Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/8f32b80a4c312d20eba3ef65e9def0d125b4780d.roa
File:                     8f32b80a4c312d20eba3ef65e9def0d125b4780d.roa (raw, json)
Hash identifier:          XFyXjpbsGNkFn3G/CTwCORyyYP7p3Kpy+IqfQbOn4HM=
Subject key identifier:   ED:75:F8:30:8C:C7:FD:E6:B2:1F:10:65:48:22:48:38:70:04:0B:ED
Certificate issuer:       /CN=dd6660715432dca219d013cf5f8591f73aafbd11
Certificate serial:       0906
Authority key identifier: 97:07:FD:B0:38:05:A2:78:87:D9:AE:83:DF:13:67:B7:6E:92:F6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd6660715432dca219d013cf5f8591f73aafbd11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/8f32b80a4c312d20eba3ef65e9def0d125b4780d.roa
Signing time:             Wed 14 Jul 2021 03:01:35 +0000
ROA not before:           Tue 13 Jul 2021 03:00:00 +0000
ROA not after:            Mon 31 Jan 2022 03:00:00 +0000
asID:                     271925
IP address blocks:        2801:13:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2310 (0x906)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6660715432dca219d013cf5f8591f73aafbd11
        Validity
            Not Before: Jul 13 03:00:00 2021 GMT
            Not After : Jan 31 03:00:00 2022 GMT
        Subject: CN=8f32b80a4c312d20eba3ef65e9def0d125b4780d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:5a:e9:5b:ce:55:f4:db:f9:62:a3:88:4e:
                    a8:b6:96:a0:c2:32:c7:b3:b1:54:9e:d6:d9:75:38:
                    e0:71:df:cd:15:a5:c0:bd:a4:a4:94:a3:f9:4a:4e:
                    a3:cd:fe:3c:5c:8b:0c:4d:9f:e5:0c:1c:07:cd:d5:
                    69:ac:c0:db:39:a5:c5:de:61:6d:05:99:61:ad:53:
                    4f:f8:29:62:90:0f:b3:82:29:e7:42:56:3f:da:e0:
                    4c:23:2b:ba:0e:8e:ca:c8:04:94:86:db:4f:8a:f6:
                    87:03:81:2b:98:8d:53:74:ef:03:03:2e:15:50:ff:
                    ab:c9:b8:4d:ae:3b:8f:b1:9c:07:fd:48:fe:32:3b:
                    f0:ea:10:01:be:65:3e:9a:61:6f:7d:d6:63:8e:b7:
                    13:34:54:b9:65:43:02:93:fb:52:f1:98:a0:f2:0b:
                    20:d7:0b:b7:2d:87:73:b9:8e:ed:e4:a5:ef:67:e4:
                    c3:88:96:80:5b:68:f1:9b:d4:2a:31:f7:e8:69:33:
                    46:a1:86:a4:d2:37:b4:53:55:ef:39:12:a3:df:5c:
                    e4:92:40:fc:8f:9c:35:bd:85:89:98:a2:8c:14:a5:
                    cd:26:fc:b3:ef:ed:b4:0b:51:98:fe:6e:64:57:ce:
                    5f:ea:6a:25:c2:3c:7d:81:5f:2d:2a:5e:79:4d:c8:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:75:F8:30:8C:C7:FD:E6:B2:1F:10:65:48:22:48:38:70:04:0B:ED
            X509v3 Authority Key Identifier:
                keyid:97:07:FD:B0:38:05:A2:78:87:D9:AE:83:DF:13:67:B7:6E:92:F6:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd6660715432dca219d013cf5f8591f73aafbd11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/8f32b80a4c312d20eba3ef65e9def0d125b4780d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b46657bf-0ea3-490f-95b5-e95f8febf869/dd6660715432dca219d013cf5f8591f73aafbd11.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:ac:24:6e:df:d7:d6:84:1e:b4:45:fe:68:b5:07:9f:25:22:
         63:8d:c8:1d:32:54:4b:90:8c:db:cd:37:d5:62:9a:fd:17:7c:
         8f:a5:eb:03:61:d3:84:bf:7a:15:12:86:87:44:43:4e:df:60:
         fe:63:9c:83:15:39:da:2f:16:c2:ef:4f:4a:b2:20:81:68:91:
         0c:77:4f:92:ea:9d:3e:08:e3:af:bf:8c:75:c8:81:82:87:19:
         da:92:2d:42:0c:43:8f:e4:d2:6f:33:d7:07:4d:b6:95:ac:70:
         70:80:a0:98:c3:40:5d:a2:57:5a:47:71:f3:0f:42:01:0f:50:
         4a:ef:fa:d9:41:d8:cc:13:ea:07:8b:c3:44:cb:68:7d:50:61:
         e2:2f:0b:df:94:ec:29:13:43:85:04:c2:e1:10:23:c4:54:49:
         16:33:b2:32:12:a5:fd:20:6f:67:1e:3c:67:44:61:1d:50:5b:
         ad:0e:17:61:ab:4f:37:d0:ee:f2:ae:7e:08:b6:7f:27:82:6b:
         20:15:f3:06:83:90:03:9f:08:e8:bb:9b:ff:a1:c0:2d:6c:84:
         23:db:09:ab:c3:e2:e5:b7:64:a7:db:f0:5c:c8:9b:65:26:1c:
         e5:d9:cf:3d:f3:ed:9a:9c:21:35:8b:4a:99:4a:1b:25:81:3a:
         44:a9:c1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----