Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/8161790a9281d2dc89fc26b5af8c737273b8cf39.roa
File:                     8161790a9281d2dc89fc26b5af8c737273b8cf39.roa (raw, json)
Hash identifier:          +VWgr5FQ1bx++ut3svrH5f42zDvvHyO+wyqcgp6dqBk=
Subject key identifier:   76:29:5D:10:8A:21:50:73:5B:9C:D7:A5:60:B5:FB:4E:17:94:2C:AC
Certificate issuer:       /CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
Certificate serial:       0DDAC7
Authority key identifier: A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/8161790a9281d2dc89fc26b5af8c737273b8cf39.roa
Signing time:             Wed 24 Mar 2021 14:37:25 +0000
ROA not before:           Wed 24 Mar 2021 14:37:25 +0000
ROA not after:            Tue 24 Mar 2026 14:37:25 +0000
asID:                     52468
IP address blocks:        2803:7a00::/40 maxlen: 48
                          2803:7a00:8000::/40 maxlen: 48
                          2803:7a00:8100::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907975 (0xddac7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74
        Validity
            Not Before: Mar 24 14:37:25 2021 GMT
            Not After : Mar 24 14:37:25 2026 GMT
        Subject: CN=8161790a9281d2dc89fc26b5af8c737273b8cf39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:33:a3:71:ad:1e:1d:77:ff:a4:0a:d4:f8:77:
                    11:7a:25:89:d8:6e:e8:98:7e:16:fb:5d:c9:fd:f9:
                    7e:43:90:71:dc:1d:e3:82:d5:e3:f1:ff:bf:00:2b:
                    79:aa:4e:5c:24:55:28:fd:26:7d:d5:a3:ca:60:4b:
                    6f:ab:37:0a:9a:d5:41:8d:c1:b6:53:9d:58:02:64:
                    81:bc:88:67:d8:89:e9:88:28:35:b6:56:e4:99:4e:
                    2d:bc:81:2f:a6:13:34:93:59:4e:b8:56:02:3a:1a:
                    3e:93:40:98:96:e7:07:f4:13:78:5a:5c:b4:c7:be:
                    04:4a:f1:69:97:0d:76:fd:d5:31:28:34:19:74:26:
                    a2:88:cc:d7:1d:bf:0d:f3:17:be:33:49:77:51:b4:
                    6f:36:5c:80:28:c2:93:63:25:54:9a:58:3d:b4:82:
                    56:c5:63:7a:89:24:c3:f0:95:81:83:5a:28:4d:b8:
                    44:43:44:64:a9:30:90:8e:d4:1c:eb:01:36:f1:b0:
                    16:fa:a3:5c:41:a9:73:de:b0:64:58:ee:5d:38:70:
                    1c:c8:e6:a2:c2:f0:a0:34:62:99:93:18:20:a1:3d:
                    4f:a4:d9:4b:47:61:e0:45:f9:4e:7c:d7:d7:9b:a5:
                    9f:e8:44:f4:25:fc:24:e6:9c:8c:57:f4:30:72:e4:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:29:5D:10:8A:21:50:73:5B:9C:D7:A5:60:B5:FB:4E:17:94:2C:AC
            X509v3 Authority Key Identifier:
                keyid:A1:E4:E1:3C:B6:59:EA:49:A5:D8:B1:A9:42:B5:D0:F6:16:93:58:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/8161790a9281d2dc89fc26b5af8c737273b8cf39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d350e74-9763-4abe-901c-40759415c66d/1ffcce79bd9c08a7a98d1dffb120685e7f3e2f74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a00::/40
                  2803:7a00:8000::/39

    Signature Algorithm: sha256WithRSAEncryption
         3e:e3:90:21:0f:d3:8e:ea:02:98:7b:6d:51:bd:d8:c9:a6:f3:
         7b:57:77:53:07:65:9a:bc:d4:31:35:68:b1:45:31:86:f9:bc:
         da:0f:e2:e6:76:ee:a0:36:d2:8b:bf:3d:2d:41:b5:21:b1:14:
         a5:96:41:47:a8:ba:2b:22:cb:15:c1:bd:66:a6:23:f5:9e:1e:
         25:4e:84:b9:06:a4:2e:19:67:49:d1:17:d8:be:b4:16:71:ab:
         bb:91:59:68:d1:2c:6b:4c:20:cf:18:57:5c:4d:8c:d9:8b:b1:
         74:fa:19:71:e5:48:2d:49:8d:e8:26:14:87:fd:f1:e3:64:17:
         39:9e:87:63:84:9b:f1:58:b2:bd:3e:85:3b:0f:35:e8:1e:82:
         e2:74:1a:f9:98:a8:cb:93:da:b1:a2:66:6e:4f:1e:b9:3e:01:
         01:68:26:fd:9c:3d:f8:cd:a0:20:a5:62:45:54:ec:2a:0a:dd:
         e6:c5:cc:e6:2a:d7:bd:9d:dd:2b:4b:c6:7f:22:ed:80:c8:76:
         27:d6:4a:30:82:b2:0b:74:0e:14:4b:20:ab:5b:d5:9a:de:92:
         b9:1b:3f:3b:33:fe:b7:3d:af:43:ef:e7:31:9a:d9:07:f9:30:
         05:8e:47:52:21:22:53:32:3e:3c:d1:72:5e:4b:e9:70:33:48:
         88:4f:13:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----