Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4c2e724953cb97c59a59369664b3f5619ca117e1.roa
File:                     4c2e724953cb97c59a59369664b3f5619ca117e1.roa (raw, json)
Hash identifier:          6EBZXygxSdIwsvg98+3jOWdWnjDeETnvwfCrFpjSQcM=
Subject key identifier:   B2:0E:D4:AD:F2:EA:B6:DD:B1:51:B3:29:3A:5B:83:11:89:DE:10:04
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       0DD492
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4c2e724953cb97c59a59369664b3f5619ca117e1.roa
Signing time:             Wed 24 Mar 2021 14:34:58 +0000
ROA not before:           Wed 24 Mar 2021 14:34:57 +0000
ROA not after:            Tue 24 Mar 2026 14:34:57 +0000
asID:                     263719
IP address blocks:        2800:680:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906386 (0xdd492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Mar 24 14:34:57 2021 GMT
            Not After : Mar 24 14:34:57 2026 GMT
        Subject: CN=4c2e724953cb97c59a59369664b3f5619ca117e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:81:56:a2:29:23:5c:f4:8b:62:5b:9d:ad:ce:
                    8a:4b:4c:c6:2a:d8:e2:e2:4b:d8:b5:d8:a7:ba:92:
                    b2:c6:42:5c:3f:d5:d8:cf:e9:4d:fc:fa:c3:8e:b2:
                    15:b2:75:f1:68:c6:82:9e:f0:de:d9:4d:1f:7a:20:
                    14:cc:9d:44:71:49:ee:d6:1f:20:0f:20:e9:af:60:
                    10:25:a9:ae:02:52:ee:53:c9:d1:5f:25:7d:94:39:
                    c4:ac:d9:6d:18:7e:45:3e:44:23:9d:d8:cd:6b:d0:
                    13:74:b0:f4:fd:11:a8:e2:ad:ed:54:4b:fe:85:28:
                    3c:e8:3f:43:be:6c:09:49:e8:ec:e9:ea:aa:ef:ea:
                    77:b4:d8:dc:b3:b2:35:a6:65:8a:0e:52:71:46:4a:
                    70:a5:72:c9:78:e7:f5:15:c2:0a:1d:37:b0:c5:8e:
                    43:0c:a2:b7:72:cb:55:fe:0f:ff:87:5c:83:20:42:
                    03:f5:86:2c:1a:0b:2e:21:42:23:09:19:85:a5:c4:
                    03:a8:45:12:1c:92:14:1b:6e:8c:17:71:d5:9b:94:
                    b5:44:0a:2d:a9:7e:56:62:47:6f:dc:00:b0:7a:e3:
                    5a:f3:4f:b4:d9:a3:e7:3d:fc:0f:9a:62:90:91:30:
                    a5:81:ef:26:5e:da:f7:40:4b:4e:5c:e0:9d:de:c4:
                    e2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0E:D4:AD:F2:EA:B6:DD:B1:51:B3:29:3A:5B:83:11:89:DE:10:04
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4c2e724953cb97c59a59369664b3f5619ca117e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:680:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:bd:53:4b:45:87:f8:f7:27:5b:20:11:65:94:ca:a0:52:12:
         51:5c:ee:dd:33:4d:32:61:9a:f9:53:a3:3d:4c:cd:e7:a8:b4:
         f0:eb:46:16:1e:a9:ba:17:66:ce:07:78:c1:e3:2e:04:58:12:
         f5:eb:3d:15:be:43:98:f7:8c:bc:aa:b6:c5:45:e8:a4:6e:a9:
         2b:45:84:bf:f8:7e:ab:f6:10:a6:35:54:3f:47:44:dc:51:bd:
         ff:38:5f:bd:fa:e7:01:93:17:30:1d:37:a8:a2:59:67:b1:6e:
         70:55:c4:79:d1:86:09:e0:56:04:7d:34:73:45:f9:50:b1:1e:
         a0:18:c2:11:2c:ec:11:f8:c7:71:9c:bc:86:d7:cf:d9:a6:a3:
         64:f0:c1:dd:f9:4e:b5:37:62:17:5a:a4:fb:da:6d:31:79:6b:
         1d:fd:13:32:92:4d:6f:4e:bb:26:c6:43:bf:ea:e6:af:53:6f:
         a4:f5:f5:22:08:6d:a3:71:cc:2c:7e:67:33:35:c7:0c:5c:37:
         ef:0a:f6:49:df:3d:bd:94:ce:24:a0:a6:4f:de:72:af:bb:11:
         32:59:20:58:1c:da:b9:90:dc:be:cc:3a:ab:37:cb:78:6b:d9:
         a8:7d:58:99:ab:c3:07:bc:df:05:d4:57:e0:a8:af:e4:5a:bc:
         09:71:fa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----