Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/41d17bdab451f789739fea65cadb2ef795d08d79.roa
File:                     41d17bdab451f789739fea65cadb2ef795d08d79.roa (raw, json)
Hash identifier:          QYcR0joyrrRpuNtrjNWMS2SVC2RiiHdSo6iurppr5kg=
Subject key identifier:   3E:B1:DE:AA:7A:4B:F6:BF:FF:96:19:9F:B6:A3:FE:1C:F0:16:61:00
Certificate issuer:       /CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
Certificate serial:       0E1B4E
Authority key identifier: 81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/41d17bdab451f789739fea65cadb2ef795d08d79.roa
Signing time:             Wed 24 Mar 2021 14:32:11 +0000
ROA not before:           Wed 24 Mar 2021 14:32:11 +0000
ROA not after:            Tue 24 Mar 2026 14:32:11 +0000
asID:                     61508
IP address blocks:        2803:f240::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924494 (0xe1b4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dd8701adfa698cf087d5033d6ab2b23bbe67c59
        Validity
            Not Before: Mar 24 14:32:11 2021 GMT
            Not After : Mar 24 14:32:11 2026 GMT
        Subject: CN=41d17bdab451f789739fea65cadb2ef795d08d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:92:d8:83:43:88:d4:86:ad:71:81:2e:b4:0c:
                    1e:00:2d:35:12:fc:58:90:ba:87:7e:2d:f4:2c:27:
                    1b:18:3e:84:3e:43:4d:96:37:91:44:a8:d9:52:d4:
                    b4:5c:61:c5:3b:4e:3a:f5:9f:f2:66:77:27:e8:93:
                    50:82:40:7f:f2:ab:ee:f2:7f:81:46:82:9d:12:95:
                    83:a7:f1:7c:b4:83:29:5b:7d:c9:41:b4:41:85:7b:
                    89:80:c7:52:66:00:2c:a8:67:0f:e4:3c:0e:12:c7:
                    5a:cd:f9:13:8f:ca:a6:cb:76:78:4a:1e:42:a2:a6:
                    0b:67:9f:27:60:5c:7d:8e:6c:df:ba:d3:8d:2f:f3:
                    02:f6:03:14:48:00:18:63:5f:d5:0a:c8:71:3f:d3:
                    d8:f3:b6:d9:fc:31:33:56:2f:83:c3:1f:ea:cc:9c:
                    89:f2:69:5d:df:85:7e:7b:4b:67:f7:31:cb:a2:c6:
                    05:ec:ee:f4:b0:c7:78:5d:a4:9d:bb:52:f3:9b:2d:
                    25:97:89:82:f5:68:31:2a:c2:98:6c:e9:c5:f7:3d:
                    e3:85:c1:71:28:03:fa:32:bb:73:e8:96:79:26:8f:
                    45:3e:98:d2:5c:35:28:c9:3d:93:7e:47:04:ce:4e:
                    af:22:7f:c8:ae:76:e0:86:c0:8b:de:8a:14:cb:4f:
                    73:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B1:DE:AA:7A:4B:F6:BF:FF:96:19:9F:B6:A3:FE:1C:F0:16:61:00
            X509v3 Authority Key Identifier:
                keyid:81:D3:8B:25:CC:79:CE:E0:94:9E:1F:43:09:0A:4E:E4:C7:49:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/41d17bdab451f789739fea65cadb2ef795d08d79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a2faf746-d171-49c1-880a-6b01fc6abf0a/2dd8701adfa698cf087d5033d6ab2b23bbe67c59.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f240::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:d2:dd:45:58:3f:5e:fe:df:30:31:d4:ba:98:8c:71:da:96:
         b3:1b:93:2e:37:a5:5a:5e:8d:f3:4d:ce:41:67:c1:91:ea:e9:
         23:12:63:27:69:a5:1f:3f:30:70:6f:26:6b:e4:df:97:15:01:
         95:47:0d:78:52:3c:4e:0e:86:39:68:f2:97:e5:7e:b3:a2:be:
         41:5b:63:80:b9:72:1c:bd:41:8f:9a:c6:20:1b:a0:9b:49:50:
         34:70:2b:e7:1e:e8:8e:6a:f3:2f:d5:f3:0d:8b:7a:6d:47:b9:
         8f:1a:98:00:e9:e7:94:1f:ba:d0:eb:eb:52:76:94:39:62:be:
         f6:70:63:a3:d6:03:5c:0a:7e:22:90:f1:1f:a9:33:77:5c:b1:
         70:01:74:6d:8a:86:bd:88:03:fa:0b:0b:e9:04:25:e1:5c:4c:
         05:91:10:43:5f:5b:44:77:a9:84:37:66:88:8d:db:99:d9:77:
         c0:6b:35:c1:f2:0c:75:c0:4d:a6:41:9e:fd:c8:5e:b6:fd:5c:
         42:cf:21:e1:b3:8b:6f:b6:fd:06:66:69:0d:b0:24:98:f8:6c:
         80:e7:ac:91:a9:aa:14:32:5e:de:be:26:74:f4:0e:86:9b:d6:
         ed:7f:11:47:88:b8:91:29:2e:4f:fd:16:68:86:94:ea:90:83:
         da:e6:99:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----