Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/7dfd1f24b2c1fcf5c6cdda609fa2befbe8a897a5.roa
File:                     7dfd1f24b2c1fcf5c6cdda609fa2befbe8a897a5.roa (raw, json)
Hash identifier:          jh6lVHCUtSaQTSkrxP8IO50MFitc34F+I+3N5p95Dew=
Subject key identifier:   CE:61:67:8F:F2:EC:A8:B5:3A:32:73:FC:FA:D7:22:B0:61:D8:55:E5
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       0E8156
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/7dfd1f24b2c1fcf5c6cdda609fa2befbe8a897a5.roa
Signing time:             Wed 24 Mar 2021 14:38:35 +0000
ROA not before:           Wed 24 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     28006
IP address blocks:        2800:370::/32 maxlen: 48
                          2800:4f0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950614 (0xe8156)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=7dfd1f24b2c1fcf5c6cdda609fa2befbe8a897a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:41:f8:df:91:d9:72:bf:72:d3:a8:03:cf:91:
                    48:60:4e:d4:5e:69:06:d2:60:c6:65:e5:cd:44:42:
                    73:06:f9:24:e1:14:8d:96:56:88:66:a5:9b:c9:22:
                    74:60:9e:93:ee:3c:ba:1c:c3:2d:71:be:ba:67:09:
                    4c:7a:d6:0c:f9:99:ad:5c:25:a8:56:47:42:9f:cc:
                    ce:55:e8:db:92:c5:9b:42:96:0b:20:03:6c:4f:c8:
                    0d:85:db:8a:56:ba:ee:18:06:44:85:1c:37:54:3b:
                    90:85:55:43:91:15:14:00:a7:44:d3:09:40:08:96:
                    85:dc:ef:47:44:71:10:55:bb:e8:88:51:b4:ba:aa:
                    4e:3d:bd:8b:e2:49:fc:fa:c3:41:37:9c:54:0c:4d:
                    07:68:92:6b:87:d2:cb:59:fa:f9:2a:27:e9:fc:d4:
                    4f:cb:21:0f:8c:e0:bc:98:13:cd:8c:91:f9:40:b8:
                    5d:7c:e9:5f:ca:1f:7e:8a:5e:4c:07:de:f6:34:03:
                    3b:85:c5:e9:d0:f3:22:d1:6e:d6:31:d2:9b:92:b2:
                    46:37:20:d2:14:e9:02:f8:d6:82:c2:40:50:77:b0:
                    25:68:e4:63:3b:3d:ac:ca:24:55:41:91:34:f9:17:
                    c6:8f:c6:1d:c0:05:5b:6a:14:66:e9:a8:74:fe:4a:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:61:67:8F:F2:EC:A8:B5:3A:32:73:FC:FA:D7:22:B0:61:D8:55:E5
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/7dfd1f24b2c1fcf5c6cdda609fa2befbe8a897a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:370::/32
                  2800:4f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:c2:e8:0a:8a:83:f8:32:96:ab:de:bf:56:24:0e:8e:08:25:
         97:d7:bf:bb:c9:a8:f9:a2:be:21:8e:e5:bc:4e:f9:34:f8:8b:
         d3:33:aa:a5:1a:d5:32:0e:81:41:51:1a:8e:ea:61:60:db:0d:
         54:56:1e:5d:68:95:89:33:55:e4:0f:58:09:d2:5f:98:03:44:
         2f:1e:43:63:62:b6:2d:6e:d5:af:72:ae:fa:07:cf:17:9c:4b:
         4e:0c:5f:09:e8:71:a0:e2:28:4d:7c:9f:e8:cb:66:ab:42:e1:
         c1:a8:69:07:96:84:ff:6b:ea:a5:9e:20:22:8e:f6:f2:1b:e7:
         f5:57:a3:45:a3:72:3b:85:92:4c:96:99:6e:f8:7a:29:f3:04:
         a9:e4:3a:1e:6e:71:53:67:03:f3:a1:24:e2:3b:a2:99:27:38:
         fa:a3:35:56:e8:eb:43:5b:21:ec:79:9b:65:a0:29:53:f4:fa:
         26:92:e1:97:ff:5f:bd:39:c4:e9:00:b2:53:36:6d:7a:d2:56:
         5c:37:2b:11:a9:39:a6:4a:70:f7:86:52:68:aa:3c:6a:00:80:
         b4:ed:9a:63:bc:b4:04:d9:cb:55:b5:dc:5a:a1:bf:6a:c9:ba:
         76:61:cf:87:5a:8e:63:59:44:13:24:96:ea:3d:b4:23:d5:8a:
         88:3b:a9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----