Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/56c5e0510a14e9681863c8ab46bf16c2cecc0275.roa
File:                     56c5e0510a14e9681863c8ab46bf16c2cecc0275.roa (raw, json)
Hash identifier:          U8VM6zrNEDZmyIZp5oDvUFTmI1zU4UJKn9fJy09RRlw=
Subject key identifier:   54:4E:8C:2C:C6:4B:AF:D2:06:5B:6C:5F:5F:83:DC:BF:9D:D8:FA:0F
Certificate issuer:       /CN=b14932b827e5b166c58065cb1f4068a039d95258
Certificate serial:       0DED6C
Authority key identifier: D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/56c5e0510a14e9681863c8ab46bf16c2cecc0275.roa
Signing time:             Wed 24 Mar 2021 14:33:06 +0000
ROA not before:           Wed 24 Mar 2021 14:33:06 +0000
ROA not after:            Tue 24 Mar 2026 14:33:06 +0000
asID:                     28094
IP address blocks:        2803:7900::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912748 (0xded6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14932b827e5b166c58065cb1f4068a039d95258
        Validity
            Not Before: Mar 24 14:33:06 2021 GMT
            Not After : Mar 24 14:33:06 2026 GMT
        Subject: CN=56c5e0510a14e9681863c8ab46bf16c2cecc0275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:cf:43:bc:8d:c8:88:42:40:89:ce:b0:98:
                    5b:88:03:b7:8e:95:78:50:3a:3e:da:32:ce:90:e6:
                    3d:44:b3:56:57:dc:37:18:0e:7c:b3:0e:70:c6:c3:
                    b6:58:92:64:42:c3:c3:27:ff:78:f8:d6:f2:24:fe:
                    10:52:ec:f2:3c:4e:16:2a:81:8f:cf:1d:92:38:c0:
                    11:b6:a7:ea:9e:bc:f8:dd:24:31:b5:76:ba:da:73:
                    93:23:43:ab:87:6b:f8:eb:2b:cc:61:d4:bf:df:52:
                    4e:48:da:fd:ee:92:29:19:c9:1e:8b:58:f6:e0:0f:
                    5e:f7:d4:ee:a7:8d:90:e8:39:0c:e2:b6:c4:98:55:
                    a1:95:d3:8b:e0:00:28:67:7d:98:f3:a3:37:94:63:
                    3b:2d:f5:4b:cf:84:07:4f:e7:73:84:56:fa:46:b3:
                    95:9e:f2:47:f1:b2:df:ce:ad:ea:ff:fe:70:65:63:
                    46:5c:b9:4b:0c:3a:1f:b3:0f:e1:74:fa:9a:f4:5f:
                    20:12:99:44:27:a5:53:b2:f9:6f:33:fe:e9:62:75:
                    6e:92:d6:f4:04:ed:30:e7:5c:e5:3b:e4:a1:bc:e0:
                    44:17:dc:05:61:1c:c8:3b:a6:52:87:56:5f:05:2a:
                    1b:72:8c:cd:28:37:67:6d:b2:b3:cf:0b:6e:a2:04:
                    0d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4E:8C:2C:C6:4B:AF:D2:06:5B:6C:5F:5F:83:DC:BF:9D:D8:FA:0F
            X509v3 Authority Key Identifier:
                keyid:D2:E0:8B:48:F9:80:E1:45:6C:08:34:65:55:C9:B4:53:C9:0B:9C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b14932b827e5b166c58065cb1f4068a039d95258.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/56c5e0510a14e9681863c8ab46bf16c2cecc0275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed0d3e-158a-4b5e-ac90-9b3705999d37/b14932b827e5b166c58065cb1f4068a039d95258.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7900::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:a0:95:7a:da:a7:1a:41:fe:72:9b:4a:6c:e8:60:8c:33:b0:
         d7:3d:cd:3f:6f:44:84:84:ce:f3:bd:c2:83:fe:ba:ac:01:6b:
         76:68:ae:1f:81:8b:d0:71:9f:44:fa:50:c7:ff:b0:9d:83:01:
         ab:72:ba:d4:63:ab:21:8a:66:8f:49:07:2b:cf:4c:da:21:d3:
         2f:d5:90:6f:8d:8f:c9:dd:b0:fd:e8:3c:af:8a:ab:78:d2:99:
         cf:37:13:90:42:cc:03:ba:1b:ec:8d:91:d0:1a:2c:19:24:38:
         57:c2:ec:d1:07:d9:68:bd:d4:bb:95:b8:fe:25:ef:5e:ba:17:
         41:58:69:eb:a8:5b:b9:41:43:8e:ce:8d:c0:4e:ef:ba:f3:0c:
         ad:d9:fb:6b:ca:67:59:e7:86:85:34:04:27:e1:0a:28:46:54:
         b0:b1:10:dd:a4:7e:b6:2b:d3:fa:f5:c3:ae:2f:7e:12:c3:f0:
         71:9e:41:e1:d0:99:b6:5d:89:39:0d:8d:67:68:a9:9c:30:da:
         85:b8:66:15:df:4b:cd:14:fa:72:8e:49:db:a7:90:7f:2a:a5:
         43:5d:f2:26:07:93:11:da:21:3c:18:e4:45:0c:a3:9a:be:da:
         74:29:51:c4:ae:6b:4b:82:ee:3a:fc:30:ec:88:e0:55:e6:72:
         33:ff:8c:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----