Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/b153153853c36656a6f3093a0fc85370ec2a2728.roa
File:                     b153153853c36656a6f3093a0fc85370ec2a2728.roa (raw, json)
Hash identifier:          EBjRVbLjG1TXt3rsrmff3JsfSTIR0094gxbrvIdB2Gw=
Subject key identifier:   DA:CD:F8:38:17:22:92:6F:26:07:A5:1B:53:FD:02:4D:25:15:24:53
Certificate issuer:       /CN=9783ac9bad2b7b922f648c90e881bf44978069ad
Certificate serial:       0A2045
Authority key identifier: CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/b153153853c36656a6f3093a0fc85370ec2a2728.roa
Signing time:             Wed 24 Mar 2021 14:43:19 +0000
ROA not before:           Wed 24 Mar 2021 14:43:16 +0000
ROA not after:            Tue 24 Mar 2026 14:43:16 +0000
asID:                     18734
IP address blocks:        2001:1278:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663621 (0xa2045)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Validity
            Not Before: Mar 24 14:43:16 2021 GMT
            Not After : Mar 24 14:43:16 2026 GMT
        Subject: CN=b153153853c36656a6f3093a0fc85370ec2a2728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:35:43:60:5c:12:28:a2:f4:d5:ad:45:77:bd:
                    75:eb:7d:b6:0a:00:b6:14:a2:aa:37:54:4f:3e:86:
                    43:52:56:ef:ea:22:16:2e:c9:95:98:ca:0a:1f:73:
                    d5:1f:04:db:96:83:31:61:52:c6:36:20:be:ee:ce:
                    e2:2f:50:f4:f7:2b:1a:3e:ab:81:ff:eb:7b:b3:3d:
                    e4:72:66:c5:22:56:cb:e6:39:ea:34:6a:e8:e2:00:
                    ce:04:cd:c1:55:37:60:e7:fd:91:a3:b3:6f:fe:9e:
                    c5:a5:cf:86:7d:4a:7d:6c:7d:b6:1a:33:1b:e2:54:
                    9c:4a:d5:02:b8:ff:a4:ed:02:17:e2:0c:39:44:9b:
                    26:09:22:26:52:b5:52:66:fe:f7:1c:b0:02:f4:d5:
                    18:a1:8a:7c:df:dd:07:e0:c4:3f:7f:eb:5c:1f:b6:
                    3f:c0:f3:b4:a4:9e:d7:c7:40:13:df:60:26:c9:5d:
                    47:15:53:a9:3d:0e:6c:0c:b8:6b:28:ed:84:e9:a5:
                    1e:f9:8c:3a:f9:6a:63:e3:30:be:a8:8f:03:ea:79:
                    e4:1d:1e:78:c1:4b:a3:23:47:46:10:5a:23:5f:77:
                    70:b1:01:81:e3:dc:e3:c4:26:76:ff:38:53:b1:1f:
                    7c:1a:2f:bd:5b:3f:00:86:c4:bb:9d:e6:68:46:d6:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CD:F8:38:17:22:92:6F:26:07:A5:1B:53:FD:02:4D:25:15:24:53
            X509v3 Authority Key Identifier:
                keyid:CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/b153153853c36656a6f3093a0fc85370ec2a2728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:95:48:97:e4:ed:1a:04:e1:12:6f:d5:cf:f4:ce:18:3d:d2:
         e4:9f:34:8c:69:7a:85:e9:bc:4d:da:8a:10:d7:c9:fc:2b:81:
         df:a3:18:a2:7f:3d:59:58:4e:27:ce:9d:1e:53:7a:bd:ee:f5:
         f2:72:dc:3f:a7:89:de:2e:40:30:74:cb:2d:0b:98:44:12:cc:
         ae:3f:ed:f6:28:5f:9a:77:40:0a:fc:f9:80:a2:d8:37:a5:fb:
         45:21:46:c4:0e:df:fa:6c:17:eb:99:ca:d3:aa:74:d4:75:b5:
         17:7a:be:54:88:ee:22:61:28:fc:ab:f8:59:51:19:5e:a7:dc:
         68:3e:0a:b1:9a:7b:ee:69:33:1a:fb:d5:44:04:0b:38:af:c2:
         2c:ed:fe:fa:c5:bb:10:02:e5:97:f9:2c:32:ec:dd:e4:39:6c:
         cb:99:63:d4:e5:08:51:ef:8b:94:63:11:26:29:fa:b3:a9:6f:
         ab:e9:0b:26:32:1e:7b:ab:36:08:26:f4:95:f7:ec:98:ec:fa:
         22:8f:c1:cc:f1:4c:cc:ab:e9:72:53:60:07:63:ff:07:43:8d:
         0a:83:e6:c4:78:c1:b7:91:55:a1:91:48:ee:68:89:07:73:a4:
         c5:61:3e:d1:5b:f6:c1:f7:ce:50:77:33:33:a9:5b:80:cc:2e:
         dd:01:c6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----