Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/38f55660b439870e8645f6b8fd21459bd2b338f8.roa
File:                     38f55660b439870e8645f6b8fd21459bd2b338f8.roa (raw, json)
Hash identifier:          3oR6XtWqMUF3WrTnOU6JDah9F8CfMfn7zX5MKcOKtf0=
Subject key identifier:   68:8B:0E:CA:29:76:94:56:DD:0C:43:45:24:F2:9A:E0:4F:7F:60:F9
Certificate issuer:       /CN=69dbd374c2a561eac76283ef20e457a087a19243
Certificate serial:       0D4A92
Authority key identifier: 0B:D4:59:AC:B4:12:5D:9D:96:D3:DE:53:14:41:98:F9:21:92:91:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69dbd374c2a561eac76283ef20e457a087a19243.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/38f55660b439870e8645f6b8fd21459bd2b338f8.roa
Signing time:             Wed 24 Mar 2021 14:33:13 +0000
ROA not before:           Wed 24 Mar 2021 14:33:13 +0000
ROA not after:            Tue 24 Mar 2026 14:33:13 +0000
asID:                     263784
IP address blocks:        2803:3440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871058 (0xd4a92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dbd374c2a561eac76283ef20e457a087a19243
        Validity
            Not Before: Mar 24 14:33:13 2021 GMT
            Not After : Mar 24 14:33:13 2026 GMT
        Subject: CN=38f55660b439870e8645f6b8fd21459bd2b338f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:30:b4:9f:1d:1b:ca:fe:b3:81:f3:2b:33:e6:
                    fe:1a:b6:0c:96:80:28:f8:61:28:a5:57:5c:4c:bc:
                    1c:7e:60:4b:cc:f6:c6:83:75:a2:af:24:39:62:29:
                    78:24:2a:0f:4b:8f:64:b2:0d:cc:ec:04:2a:f9:30:
                    d2:2c:77:e3:d8:8e:c8:8d:5e:71:42:e5:48:30:c1:
                    07:94:cf:34:9e:26:c8:b9:f9:58:d5:7b:35:91:e6:
                    4a:53:c3:7b:99:29:55:e6:b7:1f:d4:a1:ce:8d:23:
                    19:c2:cc:66:bc:48:80:dc:dd:04:46:5e:e4:f4:9c:
                    20:01:eb:d0:22:24:e6:14:f4:ce:cd:3a:e3:bd:ca:
                    16:43:9f:65:92:ca:84:69:3f:e1:4f:12:5c:d0:2a:
                    21:75:cf:53:99:c8:83:94:d9:61:8a:f3:a2:12:63:
                    9c:f3:92:d1:f4:06:90:82:88:e8:82:5f:b5:ca:22:
                    16:3c:06:cc:d9:f6:fc:87:c4:f7:7f:38:e8:9e:80:
                    db:06:48:6e:82:77:13:48:58:25:5e:9c:da:2d:99:
                    5f:3a:48:eb:5d:7b:76:c8:6a:8b:fb:fe:16:a0:73:
                    90:70:99:4f:b6:7d:42:4b:d7:09:20:9f:b7:3a:bc:
                    30:f4:5f:0c:55:d0:30:7a:3a:41:93:13:ae:03:9b:
                    d9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:8B:0E:CA:29:76:94:56:DD:0C:43:45:24:F2:9A:E0:4F:7F:60:F9
            X509v3 Authority Key Identifier:
                keyid:0B:D4:59:AC:B4:12:5D:9D:96:D3:DE:53:14:41:98:F9:21:92:91:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69dbd374c2a561eac76283ef20e457a087a19243.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/38f55660b439870e8645f6b8fd21459bd2b338f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d93a332-5fc9-4100-ab9d-51c20c012f78/69dbd374c2a561eac76283ef20e457a087a19243.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3440::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:30:a5:de:7c:80:fe:39:e8:a1:38:55:64:39:19:92:95:d6:
         2d:18:a1:51:76:5d:41:24:2a:77:17:ed:42:80:55:7f:0a:0b:
         25:90:9b:af:97:d8:94:25:36:92:03:24:f7:98:06:dd:37:47:
         6d:e2:f5:f3:9d:c5:6e:9e:e7:4a:0f:18:c1:a0:c0:4c:22:6d:
         ac:99:cd:8c:03:09:08:b5:f9:18:87:07:61:26:ba:8a:ba:d5:
         f1:c3:b2:83:35:f4:44:41:ea:0a:77:cd:66:c6:0d:1b:4d:df:
         27:d7:a5:8f:ba:a2:f8:4c:d9:cd:1e:ea:df:89:2b:38:19:c7:
         b7:65:7f:a2:c1:05:4b:0f:91:f6:e4:2d:64:64:c4:b1:f4:b8:
         c7:f2:c5:3a:91:a4:80:52:30:b8:5f:e3:0c:ae:56:60:b5:5f:
         9c:1c:ca:2d:94:bd:4d:d7:a8:45:93:ad:17:2e:43:d8:db:66:
         a8:4e:ec:d6:c6:f0:3e:ba:34:40:8e:ab:ec:03:0b:72:3e:4e:
         e4:d9:e8:67:df:1d:60:16:20:3e:cd:10:fa:b8:0a:69:ce:c2:
         a3:03:47:42:be:ef:55:11:81:e0:35:67:44:7b:26:fc:00:49:
         7f:c2:ea:06:03:cb:92:2c:c3:23:e6:2e:6b:93:3e:1b:d5:2b:
         07:02:7d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----