Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/64efa9bfc8c3284480ee98016778926d168f1c17.roa
File:                     64efa9bfc8c3284480ee98016778926d168f1c17.roa (raw, json)
Hash identifier:          lO//jdxdI5eCObDqWKE/EUc6ciV1NnEVBt6vwQZ/hcM=
Subject key identifier:   77:44:D5:41:35:8A:DE:DA:09:1D:4E:3B:5A:AA:44:81:E6:30:86:29
Certificate issuer:       /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Certificate serial:       0D72C1
Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/64efa9bfc8c3284480ee98016778926d168f1c17.roa
Signing time:             Wed 24 Mar 2021 14:29:04 +0000
ROA not before:           Wed 24 Mar 2021 14:29:03 +0000
ROA not after:            Tue 24 Mar 2026 14:29:03 +0000
asID:                     28114
IP address blocks:        2803:2600::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 881345 (0xd72c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
        Validity
            Not Before: Mar 24 14:29:03 2021 GMT
            Not After : Mar 24 14:29:03 2026 GMT
        Subject: CN=64efa9bfc8c3284480ee98016778926d168f1c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:85:b9:f2:84:6d:35:3f:11:96:9e:70:d8:45:
                    fc:68:44:3d:c6:96:18:b7:4a:7b:4a:13:d5:2b:fd:
                    8d:22:0e:38:e3:46:06:62:9f:2d:a1:c4:90:6d:a9:
                    7e:cb:87:96:f0:51:0a:d4:0b:83:19:39:91:f5:36:
                    ae:00:b2:fd:d2:cd:27:27:50:da:53:68:49:5b:6f:
                    2b:17:96:c2:6c:59:88:ee:89:cd:06:8f:16:54:e3:
                    6f:b8:c5:0c:8b:e2:18:3b:a4:5e:a7:14:e5:a1:bb:
                    02:37:12:9e:78:8c:cf:a2:17:ad:58:d1:09:c6:98:
                    62:0a:5e:4a:41:f9:d9:74:f6:21:4e:34:99:86:d1:
                    8d:0e:16:b9:c6:24:0c:0b:3b:2a:fd:44:f0:3e:77:
                    9a:f6:20:de:3f:d4:80:13:de:d2:d0:90:56:bb:1a:
                    5e:ae:dd:07:99:83:8d:79:0e:0e:25:a7:b6:09:d6:
                    ef:69:65:80:bc:9d:24:5b:5e:f2:39:50:1b:bc:9f:
                    50:94:cf:00:05:d9:0d:b4:c3:c5:06:1e:38:66:04:
                    bb:66:eb:52:1f:59:3c:61:eb:6c:7b:66:72:d4:81:
                    b0:22:11:37:a3:8e:37:db:e9:0f:ff:98:66:97:26:
                    bc:b0:91:87:6b:0d:6e:d5:6c:e0:46:87:1b:57:f9:
                    16:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:44:D5:41:35:8A:DE:DA:09:1D:4E:3B:5A:AA:44:81:E6:30:86:29
            X509v3 Authority Key Identifier:
                keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/64efa9bfc8c3284480ee98016778926d168f1c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2600::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:bd:a5:7b:f3:e2:70:4f:0e:62:fa:ac:0d:8b:35:e3:89:36:
         f3:49:3e:8a:72:bb:31:3d:a0:e1:d6:56:dd:1d:4c:0d:70:ef:
         4b:d7:ac:af:82:c7:1a:aa:19:0c:50:9e:ea:69:81:6f:48:d2:
         e8:48:6f:18:31:c0:52:2a:a3:28:b8:92:6c:cb:64:6b:83:53:
         8c:1a:d0:6a:e5:42:1f:a0:e2:a8:0f:f1:a1:bb:75:55:6a:fe:
         4c:b5:b9:a9:71:1e:d7:86:a7:b0:38:3c:24:95:ce:0b:a7:f3:
         97:4c:cd:a6:0f:54:f5:9a:8f:ae:51:d7:b7:93:98:e5:f0:fa:
         ca:f1:e4:c6:8f:52:30:8c:ab:93:0d:4a:07:00:ec:08:02:28:
         24:75:3f:7e:59:54:f8:67:21:8a:69:f4:d8:04:04:23:c5:e2:
         b7:08:40:f4:8e:3d:a2:c8:fa:af:b9:52:ba:b2:eb:da:d7:27:
         57:d6:bd:c2:e6:92:6e:ef:7d:fe:d6:c8:9f:bd:5b:49:2e:04:
         06:8f:da:a5:d3:77:1d:0f:fb:36:d5:84:f1:03:21:e1:78:f4:
         e3:ec:b5:4a:c2:5f:9b:fb:c5:1e:8e:d4:01:75:d7:6d:97:5f:
         ee:bd:4e:cc:10:d9:bb:db:37:3c:3e:3b:a9:63:a7:dd:75:9d:
         94:17:21:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----