Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/a2bd0106a81e747f468f49e1e1e63318c654b1c3.roa
File:                     a2bd0106a81e747f468f49e1e1e63318c654b1c3.roa (raw, json)
Hash identifier:          +zkwgf4gcySYYZNWMU4FhcB/D44W/Eg9f1IA2WkIswQ=
Subject key identifier:   EA:34:38:15:5E:ED:B0:29:9C:1A:C8:14:13:E1:F4:96:58:90:02:DB
Certificate issuer:       /CN=6e1291537c801e1886268f46675ed50433e38e93
Certificate serial:       0BA549
Authority key identifier: 78:2B:BB:89:A9:2C:DC:88:66:B2:A9:12:DB:EF:87:57:DA:B9:07:08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e1291537c801e1886268f46675ed50433e38e93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/a2bd0106a81e747f468f49e1e1e63318c654b1c3.roa
Signing time:             Wed 24 Mar 2021 14:32:24 +0000
ROA not before:           Wed 24 Mar 2021 14:32:24 +0000
ROA not after:            Tue 24 Mar 2026 14:32:24 +0000
asID:                     264642
IP address blocks:        2803:cf00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763209 (0xba549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e1291537c801e1886268f46675ed50433e38e93
        Validity
            Not Before: Mar 24 14:32:24 2021 GMT
            Not After : Mar 24 14:32:24 2026 GMT
        Subject: CN=a2bd0106a81e747f468f49e1e1e63318c654b1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:17:6d:06:45:a4:b6:a1:60:b5:d8:38:d6:
                    00:76:83:bd:0a:51:67:e9:df:f8:1e:78:78:8b:2f:
                    b4:aa:4f:50:4e:26:59:d6:98:59:7c:55:c1:5c:51:
                    af:b9:7c:5c:87:e2:cc:e3:6a:96:0b:e6:f4:ba:e2:
                    57:57:15:6a:82:46:c6:de:33:9f:43:bd:a9:10:91:
                    10:1d:32:1b:04:27:fc:41:c9:cf:8f:1e:5b:71:c9:
                    b4:e9:18:88:52:f7:61:da:ae:30:5a:6d:6a:80:3f:
                    19:4f:a8:66:63:56:c0:c7:95:40:bf:aa:04:45:8c:
                    ef:1c:7b:1e:b7:2d:fd:8c:b7:8f:8e:a5:7c:ca:45:
                    19:60:6d:1c:9d:c9:c7:56:40:b7:54:37:b2:34:6e:
                    26:af:22:d6:f2:fc:45:23:43:0a:f3:c2:00:55:87:
                    29:82:51:ca:85:ec:89:6d:cb:45:c2:0c:74:10:48:
                    c9:44:1b:de:9d:52:65:c5:24:76:72:22:fa:2b:e7:
                    45:d4:8c:a5:7d:e2:e5:48:df:96:54:c2:04:76:12:
                    73:96:92:70:ba:f0:86:32:93:f9:60:29:e0:32:2a:
                    b7:0d:2f:78:fc:2a:fb:54:fd:d7:30:c7:33:38:8a:
                    15:0b:82:92:d1:41:d4:e7:b1:e0:63:01:d9:a1:76:
                    c0:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:34:38:15:5E:ED:B0:29:9C:1A:C8:14:13:E1:F4:96:58:90:02:DB
            X509v3 Authority Key Identifier:
                keyid:78:2B:BB:89:A9:2C:DC:88:66:B2:A9:12:DB:EF:87:57:DA:B9:07:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e1291537c801e1886268f46675ed50433e38e93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/a2bd0106a81e747f468f49e1e1e63318c654b1c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6eb975e-95cc-435b-93e7-5336029da54a/6e1291537c801e1886268f46675ed50433e38e93.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf00::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:ba:bc:d1:1f:1a:80:80:17:f4:ee:c1:78:e0:5d:04:7c:9a:
         37:2c:05:9f:a8:43:38:e4:26:43:63:0d:7f:01:64:33:5e:47:
         b4:47:ab:dc:bc:7d:85:0e:94:b7:a8:e6:a1:1b:47:ee:85:97:
         45:59:dc:87:fa:36:1e:71:ac:10:3c:21:e5:9c:32:73:86:7a:
         6a:22:7b:46:c3:47:0e:a1:75:18:5c:5c:aa:5d:d2:85:fe:af:
         92:b2:85:05:99:9e:9e:02:75:35:c9:ff:9c:15:77:58:e6:73:
         45:0a:b7:66:bd:e8:94:c1:6a:d7:f0:32:79:61:43:bc:c2:45:
         df:6b:d8:c6:d2:36:2e:07:27:12:99:2d:7b:8e:c6:d6:41:5a:
         44:41:a1:b9:11:70:f2:ce:50:c8:2d:6c:53:b7:a1:15:e3:c8:
         3d:6e:d2:16:91:4b:5a:70:43:34:ef:cc:5a:56:f2:a9:ff:81:
         55:c2:50:16:41:2f:b0:f3:60:ac:0c:13:0c:02:10:28:c9:a4:
         2d:ec:94:ca:17:6f:6e:44:2b:a6:65:c7:76:6f:ce:29:fc:fc:
         9e:36:12:b2:ac:64:70:c2:59:5c:20:e3:04:ae:7a:0d:14:60:
         23:b6:c9:11:0d:6a:7e:3c:28:b3:e7:f3:31:99:68:3f:b4:60:
         49:a0:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----