Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/e00825886ed457ef67c0643498bee630acbf7b11.roa
File:                     e00825886ed457ef67c0643498bee630acbf7b11.roa (raw, json)
Hash identifier:          2yOIWVbnbQPpyOEVCKwsw5zsttC/i1A+PS0jWM7+U/U=
Subject key identifier:   CC:7B:69:F0:48:78:2B:06:04:86:7A:30:C2:74:D4:76:4C:AC:8F:FD
Certificate issuer:       /CN=9df60dad5cb02fa13e22a03cf7e0f5cace32ceab
Certificate serial:       0BFBB9
Authority key identifier: A9:92:B7:73:46:73:BD:E5:1D:41:E6:96:85:F5:C8:D3:0B:73:32:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/e00825886ed457ef67c0643498bee630acbf7b11.roa
Signing time:             Wed 24 Mar 2021 14:48:04 +0000
ROA not before:           Wed 24 Mar 2021 14:48:04 +0000
ROA not after:            Tue 24 Mar 2026 14:48:04 +0000
asID:                     267693
IP address blocks:        2803:c1a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785337 (0xbfbb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df60dad5cb02fa13e22a03cf7e0f5cace32ceab
        Validity
            Not Before: Mar 24 14:48:04 2021 GMT
            Not After : Mar 24 14:48:04 2026 GMT
        Subject: CN=e00825886ed457ef67c0643498bee630acbf7b11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6b:54:e4:5d:69:25:3f:ff:42:14:80:a7:8a:
                    d9:cf:cb:4e:ec:17:77:ea:57:ef:ad:5b:96:41:40:
                    30:23:73:a8:ee:9f:3c:e1:f1:55:9d:79:3d:ed:0d:
                    a2:3b:3a:50:35:51:94:81:8b:5f:34:a4:3c:1a:6d:
                    9a:8d:13:fa:b5:b7:04:fb:ca:fb:b2:c3:c4:38:bb:
                    2a:94:74:58:b6:76:d3:ad:0f:a3:ef:bf:7c:3a:c3:
                    87:99:fb:a6:00:19:0d:d1:9e:bd:48:46:84:aa:9a:
                    4d:ab:2e:7f:46:95:c3:52:ce:ae:2c:24:1e:29:44:
                    30:45:c1:0a:07:a1:9a:85:ce:05:fe:08:1b:fd:b3:
                    3a:1e:a9:57:fc:3d:2e:f8:a9:c5:25:4f:28:3b:ba:
                    4f:5f:dd:62:c7:b1:46:4c:cb:d7:a6:87:bb:d7:4b:
                    58:25:b8:ac:0b:79:8f:d4:c3:fc:83:7c:b7:d5:81:
                    ef:35:ff:24:09:3d:df:30:5f:fa:e2:01:08:53:a8:
                    11:73:b7:5d:9e:64:05:69:41:52:77:42:35:dd:cd:
                    55:36:3c:73:25:2c:1d:00:7b:94:57:88:4e:24:c9:
                    0e:07:50:37:50:68:3f:ef:24:b2:e4:44:51:dc:24:
                    f8:4b:5f:f7:8e:07:45:9b:9f:85:56:37:b7:bb:6d:
                    85:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7B:69:F0:48:78:2B:06:04:86:7A:30:C2:74:D4:76:4C:AC:8F:FD
            X509v3 Authority Key Identifier:
                keyid:A9:92:B7:73:46:73:BD:E5:1D:41:E6:96:85:F5:C8:D3:0B:73:32:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/e00825886ed457ef67c0643498bee630acbf7b11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3438320-87a2-423f-af81-445ba6bea387/9df60dad5cb02fa13e22a03cf7e0f5cace32ceab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:42:c8:a4:bb:f0:80:51:1e:72:d6:a8:bd:b3:3d:08:3d:cc:
         06:4a:25:77:f5:c3:0d:e2:d2:42:b3:ea:11:39:d2:fa:80:27:
         e1:f2:3f:df:90:2f:44:d4:6a:2b:d4:e6:cf:23:d8:56:b4:b5:
         0d:ea:d4:f1:55:1f:7b:e8:ed:97:aa:13:b3:10:ef:96:be:45:
         02:52:f5:14:a7:20:6e:bf:71:fe:0e:85:d0:32:c7:4e:81:19:
         57:25:51:26:97:ac:3d:e2:fd:71:74:81:d7:2d:b7:8d:a5:cc:
         ce:83:79:5c:89:e1:a1:65:d5:97:61:dd:aa:f4:09:9d:ed:cb:
         66:f1:03:1d:b1:d4:ba:9e:9b:a3:3d:6a:4e:46:99:38:3f:d8:
         d4:50:cc:bd:f7:62:37:22:02:49:79:7b:c3:e1:50:87:d8:44:
         78:d9:25:27:7e:d8:5c:9a:24:57:7d:ba:3f:e5:1c:62:4d:f6:
         78:1b:05:ba:aa:4c:73:b9:1e:88:78:dd:6d:24:11:8a:9e:f0:
         3d:e9:dd:84:f8:09:e0:ca:ca:94:05:97:6b:5b:dc:5c:6c:46:
         9d:d4:c3:2d:fc:50:93:e3:9e:77:f0:2e:19:d8:85:89:e0:4b:
         aa:87:ea:93:80:90:50:6e:96:ad:bb:af:e5:0e:12:ce:22:17:
         09:59:98:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----