Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/93577844d574c116f43b4e944ee0935c37d4eb05.roa
File:                     93577844d574c116f43b4e944ee0935c37d4eb05.roa (raw, json)
Hash identifier:          ZEcSHtDVCnfZbZimJ9nlu5pvYTKGCR0ABjbVzqcjIk0=
Subject key identifier:   74:F3:0C:CB:01:68:6F:90:5D:7B:47:BB:03:65:F5:F6:BD:E2:20:D8
Certificate issuer:       /CN=71ccf671605b5e725ec595356fba462b15442130
Certificate serial:       08188C
Authority key identifier: 2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/93577844d574c116f43b4e944ee0935c37d4eb05.roa
Signing time:             Mon 18 Oct 2021 22:23:08 +0000
ROA not before:           Fri 15 Oct 2021 03:00:00 +0000
ROA not after:            Sun 15 Oct 2023 03:00:00 +0000
asID:                     271813
IP address blocks:        2803:f010::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530572 (0x8188c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ccf671605b5e725ec595356fba462b15442130
        Validity
            Not Before: Oct 15 03:00:00 2021 GMT
            Not After : Oct 15 03:00:00 2023 GMT
        Subject: CN=93577844d574c116f43b4e944ee0935c37d4eb05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:6f:ed:9b:7f:d0:2a:56:ed:cf:b8:58:a5:6c:
                    82:86:bc:df:f0:62:fb:0e:f7:29:57:f3:a0:b0:d7:
                    8b:6e:9d:5c:53:4f:98:95:41:19:31:82:d3:d2:3f:
                    9b:dd:bd:f6:41:43:a5:c2:0d:f0:e1:36:95:36:fd:
                    75:65:d1:70:66:90:f1:7a:c6:6c:1b:ad:4c:28:6a:
                    ad:ec:e0:d9:f7:c3:d5:c2:08:17:9a:1d:00:da:7d:
                    e8:01:2a:ec:e0:14:f1:7e:92:4e:69:90:4c:6d:11:
                    00:fd:e9:18:e6:e5:62:d7:b8:d1:7e:80:23:f6:b8:
                    71:78:26:12:1e:15:1d:77:83:51:52:49:90:6d:19:
                    9f:ac:cb:6a:ff:2c:fe:00:ba:9a:0d:e3:25:ac:0d:
                    2d:02:50:fd:aa:fb:90:94:dd:e1:ce:77:12:0f:3f:
                    39:4a:b5:1e:4f:1f:94:d5:35:49:68:d6:08:76:14:
                    8a:73:9b:65:28:08:cb:52:21:21:e1:8a:67:de:74:
                    1f:90:02:87:46:3b:dc:8c:ba:1c:46:0f:4d:5a:6f:
                    98:ff:8d:7c:6c:79:80:27:07:80:97:d7:0d:19:93:
                    f2:d1:e0:b9:33:89:f7:7a:d9:d1:cb:5d:26:4c:1b:
                    65:09:52:8c:91:1e:9a:f0:99:9f:9f:14:d7:d8:94:
                    fa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F3:0C:CB:01:68:6F:90:5D:7B:47:BB:03:65:F5:F6:BD:E2:20:D8
            X509v3 Authority Key Identifier:
                keyid:2D:E9:45:5E:83:A4:22:32:AA:48:E7:4D:83:18:15:F8:A7:8B:5F:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ccf671605b5e725ec595356fba462b15442130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/93577844d574c116f43b4e944ee0935c37d4eb05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a62741c7-9707-48d4-9c97-b911a8b1dfd2/71ccf671605b5e725ec595356fba462b15442130.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f010::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:11:d1:3c:b1:b7:5a:b3:20:42:c1:90:e9:e4:0b:e4:fe:c6:
         3f:e2:0a:7f:ee:cc:c7:52:ca:33:bb:10:e0:2d:fe:83:d2:5a:
         7b:4f:cd:f6:d0:6f:00:be:68:67:6e:54:8e:3d:95:a4:45:f3:
         ce:02:0d:89:a0:84:b3:51:43:98:0e:7e:3b:e2:3b:7a:25:51:
         1a:fd:92:9f:a7:99:91:e1:18:d1:f4:2b:1a:48:4e:a6:b9:3b:
         c2:88:f4:d3:f7:63:ef:9a:6c:7e:bb:76:cf:8a:74:66:f0:8d:
         18:35:c7:29:fd:44:c6:94:e8:1a:8a:33:c2:c9:0a:e4:54:a0:
         cc:1e:c5:79:01:07:23:52:06:3c:22:4b:52:4f:c2:c0:fc:50:
         e3:81:8e:5c:9e:a4:17:b1:ad:0d:77:76:4c:a2:5f:b1:b3:f7:
         71:5f:50:17:f8:a6:f2:32:33:21:40:f9:0c:5b:8e:79:e8:95:
         2d:b7:38:44:d1:51:05:1d:42:b4:a1:f9:67:63:05:12:92:40:
         01:8e:b2:7d:47:14:e7:c7:f4:e9:1a:6b:d0:09:b8:75:e5:48:
         a5:f4:bf:23:5d:21:59:96:e1:ad:60:06:86:b6:7a:26:67:49:
         51:19:47:2a:b7:1b:f4:0c:47:51:e4:ab:13:ff:34:4e:6b:3c:
         c3:c5:d7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----