Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/cf95f405f8016cc6326f020a6e665c7e741b3d22.roa
File:                     cf95f405f8016cc6326f020a6e665c7e741b3d22.roa (raw, json)
Hash identifier:          tfreXY6+F/m5Zbbz2h3fo0/blnROQ1wzlbYg43KmQ68=
Subject key identifier:   AA:25:6F:9B:A6:17:F0:BE:73:CB:E5:93:7A:7C:EE:A6:95:D1:0D:C7
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       0578E3
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/cf95f405f8016cc6326f020a6e665c7e741b3d22.roa
Signing time:             Wed 24 Mar 2021 14:28:53 +0000
ROA not before:           Wed 24 Mar 2021 14:28:53 +0000
ROA not after:            Tue 24 Mar 2026 14:28:53 +0000
asID:                     19114
IP address blocks:        2803:5ce0:800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358627 (0x578e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Mar 24 14:28:53 2021 GMT
            Not After : Mar 24 14:28:53 2026 GMT
        Subject: CN=cf95f405f8016cc6326f020a6e665c7e741b3d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:47:45:10:c6:26:a3:04:d3:a3:34:7b:8a:
                    ae:8e:b0:a1:ce:19:8d:95:0d:89:a4:b2:f9:d7:7f:
                    29:86:fe:ac:39:d1:e1:e2:6e:8e:2d:98:cc:06:99:
                    af:2d:71:89:8d:90:51:d5:fb:f8:91:9c:9c:7a:fb:
                    c8:5e:7b:e4:90:ef:6b:67:3e:10:0e:63:90:28:78:
                    30:ca:9d:bd:b3:c3:5d:a6:9c:b4:46:d9:61:3a:bb:
                    a9:4e:ea:2b:79:76:14:e0:01:62:73:b2:54:b4:a0:
                    ba:f8:03:cf:07:59:e1:04:bb:4d:22:c2:21:97:db:
                    e3:4f:81:50:30:33:c3:59:48:64:58:5f:09:77:45:
                    3c:38:1f:87:a7:3c:35:14:80:d6:25:89:5d:af:9c:
                    b6:4b:85:18:80:c0:ff:a8:37:0b:06:41:7c:0e:cd:
                    ea:c9:89:b7:db:f7:84:62:a3:e7:8b:0b:39:2a:9b:
                    ab:5b:56:7d:d1:75:52:ef:6f:68:82:0a:05:03:c2:
                    16:01:94:71:24:43:0a:1e:6b:f3:a5:42:62:69:eb:
                    fd:e6:3b:06:1b:d2:40:fa:76:95:cb:3a:dd:1e:6e:
                    ff:1c:e5:dc:20:6d:6c:24:02:52:ed:c2:d6:58:e3:
                    84:3c:12:ea:a9:77:cf:ec:cd:ab:9f:16:00:9b:7b:
                    2d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:25:6F:9B:A6:17:F0:BE:73:CB:E5:93:7A:7C:EE:A6:95:D1:0D:C7
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/cf95f405f8016cc6326f020a6e665c7e741b3d22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:10:17:c5:c0:ff:6d:11:ae:f7:e9:1c:25:d8:ed:e5:f0:d5:
         43:23:32:b5:9d:bd:85:57:d5:d1:16:83:d6:4f:f2:b9:28:32:
         87:61:fe:67:f5:47:8c:3f:d0:97:79:7d:a6:ea:26:9b:96:30:
         b2:12:76:e6:c4:fd:d4:d4:e4:ce:24:12:d7:ac:bd:b2:d3:09:
         db:ba:9a:c9:da:dd:ce:3f:ca:e2:b0:23:ee:77:1b:03:e0:7e:
         88:fb:7c:98:56:77:94:81:a2:7a:cd:43:c8:ff:84:45:ea:a9:
         15:bf:eb:c4:c5:88:ea:77:dd:ab:66:2d:e3:53:81:2f:16:5e:
         51:a3:ad:64:00:69:b6:4a:c4:c5:22:f5:e7:93:8e:53:db:27:
         73:a5:71:83:58:10:44:c3:4d:bf:f4:1e:1f:7b:04:2b:7f:f5:
         a1:84:6c:3b:5c:27:d9:d7:b7:8d:66:75:d2:4f:8f:9a:47:ea:
         80:ba:5a:3d:6d:15:74:3c:30:89:52:74:cd:fc:c2:04:b0:36:
         25:75:ec:98:41:21:11:48:d0:8f:f5:71:c2:85:20:00:82:ce:
         9d:e5:a8:70:29:5d:13:70:85:20:ec:0f:ae:3b:9e:58:03:3b:
         60:a3:49:62:f3:1c:12:64:cf:a2:96:1b:c2:64:10:9e:da:09:
         d4:d8:ec:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----