Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/ac2015966875b4891a3a7e823f1671ce84ddc648.roa
File:                     ac2015966875b4891a3a7e823f1671ce84ddc648.roa (raw, json)
Hash identifier:          uS09cZ0FQq9LpI3Qhfk2yUzKBMywDqkmtLBCPOQHwYU=
Subject key identifier:   1E:41:48:9A:7A:BC:B2:18:A4:48:90:79:A9:B2:78:C4:2F:EC:94:8B
Certificate issuer:       /CN=f996736b1fa10fc86d7dcd8f0972181fe443fb10
Certificate serial:       0D7C99
Authority key identifier: 75:57:10:2A:06:F8:53:89:F2:A4:FB:49:FB:0D:BB:55:9D:77:29:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f996736b1fa10fc86d7dcd8f0972181fe443fb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/ac2015966875b4891a3a7e823f1671ce84ddc648.roa
Signing time:             Wed 24 Mar 2021 14:40:19 +0000
ROA not before:           Wed 24 Mar 2021 14:40:19 +0000
ROA not after:            Tue 24 Mar 2026 14:40:19 +0000
asID:                     264668
IP address blocks:        2803:7c20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883865 (0xd7c99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f996736b1fa10fc86d7dcd8f0972181fe443fb10
        Validity
            Not Before: Mar 24 14:40:19 2021 GMT
            Not After : Mar 24 14:40:19 2026 GMT
        Subject: CN=ac2015966875b4891a3a7e823f1671ce84ddc648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fa:7e:c2:d5:50:3a:cb:e1:70:d2:72:43:33:
                    cb:f5:77:20:2e:eb:71:cb:74:f4:13:1d:ef:a8:82:
                    15:af:5d:27:a9:c9:9e:94:07:e3:21:85:96:95:3f:
                    ca:2a:83:a2:3e:53:aa:89:79:65:51:f9:c3:5f:99:
                    99:61:12:ad:23:5c:43:5d:a5:b0:8d:08:49:3b:67:
                    ff:e3:06:d9:b6:2a:1f:29:8d:d5:8f:e2:c0:f8:4e:
                    4e:d0:3a:4a:05:63:8e:86:e3:17:ec:08:5d:81:43:
                    82:12:be:8f:8f:fe:d6:f2:26:9c:34:e3:48:e6:01:
                    6d:80:5b:b8:a9:8b:32:ef:0f:49:ae:fa:46:01:53:
                    0c:7d:79:5f:e8:86:f8:60:04:d7:7b:43:2a:5b:d5:
                    fe:00:39:fe:86:65:b2:46:c8:8d:06:e4:4c:ca:c1:
                    12:17:5c:a5:6b:03:5c:c5:a3:51:b4:d8:a8:73:79:
                    3b:43:61:a0:d6:9e:c0:25:e7:18:05:1f:d7:7f:a6:
                    a2:15:3a:f8:cf:74:0b:81:c0:69:c7:61:87:9f:35:
                    37:94:95:16:25:7b:24:3a:dc:01:b6:87:c4:fd:47:
                    18:ba:16:34:f2:55:45:84:85:13:42:74:b5:47:60:
                    ec:d0:8f:7b:84:1a:d3:8f:1e:a5:91:f8:97:53:c4:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:41:48:9A:7A:BC:B2:18:A4:48:90:79:A9:B2:78:C4:2F:EC:94:8B
            X509v3 Authority Key Identifier:
                keyid:75:57:10:2A:06:F8:53:89:F2:A4:FB:49:FB:0D:BB:55:9D:77:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f996736b1fa10fc86d7dcd8f0972181fe443fb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/ac2015966875b4891a3a7e823f1671ce84ddc648.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b15ccc0f-e6e7-4ddb-8974-13c2fae405ea/f996736b1fa10fc86d7dcd8f0972181fe443fb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:cd:fa:2b:97:4e:c7:eb:82:2d:7f:6f:a1:9b:da:8e:33:5a:
         96:39:46:d6:2d:f4:34:3f:10:c5:d9:59:30:4a:15:02:7c:21:
         42:3a:f3:26:cb:4a:4e:a3:ef:ef:37:3c:c2:05:d9:68:1c:c2:
         3c:0b:1d:1d:5e:02:31:54:4b:0e:74:8a:08:20:f9:49:e9:5d:
         6a:9d:4c:2d:69:31:b5:58:11:ce:33:9c:3b:bf:c6:fa:40:27:
         e9:bb:85:b4:d0:bd:24:9f:1b:89:96:a3:9c:8e:d2:be:8e:c1:
         4a:fa:7b:5e:a0:19:40:f5:4d:f8:14:ad:1a:bd:3a:be:bc:b0:
         c7:a2:c5:af:17:ea:a2:3f:5f:23:5f:13:9f:77:ce:e9:5b:00:
         d4:a5:35:06:82:b4:d4:7a:fd:de:6e:59:86:0e:0d:9a:4a:3b:
         24:dd:0e:b8:2b:a7:0f:fb:3f:65:5a:04:79:83:26:af:dd:44:
         a4:55:7d:42:7b:25:ea:81:c0:0a:bf:4b:95:33:53:2a:04:5f:
         4a:60:08:2b:ef:a8:5d:24:9b:2d:03:61:94:5e:1b:75:09:58:
         e6:38:a5:87:d9:ff:dd:0d:ae:a6:ed:b5:61:6b:5e:3c:5c:1d:
         c8:b1:67:9d:6a:e2:a2:5b:06:b5:ee:7f:7e:e2:df:94:cd:6e:
         85:91:a9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----