Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/1ed99a1045dfeb77818c45720d8c0bf8d9bc86db.roa
File:                     1ed99a1045dfeb77818c45720d8c0bf8d9bc86db.roa (raw, json)
Hash identifier:          hylfuTN06afckN1duAIhBSYPj1VL+gs3AT3gOcpphWg=
Subject key identifier:   AE:3C:A2:05:44:82:F2:5B:C9:22:3A:2A:80:F5:3B:BA:17:3B:7F:DC
Certificate issuer:       /CN=b937c1111990e7b39c1f43b075333acd225a29b1
Certificate serial:       0D358F
Authority key identifier: 1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/1ed99a1045dfeb77818c45720d8c0bf8d9bc86db.roa
Signing time:             Wed 24 Mar 2021 14:46:29 +0000
ROA not before:           Wed 24 Mar 2021 14:46:28 +0000
ROA not after:            Tue 24 Mar 2026 14:46:28 +0000
asID:                     28103
IP address blocks:        2803:c100::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865679 (0xd358f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b937c1111990e7b39c1f43b075333acd225a29b1
        Validity
            Not Before: Mar 24 14:46:28 2021 GMT
            Not After : Mar 24 14:46:28 2026 GMT
        Subject: CN=1ed99a1045dfeb77818c45720d8c0bf8d9bc86db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:4b:1b:89:d3:ac:75:d2:54:4f:82:0e:98:
                    bc:b3:56:78:77:ad:62:e4:f8:27:a7:be:02:ff:3f:
                    81:83:b4:89:f7:97:4c:ca:1e:4a:67:aa:45:53:d8:
                    a0:71:b9:53:3a:ae:a3:f5:52:5f:f5:91:f0:27:5c:
                    8a:6b:2a:a0:7f:28:50:e3:cf:e1:fd:71:91:2e:64:
                    e2:7b:0d:ac:32:2b:35:5e:0c:6c:6a:68:7c:fe:51:
                    4f:3d:ed:43:c8:d6:de:e9:63:3d:5d:01:e7:49:dd:
                    02:e6:2b:9f:ce:a5:bd:98:c5:c1:4d:41:b5:3c:f5:
                    2f:cc:31:5d:2f:38:f9:14:61:0b:9d:c4:3f:67:9e:
                    4a:ac:96:4e:db:a3:13:10:21:88:5e:67:47:23:b3:
                    fd:b6:9d:16:67:dc:3a:15:6f:12:2c:aa:0e:1c:2f:
                    40:48:62:a7:9f:7c:11:11:03:64:fd:60:75:31:5a:
                    4b:a0:9c:08:9c:15:4b:72:ff:21:09:79:e4:0e:e2:
                    c6:0f:65:d2:e0:e9:b6:7c:fc:37:01:da:2d:c5:16:
                    38:6c:7d:d3:a3:87:ab:0b:bb:bd:6a:a1:5c:73:c2:
                    4b:14:db:8b:6d:dc:86:9f:61:7e:43:22:7f:dc:3e:
                    24:7b:c7:31:09:fb:86:0e:3b:2f:e3:f1:71:a7:c5:
                    04:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:3C:A2:05:44:82:F2:5B:C9:22:3A:2A:80:F5:3B:BA:17:3B:7F:DC
            X509v3 Authority Key Identifier:
                keyid:1E:DA:A3:9E:B6:3D:C0:32:7D:77:BB:5F:91:84:2D:3E:3B:A2:51:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b937c1111990e7b39c1f43b075333acd225a29b1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/1ed99a1045dfeb77818c45720d8c0bf8d9bc86db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a23c971f-2262-44e6-b309-3f59bfc2d0f5/b937c1111990e7b39c1f43b075333acd225a29b1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c100::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:33:43:e5:ee:a2:21:c2:66:8f:de:23:c2:be:7f:f3:e4:ff:
         fc:b7:d6:c6:f6:3a:e9:16:f5:c8:a2:ec:a7:0c:4e:0b:dc:c3:
         8f:39:83:b3:15:03:da:1c:05:d0:8b:4c:63:c1:ef:bd:ef:7b:
         43:6d:7e:6f:0f:8f:ef:af:25:6e:af:e9:31:ae:ca:75:66:54:
         5a:c9:3d:71:93:11:d6:5a:a3:16:bf:10:e5:48:1f:b2:bb:14:
         3a:f5:58:bd:4d:e3:6d:4e:48:22:68:4d:bb:6e:d7:b5:cc:9d:
         29:0c:03:73:c9:dd:db:85:2f:2c:79:22:e6:fa:ed:85:ac:1d:
         46:05:08:b7:08:f0:a0:fa:9c:23:a2:f4:42:53:76:7b:d5:75:
         5f:a9:86:44:4d:ac:b0:c1:cb:9a:1a:65:c1:00:1d:7e:14:3d:
         ad:77:f5:a7:d8:42:7c:7b:65:ee:c1:68:8e:ce:0c:25:56:58:
         ac:af:00:69:fd:e3:23:b2:63:0d:18:ca:13:9a:48:21:d4:06:
         a7:ce:e6:82:83:20:8d:4f:42:77:ed:78:32:1d:4d:dc:e9:fd:
         cd:dd:02:65:8a:fa:22:44:8c:5c:28:2f:44:49:5d:af:d8:31:
         ed:b9:13:8f:d2:60:bb:5c:01:04:a1:0b:cb:0a:fe:29:8c:fb:
         8b:ad:1e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----