Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/843592380436a4b5dbcbaa6b3fcbbf7bcf5c1fd6.roa
File:                     843592380436a4b5dbcbaa6b3fcbbf7bcf5c1fd6.roa (raw, json)
Hash identifier:          idiQC6EHejwvzi+bYTolhiKihfjRCPU/goBHe149SNM=
Subject key identifier:   04:3F:F9:58:14:1E:16:85:98:28:55:48:B1:A6:EE:46:D8:65:23:D1
Certificate issuer:       /CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
Certificate serial:       0D38B4
Authority key identifier: EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/843592380436a4b5dbcbaa6b3fcbbf7bcf5c1fd6.roa
Signing time:             Wed 24 Mar 2021 14:41:27 +0000
ROA not before:           Wed 24 Mar 2021 14:41:27 +0000
ROA not after:            Tue 24 Mar 2026 14:41:27 +0000
asID:                     264668
IP address blocks:        2803:aa20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866484 (0xd38b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91fe0c4e650a338e80b4066e31e49e8122cdeb1
        Validity
            Not Before: Mar 24 14:41:27 2021 GMT
            Not After : Mar 24 14:41:27 2026 GMT
        Subject: CN=843592380436a4b5dbcbaa6b3fcbbf7bcf5c1fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ad:d2:1a:dd:2d:6a:6a:c2:8b:f1:75:0e:2d:
                    fc:55:72:d1:39:18:8c:65:50:dd:45:23:92:cc:38:
                    94:ab:fa:2d:a0:fe:ee:ca:f8:ef:c2:29:9d:a0:7f:
                    4b:02:08:15:33:be:2b:c5:95:7f:f8:68:d1:2a:b5:
                    99:b1:20:71:89:64:e5:f8:15:9b:01:2c:34:c3:de:
                    16:d9:c3:06:77:ec:04:70:4c:40:a4:db:fb:48:41:
                    c5:92:49:ae:9c:f1:36:89:d1:a7:6b:41:c5:d8:5b:
                    03:93:42:2c:6c:26:48:88:c9:a0:c7:a0:12:94:ce:
                    56:15:f3:9c:d7:b5:1b:40:54:1b:62:93:a0:ad:b2:
                    9e:df:86:bd:cb:a2:81:9b:bb:83:a8:c8:b1:53:ed:
                    51:7e:49:3e:40:07:75:db:c6:3d:b1:27:a8:45:06:
                    87:e1:b4:e0:c3:ef:d1:1e:61:4f:dc:b2:d0:80:d2:
                    7c:13:43:3f:67:2f:81:9b:ee:4e:56:8c:cd:ec:8e:
                    a0:e2:ab:56:7b:7d:4a:44:1c:24:78:f6:14:13:b5:
                    74:c6:b4:76:43:78:9d:c7:f1:33:6b:71:5e:bc:70:
                    e4:39:c7:c3:d1:b9:43:16:ee:5d:1e:06:9c:a7:2b:
                    eb:de:9a:eb:0d:be:ef:9d:1b:41:75:c0:46:e8:dd:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:3F:F9:58:14:1E:16:85:98:28:55:48:B1:A6:EE:46:D8:65:23:D1
            X509v3 Authority Key Identifier:
                keyid:EC:FB:32:23:27:26:26:BF:FC:62:56:D6:D8:D5:85:9F:FE:AB:E8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/843592380436a4b5dbcbaa6b3fcbbf7bcf5c1fd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/d91fe0c4e650a338e80b4066e31e49e8122cdeb1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aa20::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:9c:c5:71:91:ae:32:ab:90:df:49:d7:02:34:09:a1:d5:
         dd:82:af:1e:ba:e6:6e:05:61:85:a4:43:3d:5e:25:1b:a7:11:
         9d:05:42:1d:60:2c:13:d4:a4:ac:20:2d:ea:5c:f9:7f:cd:36:
         92:13:71:a6:7c:4c:7f:ab:39:94:69:49:61:c7:bc:8f:11:45:
         ec:6c:40:00:0f:a1:ea:b2:e1:bd:dc:49:d2:81:ff:54:57:04:
         3c:97:a5:7d:54:8c:b8:3c:e4:d5:6f:d6:c0:a4:50:02:12:eb:
         35:5e:3f:92:da:c3:bd:09:23:19:63:73:52:e3:92:ca:c5:80:
         4a:6d:55:37:4f:1d:0f:eb:b8:ff:c3:a8:96:f5:cf:2f:d9:db:
         59:e5:af:32:a9:8a:79:f6:2c:1f:ba:4a:3b:0d:71:22:57:26:
         05:af:a0:2a:bd:50:f4:2b:da:f3:87:9d:11:6c:85:81:5b:f8:
         0c:9b:6c:46:ed:6b:21:53:69:8c:c1:71:61:94:9d:9a:ca:e2:
         7c:4b:a1:2b:87:3c:77:57:f5:b3:66:37:3f:35:91:4c:66:07:
         18:e6:42:c7:dd:b0:eb:9c:35:80:e9:f9:6b:b2:c9:a2:8a:27:
         69:6a:db:43:ec:f9:3f:a4:a6:3e:96:c5:bd:7c:9f:42:fa:38:
         b4:b7:37:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----