Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/1d067dfc08ea62768eb4bed843e8f0d7ba521a78.roa
File:                     1d067dfc08ea62768eb4bed843e8f0d7ba521a78.roa (raw, json)
Hash identifier:          BJ/NrpZ6Bzjk+qMQjUXJL3+8e52LvSK3VoNU8wADqkM=
Subject key identifier:   A0:22:04:A3:C5:3E:C5:0B:AB:61:D9:89:F0:CA:D8:D9:60:97:26:6E
Certificate issuer:       /CN=40b526ba23ca7ed535f9753dc1684d3cd0025f33
Certificate serial:       0D24CC
Authority key identifier: B5:7D:57:4A:A5:E8:B9:E2:28:CB:A8:2D:EC:2F:00:CC:24:B6:F9:7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40b526ba23ca7ed535f9753dc1684d3cd0025f33.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/1d067dfc08ea62768eb4bed843e8f0d7ba521a78.roa
Signing time:             Wed 24 Mar 2021 14:36:17 +0000
ROA not before:           Wed 24 Mar 2021 14:36:17 +0000
ROA not after:            Tue 24 Mar 2026 14:36:17 +0000
asID:                     27951
IP address blocks:        2801:164::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861388 (0xd24cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40b526ba23ca7ed535f9753dc1684d3cd0025f33
        Validity
            Not Before: Mar 24 14:36:17 2021 GMT
            Not After : Mar 24 14:36:17 2026 GMT
        Subject: CN=1d067dfc08ea62768eb4bed843e8f0d7ba521a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4d:86:5b:7a:6d:d4:29:49:d1:5e:ee:85:be:
                    f7:a0:5e:39:f8:26:36:1b:ef:5b:52:0c:15:6f:2c:
                    b9:fe:d7:22:50:1b:c8:59:39:51:02:10:0c:51:f5:
                    3a:fb:f2:c3:a4:3e:f9:e0:16:db:af:71:1d:63:c8:
                    bb:46:44:6d:bc:07:62:85:55:da:50:0c:c9:a0:39:
                    ec:5e:5f:ca:f0:b8:cf:73:a7:52:9c:1a:2a:bd:35:
                    85:0e:e1:bb:6d:cb:ea:39:dd:43:9d:bf:1a:c6:9f:
                    37:09:ba:6c:f5:51:a5:86:dd:2a:fd:32:18:6a:21:
                    b2:c9:dc:db:ad:00:3a:d5:06:af:32:2d:da:da:58:
                    24:2c:b2:95:18:21:ff:0a:10:64:b1:a7:c5:30:5f:
                    95:94:8f:28:47:16:86:51:89:b5:13:9c:04:b8:43:
                    0e:c1:39:96:11:9c:b5:f0:74:74:79:a0:c0:8d:a4:
                    36:4d:51:36:b6:0b:14:74:cf:38:05:85:4c:d0:21:
                    f1:f7:91:e3:29:1f:e0:05:8e:0d:e0:18:e3:a2:ab:
                    65:00:db:5d:27:3e:f7:18:e4:3d:fa:c7:af:87:6c:
                    b2:fb:43:82:76:26:85:04:e4:8a:51:bd:34:ac:52:
                    6a:47:e2:35:a1:63:f6:42:33:ea:9b:36:e7:1f:d8:
                    e6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:22:04:A3:C5:3E:C5:0B:AB:61:D9:89:F0:CA:D8:D9:60:97:26:6E
            X509v3 Authority Key Identifier:
                keyid:B5:7D:57:4A:A5:E8:B9:E2:28:CB:A8:2D:EC:2F:00:CC:24:B6:F9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40b526ba23ca7ed535f9753dc1684d3cd0025f33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/1d067dfc08ea62768eb4bed843e8f0d7ba521a78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a07b6e82-eb51-4893-93ac-7fc54b968d12/40b526ba23ca7ed535f9753dc1684d3cd0025f33.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:164::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:2c:11:e3:8d:76:d9:bf:3c:84:82:9c:98:4e:0f:50:fe:36:
         b0:8e:60:e3:7e:58:9a:81:6f:74:2a:fc:74:3a:16:1d:e6:15:
         ee:9a:5c:07:cb:f1:af:35:70:86:00:03:3d:f4:67:01:61:0c:
         5b:36:e6:cc:09:a9:29:84:f1:d5:cb:20:41:04:3a:c7:9c:69:
         d2:ab:36:cb:24:05:0b:84:75:4f:3c:b7:d6:3d:7e:18:d8:15:
         75:9c:ca:d4:a2:c1:25:f5:6e:8b:9e:75:11:23:16:58:ea:a0:
         70:e6:e8:42:8b:4b:0d:2a:f0:42:68:2e:2d:b5:c2:99:bd:93:
         af:5c:2f:39:be:af:0e:2a:2f:83:bd:01:92:aa:e4:c7:29:f4:
         c2:d5:19:0e:11:9f:d6:48:68:93:26:63:de:b1:de:7b:c4:c2:
         83:43:aa:1b:d7:71:f1:36:ca:99:1b:b9:7d:54:e0:6e:2f:28:
         29:ea:b3:6a:8f:07:2b:b2:b2:3a:bf:d2:ad:a4:e7:ae:5c:17:
         ed:8b:9d:30:7f:71:7d:ef:92:83:58:4b:ae:f2:0e:52:6e:f0:
         d7:31:79:61:bd:9a:b9:12:98:04:b5:b7:96:35:83:0b:80:65:
         10:d7:d8:47:7d:2a:a3:be:0f:fe:ad:94:68:82:6a:1c:f7:35:
         23:27:0c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----