36:9b:b5:86:9e:
         1b:1e:08:b4:59:df:6a:b6:d0:78:6c:12:1f:32:df:af:1c:a6:
         fe:c7:5a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----