Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/9c6ef86579c3ce2995be57b82b920decb118fb21.roa
File:                     9c6ef86579c3ce2995be57b82b920decb118fb21.roa (raw, json)
Hash identifier:          rXEzruJqw3N6I2XWMPY7qGgSOU/a9Bed/uw/cZIwjo0=
Subject key identifier:   C1:F3:22:4F:88:8F:52:E2:CF:B3:AD:04:CA:35:6F:3D:62:58:52:FF
Certificate issuer:       /CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
Certificate serial:       0D9406
Authority key identifier: E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/9c6ef86579c3ce2995be57b82b920decb118fb21.roa
Signing time:             Wed 24 Mar 2021 14:35:56 +0000
ROA not before:           Wed 24 Mar 2021 14:35:55 +0000
ROA not after:            Tue 24 Mar 2026 14:35:55 +0000
asID:                     265855
IP address blocks:        2803:da20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889862 (0xd9406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33d77efc1ab1b4b849aa3ac57cd00366ea75b677
        Validity
            Not Before: Mar 24 14:35:55 2021 GMT
            Not After : Mar 24 14:35:55 2026 GMT
        Subject: CN=9c6ef86579c3ce2995be57b82b920decb118fb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:d6:5e:a5:81:a1:bf:e0:16:95:5b:e3:f0:
                    4a:0b:98:f0:e9:02:9b:01:45:35:89:b7:12:10:da:
                    ac:d7:6c:1c:9d:f8:52:e2:25:57:01:26:25:18:9c:
                    86:c5:48:30:be:3a:44:c5:1e:82:d8:a8:91:1d:00:
                    07:03:f7:54:fa:34:5c:c2:3f:57:eb:34:f2:6c:e5:
                    f6:86:b9:34:45:93:a2:f4:0f:c0:ed:a7:de:07:b4:
                    df:b1:fc:cf:09:4a:a2:85:1a:f5:ed:33:6f:7b:b0:
                    25:09:cd:15:d0:ea:89:a5:1e:3b:c3:5f:73:c2:5e:
                    ac:a4:7e:10:5d:ec:b2:d1:fb:ce:1a:ae:5d:8b:7b:
                    78:4f:b6:7d:7d:5a:12:e2:f9:68:e8:09:66:3c:e0:
                    cb:bc:ee:c4:a0:dc:a6:a6:a9:38:51:2c:21:ca:e5:
                    b3:2e:80:b0:ea:35:93:17:51:a6:29:20:e8:e9:2a:
                    55:2d:61:e0:fc:c9:94:02:10:e9:e7:44:48:a5:d3:
                    b9:dc:ec:fd:90:7e:4b:2a:31:20:d8:ef:7e:1f:76:
                    36:9d:90:6d:9b:b7:30:1a:0c:6d:52:fa:96:3b:12:
                    d2:84:65:91:a2:d6:77:07:a8:2b:66:b1:45:54:00:
                    aa:13:ce:98:c1:38:97:68:ab:21:b2:63:85:e0:32:
                    7e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F3:22:4F:88:8F:52:E2:CF:B3:AD:04:CA:35:6F:3D:62:58:52:FF
            X509v3 Authority Key Identifier:
                keyid:E5:32:D8:5E:46:59:00:DA:65:B0:67:57:94:D1:50:D3:E9:F4:4D:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/9c6ef86579c3ce2995be57b82b920decb118fb21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba4a14f9-9180-4ca1-8f7d-9cd801ad64ef/33d77efc1ab1b4b849aa3ac57cd00366ea75b677.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:da20::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:9b:1b:2c:53:f8:3f:21:a0:b4:80:55:09:47:f5:2b:67:19:
         5e:58:8c:a4:18:8a:39:01:0b:e6:46:fe:b6:2e:67:38:df:e1:
         af:75:99:d4:cb:de:22:d4:f1:e6:2d:90:d2:98:96:62:03:8c:
         da:16:08:52:de:dc:9d:07:8e:de:9c:14:e2:e5:52:c7:7b:b5:
         ef:ea:a3:9b:5d:a3:8e:b4:8d:12:44:f2:59:32:48:e4:98:2b:
         69:5d:82:b3:f0:c5:c5:38:26:5c:08:b4:05:ae:8e:8e:44:a0:
         eb:05:03:df:6e:9b:ee:21:72:07:94:1a:51:e9:03:8d:37:03:
         83:eb:1d:00:e7:11:68:f5:a1:fa:63:da:76:84:76:bf:d1:ba:
         f2:00:30:1a:53:1e:0e:27:ed:ee:ba:d9:8a:91:83:cf:9f:ac:
         1b:a8:6f:d2:e3:2a:6b:c2:44:d9:50:db:24:39:de:c5:ab:71:
         65:30:34:74:eb:62:97:13:15:ae:4d:96:1d:82:ee:2e:04:09:
         87:75:16:3a:99:e7:7e:10:81:1e:86:c7:f0:3c:37:cd:46:f4:
         3e:5c:bd:4b:bf:c5:0d:c9:e2:37:53:9b:c4:07:50:bd:19:94:
         86:ee:7a:12:5a:b6:5b:91:21:88:50:5a:b1:96:75:00:d1:96:
         e4:b5:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----