Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/b6ef6d8a610ee9af6dbc7f7b3514ec3e004e309c.roa
File:                     b6ef6d8a610ee9af6dbc7f7b3514ec3e004e309c.roa (raw, json)
Hash identifier:          KvaO8A6G8MDfV6/s2IH2BG8DGgUW+UhTziuHHAUV3QY=
Subject key identifier:   17:C1:28:67:76:90:2D:F6:5A:EA:AC:18:2A:1D:DA:4C:1C:C4:10:0E
Certificate issuer:       /CN=8f7555abd6f79519d0fd138e28d493df01d9cc7b
Certificate serial:       0D0972
Authority key identifier: F8:AD:22:C7:0B:38:CF:89:94:F6:01:7A:63:5A:82:8D:38:92:0E:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f7555abd6f79519d0fd138e28d493df01d9cc7b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/b6ef6d8a610ee9af6dbc7f7b3514ec3e004e309c.roa
Signing time:             Wed 24 Mar 2021 14:30:14 +0000
ROA not before:           Wed 24 Mar 2021 14:30:13 +0000
ROA not after:            Tue 24 Mar 2026 14:30:13 +0000
asID:                     61456
IP address blocks:        131.108.82.0/24 maxlen: 24
                          2803:8380::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 854386 (0xd0972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7555abd6f79519d0fd138e28d493df01d9cc7b
        Validity
            Not Before: Mar 24 14:30:13 2021 GMT
            Not After : Mar 24 14:30:13 2026 GMT
        Subject: CN=b6ef6d8a610ee9af6dbc7f7b3514ec3e004e309c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:66:fc:37:54:53:1a:67:60:c8:e8:b1:ca:
                    b4:37:a8:ea:6d:a0:32:63:39:5b:38:2c:ba:3e:a0:
                    30:81:bf:58:45:7a:7d:e2:c8:a0:e6:94:39:2c:87:
                    35:74:dd:a6:1c:d2:4c:d7:91:c6:2e:54:62:88:ee:
                    09:3b:ca:58:b5:69:81:b8:ea:92:f7:3c:8d:4d:64:
                    29:37:41:51:76:33:1a:ec:c7:36:70:c1:2d:28:51:
                    7f:b4:f0:1a:d8:d3:3d:70:26:fc:00:b9:0b:b7:86:
                    5c:d5:49:f0:62:91:7f:a5:48:57:b7:c4:ef:60:9c:
                    3a:96:74:4f:4e:54:78:f8:7e:a2:fc:64:cd:f5:e8:
                    45:6b:2b:0c:4a:74:e0:e3:fb:7e:17:f2:e6:31:08:
                    9d:e2:3f:72:78:c5:06:0a:4a:57:4a:1a:6e:8a:86:
                    52:87:15:da:f2:9f:c2:a0:c8:a5:f1:46:e6:89:50:
                    af:9b:1e:5a:c8:7b:de:5b:97:6e:20:13:f1:0b:90:
                    3c:e1:1d:33:22:44:a7:48:c2:db:3b:12:ce:27:76:
                    87:cc:57:09:a0:81:a0:d7:73:ba:f9:7f:bf:c0:97:
                    ae:73:93:7f:d7:79:b2:82:d3:aa:47:bb:47:af:79:
                    83:17:ff:e3:33:7d:14:88:ad:f4:9d:63:47:fb:d5:
                    89:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C1:28:67:76:90:2D:F6:5A:EA:AC:18:2A:1D:DA:4C:1C:C4:10:0E
            X509v3 Authority Key Identifier:
                keyid:F8:AD:22:C7:0B:38:CF:89:94:F6:01:7A:63:5A:82:8D:38:92:0E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f7555abd6f79519d0fd138e28d493df01d9cc7b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/b6ef6d8a610ee9af6dbc7f7b3514ec3e004e309c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/8f7555abd6f79519d0fd138e28d493df01d9cc7b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.82.0/24
                IPv6:
                  2803:8380::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:b0:12:99:f4:7d:4a:94:45:e5:df:dc:9c:37:d4:00:45:bd:
         5c:04:49:19:a4:00:92:63:86:5b:74:91:5f:17:6e:b9:61:c0:
         4d:e3:c4:72:84:f2:22:53:18:9f:f4:75:d3:77:64:1f:62:75:
         c8:ea:eb:18:dd:1e:cd:79:62:d4:a1:3e:6d:6d:99:62:4f:eb:
         a1:1e:e6:b4:e6:73:42:f0:85:18:ae:1a:24:b5:be:94:18:0a:
         4e:7e:9c:78:e4:c7:dc:6a:12:b5:fa:b5:0f:55:37:4a:7b:7a:
         8b:45:da:71:41:78:07:80:e6:8c:92:dd:38:6c:3e:32:b1:5e:
         9c:18:f6:59:02:b0:71:c1:e8:f3:e6:8b:fc:df:a5:f3:3b:90:
         2b:95:29:29:cc:68:7c:0d:69:9c:7d:39:bf:e5:96:41:01:59:
         c0:5c:cb:34:86:11:fb:4c:5b:55:9d:61:8b:41:69:84:d1:e2:
         9b:75:73:58:6f:33:a0:a8:a2:8c:0b:78:1a:90:41:3b:82:aa:
         3e:52:7e:c9:f4:6a:6a:fe:c2:95:dc:2c:6b:5a:28:c3:1b:cf:
         15:50:14:9e:b6:2a:63:07:48:97:09:e3:d5:ed:40:71:95:c0:
         89:9b:c5:d6:8e:b7:ff:28:f9:90:69:d5:d7:5e:f5:54:c0:61:
         d1:dc:cf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----