Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/a1df391940a6103ca8e1a7d7f30e59a2cc0ba12e.roa
File:                     a1df391940a6103ca8e1a7d7f30e59a2cc0ba12e.roa (raw, json)
Hash identifier:          AJYT9AphuoqvtxRrGG5einYa024W1uHucl/as3cXbhM=
Subject key identifier:   90:6E:37:F2:B9:D5:87:88:ED:F5:6E:B5:A8:1B:32:00:7C:8D:67:CF
Certificate issuer:       /CN=60077339e10a0ec2c6761ec2643f8be039720bbc
Certificate serial:       0DC2DC
Authority key identifier: 0C:F7:D2:FA:4C:E2:E7:13:8F:E7:2C:FF:8D:E9:A3:7D:5E:27:F4:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60077339e10a0ec2c6761ec2643f8be039720bbc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/a1df391940a6103ca8e1a7d7f30e59a2cc0ba12e.roa
Signing time:             Wed 24 Mar 2021 14:30:44 +0000
ROA not before:           Wed 24 Mar 2021 14:30:44 +0000
ROA not after:            Tue 24 Mar 2026 14:30:44 +0000
asID:                     263780
IP address blocks:        2803:e440::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901852 (0xdc2dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60077339e10a0ec2c6761ec2643f8be039720bbc
        Validity
            Not Before: Mar 24 14:30:44 2021 GMT
            Not After : Mar 24 14:30:44 2026 GMT
        Subject: CN=a1df391940a6103ca8e1a7d7f30e59a2cc0ba12e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1f:89:b6:a4:81:5b:66:5a:36:a2:9d:20:9c:
                    df:fb:aa:40:dc:a8:8b:73:4d:a7:9e:8d:c3:54:66:
                    95:34:ca:6b:49:b2:ec:c3:0f:fa:5b:d2:70:8c:5a:
                    fe:c2:ed:28:20:13:a6:ca:41:29:e1:cc:af:ed:7b:
                    ee:58:5d:76:36:ce:98:24:83:74:8a:dd:45:49:f8:
                    43:c2:17:e2:22:2e:b1:d6:51:23:28:bf:3a:fa:7f:
                    71:d7:ae:41:a6:61:81:7a:c3:19:ee:2d:72:34:a7:
                    04:08:ae:80:89:98:49:d1:68:35:ce:29:20:e7:17:
                    fe:88:cd:dc:9f:18:d1:0a:4a:5d:f5:7d:71:2c:de:
                    b4:6a:b7:99:46:08:64:f6:46:b4:74:35:55:7f:64:
                    35:51:a6:5d:fd:9b:bd:8a:70:b9:b4:97:13:3b:97:
                    af:93:aa:a3:08:81:0d:e9:4e:8b:d0:a3:37:de:e2:
                    e8:8e:26:ca:b8:4c:d5:cc:6d:bc:07:25:c5:92:7d:
                    b3:df:ba:e2:b2:56:7a:77:66:b2:6d:df:4d:63:7a:
                    31:28:b0:88:03:d1:f6:25:4f:40:c2:d6:2d:2d:e9:
                    b7:fc:cb:d5:a4:19:44:82:5f:fd:3f:04:92:9f:73:
                    89:7a:cd:be:e2:7c:6e:b5:0a:c2:e2:22:34:39:56:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:6E:37:F2:B9:D5:87:88:ED:F5:6E:B5:A8:1B:32:00:7C:8D:67:CF
            X509v3 Authority Key Identifier:
                keyid:0C:F7:D2:FA:4C:E2:E7:13:8F:E7:2C:FF:8D:E9:A3:7D:5E:27:F4:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60077339e10a0ec2c6761ec2643f8be039720bbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/a1df391940a6103ca8e1a7d7f30e59a2cc0ba12e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8e4c7fd-d447-40a3-9dd1-e9f4cca913d2/60077339e10a0ec2c6761ec2643f8be039720bbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e440::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:8d:e9:e9:df:5a:47:d0:81:1c:d7:28:d8:4c:f8:90:b6:
         6f:b0:9b:9b:13:3d:30:bf:46:fa:2e:a8:72:a3:a4:73:4e:ff:
         65:39:3c:38:9c:9e:75:98:5c:e1:0f:ac:af:b5:ba:1a:b0:2a:
         45:ac:0b:62:d1:e7:67:b6:04:1d:25:3a:d8:59:96:7d:38:69:
         69:32:02:5f:c4:12:7e:06:27:54:7d:8e:9c:a6:5d:b6:31:7b:
         e1:9a:1f:32:ad:ca:c6:84:54:41:95:42:92:6b:a3:13:79:6a:
         7b:a2:f3:bb:c8:03:e1:5f:7f:95:4c:b1:47:45:d0:a4:a1:cf:
         55:20:f5:70:25:7b:9b:b8:88:7a:de:4a:7e:d4:65:5a:5f:ca:
         8d:40:34:78:d5:66:99:3c:cc:24:ec:da:2e:a6:26:35:33:75:
         6c:ca:48:39:37:57:4a:d7:8f:f1:b5:76:49:31:0a:ea:92:75:
         a1:9e:98:76:f6:62:c7:1b:ae:3f:5f:d3:95:a7:0a:25:77:d1:
         9d:44:99:1c:d2:26:77:7b:e1:3d:c0:6f:50:f4:f2:4e:78:ff:
         98:c7:d4:75:5f:96:cc:37:b6:0b:92:e7:04:44:f5:91:8e:d1:
         d8:7c:c7:c2:7b:0f:11:12:fe:b6:f8:c6:70:3c:40:26:8d:ae:
         cc:20:db:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----