Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/64a984e00e9fdf32a3e1ba29cf9387c6fa3271b9.roa
File:                     64a984e00e9fdf32a3e1ba29cf9387c6fa3271b9.roa (raw, json)
Hash identifier:          5HPfYGw/CZkSdtPZVEntfcywZK33A2wFXnCobKpKH6c=
Subject key identifier:   E5:93:3F:1E:86:99:D6:4A:D8:E8:D3:01:F5:FB:D8:3B:7B:70:2C:CE
Certificate issuer:       /CN=d907662ec76d6ba4a1e2cdb479e31012f43c1385
Certificate serial:       52D2
Authority key identifier: 19:26:1F:04:EA:BE:3D:18:55:3E:96:C7:D7:94:DE:68:E4:1F:9F:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d907662ec76d6ba4a1e2cdb479e31012f43c1385.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/64a984e00e9fdf32a3e1ba29cf9387c6fa3271b9.roa
Signing time:             Tue 01 Feb 2022 20:36:15 +0000
ROA not before:           Tue 01 Feb 2022 03:00:00 +0000
ROA not after:            Sun 01 Feb 2026 03:00:00 +0000
asID:                     272056
IP address blocks:        2803:bd10::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21202 (0x52d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d907662ec76d6ba4a1e2cdb479e31012f43c1385
        Validity
            Not Before: Feb  1 03:00:00 2022 GMT
            Not After : Feb  1 03:00:00 2026 GMT
        Subject: CN=64a984e00e9fdf32a3e1ba29cf9387c6fa3271b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ca:18:21:9d:33:12:97:2f:93:fa:13:09:d5:
                    f8:d6:a7:31:2d:02:4a:2d:53:9c:02:89:fe:f5:19:
                    fa:ba:e9:45:7f:1a:54:42:85:9c:31:4a:fa:6d:d1:
                    e9:04:dd:b5:c5:8a:2c:ff:a8:c0:a1:f4:0e:9b:ce:
                    2f:7f:33:47:d4:cb:06:df:74:fb:04:a5:dc:4e:98:
                    34:ad:f0:92:22:e6:07:aa:d7:32:ee:2b:d7:45:82:
                    20:49:d0:c6:1f:22:83:49:26:19:41:ca:6d:5f:1f:
                    ac:ba:1c:56:d0:ea:1a:14:03:2e:5c:38:00:2c:2b:
                    92:af:0b:ec:97:f7:45:6a:5b:a1:1a:a2:24:93:e8:
                    66:94:2e:de:57:14:a4:da:13:1c:ec:22:49:5c:5e:
                    35:cf:b8:bb:d5:9f:ca:d6:11:7e:96:05:d3:3f:1b:
                    5e:e2:89:67:00:8f:9d:02:3f:e1:a2:87:a1:7a:d8:
                    a0:64:f6:bd:56:68:ab:04:b1:17:2e:ef:52:47:de:
                    dc:02:21:f2:3e:63:ce:46:c8:ae:74:21:e9:b2:28:
                    a1:05:44:8b:de:35:1b:b1:4a:9c:94:cc:b6:44:3f:
                    84:40:6f:17:1a:f4:56:e8:7d:81:34:46:04:38:18:
                    c5:7b:b1:c8:84:17:e1:a4:a7:f3:15:c9:be:2a:73:
                    9f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:93:3F:1E:86:99:D6:4A:D8:E8:D3:01:F5:FB:D8:3B:7B:70:2C:CE
            X509v3 Authority Key Identifier:
                keyid:19:26:1F:04:EA:BE:3D:18:55:3E:96:C7:D7:94:DE:68:E4:1F:9F:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d907662ec76d6ba4a1e2cdb479e31012f43c1385.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/64a984e00e9fdf32a3e1ba29cf9387c6fa3271b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c4e0e757-0f85-4f45-b485-75a71c99d41a/d907662ec76d6ba4a1e2cdb479e31012f43c1385.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bd10::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:85:54:49:22:89:0b:91:77:e4:85:30:c2:1b:20:68:96:0b:
         d6:c6:3c:c9:0f:b6:85:44:4c:eb:13:71:91:0f:04:48:91:a8:
         5c:3f:62:f5:97:1d:a5:e6:90:3f:40:18:6b:43:d8:66:08:75:
         29:13:c2:d4:47:35:da:f9:e0:a9:18:ab:ba:7e:99:29:d4:f6:
         cd:6e:bd:e1:2f:f1:82:6c:b6:5d:0c:b5:47:fb:fa:09:99:6d:
         d6:d9:84:cc:80:c3:2f:e6:8d:8c:45:db:cb:f3:43:a2:56:ad:
         bd:88:fc:37:0d:fe:e5:b3:be:e5:3b:8e:92:d7:b5:37:fa:27:
         f1:5a:c9:50:91:77:fd:09:6a:6a:77:ba:3c:29:0d:92:4a:22:
         49:ca:b2:3f:db:89:24:89:c4:5a:bb:3a:06:69:1a:41:45:5a:
         47:b5:15:eb:9f:a6:ad:13:e9:64:21:48:9f:c6:7e:f0:a1:06:
         f2:9c:0e:24:d1:cd:9c:88:ae:1a:2a:85:6e:b7:1a:6a:c4:a2:
         ca:ef:65:3e:3c:42:88:a1:c5:d3:b6:5c:17:bb:14:ad:ed:ba:
         b8:58:b9:72:39:c4:a5:15:3c:aa:c8:0d:31:12:f5:08:ec:73:
         6e:57:66:52:10:e2:90:c1:ce:e3:af:8d:4b:ff:95:68:15:0d:
         e9:d6:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----