Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/ac55db7eadfdebb7a227507a9f61c57b43f0118a.roa
File:                     ac55db7eadfdebb7a227507a9f61c57b43f0118a.roa (raw, json)
Hash identifier:          cSOmsyEOEweU9ndy4Dza3XXA3roiIlVpvBJqs+B/R0g=
Subject key identifier:   3A:42:43:18:62:27:F9:D6:82:6C:3E:E6:43:64:E3:E8:E2:1E:4F:29
Certificate issuer:       /CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
Certificate serial:       0D6E61
Authority key identifier: 40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/ac55db7eadfdebb7a227507a9f61c57b43f0118a.roa
Signing time:             Wed 24 Mar 2021 14:29:04 +0000
ROA not before:           Wed 24 Mar 2021 14:29:03 +0000
ROA not after:            Tue 24 Mar 2026 14:29:03 +0000
asID:                     28114
IP address blocks:        2803:2600::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880225 (0xd6e61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
        Validity
            Not Before: Mar 24 14:29:03 2021 GMT
            Not After : Mar 24 14:29:03 2026 GMT
        Subject: CN=ac55db7eadfdebb7a227507a9f61c57b43f0118a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:46:7c:9e:d1:8c:27:0b:fa:09:e2:fe:49:41:
                    d7:fe:14:63:34:c2:e6:09:3a:03:ca:33:26:4c:c6:
                    87:0d:94:df:27:a6:63:89:96:9f:77:b9:d6:24:27:
                    d6:86:94:e0:88:5a:71:d2:2b:64:3d:d9:7e:88:b1:
                    a6:dc:94:17:2d:d6:cf:ba:0d:37:b9:b4:96:4a:5d:
                    8e:b6:e7:3f:66:6b:c7:b3:95:8d:fe:32:cf:be:1f:
                    d9:9d:1c:a5:50:2b:df:c9:27:92:64:2b:61:c7:54:
                    31:64:c0:5f:0f:0e:40:57:77:5c:4b:a6:6f:c8:78:
                    ec:20:79:ea:0e:85:2e:8d:b4:78:99:94:2c:60:60:
                    60:f1:e0:1b:87:78:b4:dd:6c:4d:64:24:40:05:81:
                    1c:bf:07:26:1b:ca:f6:34:a5:a9:9a:87:4e:d2:c7:
                    b9:8a:a4:ec:cd:ad:07:10:f4:a8:32:71:74:2b:0b:
                    20:2f:1f:99:ff:89:3b:73:07:8d:af:cf:cd:f5:64:
                    25:70:ad:85:d9:08:b3:9b:85:e7:24:58:80:07:1c:
                    c6:bb:d5:c0:8a:fa:d5:17:33:db:a1:dd:0b:f5:b5:
                    75:9d:c4:a2:e5:de:b4:80:56:41:39:ce:bd:04:04:
                    9e:ab:2f:e6:3a:c3:4b:a1:0c:29:2f:d0:dd:6f:ed:
                    25:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:42:43:18:62:27:F9:D6:82:6C:3E:E6:43:64:E3:E8:E2:1E:4F:29
            X509v3 Authority Key Identifier:
                keyid:40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/ac55db7eadfdebb7a227507a9f61c57b43f0118a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2600::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:e6:12:d7:7c:5f:4b:22:91:c2:d2:75:20:f4:35:6d:f0:
         e5:46:2d:b3:9e:91:d7:1e:f4:ca:0f:d0:41:41:31:13:6b:f7:
         42:6b:d5:49:a4:f2:ab:52:6b:75:f7:bb:39:29:73:d4:4f:74:
         8c:f4:bd:17:f9:1e:62:d8:c6:de:23:64:4c:82:38:6a:3f:46:
         da:1d:3d:09:19:8a:b2:a8:a8:f0:8b:c0:58:fc:71:97:b7:c4:
         1a:ac:3d:3b:5b:6f:4d:f8:f3:21:0d:5c:9a:13:12:59:0c:43:
         58:d5:c4:49:a4:c6:ac:c4:c0:ea:85:2b:66:6c:6e:83:9d:45:
         80:1d:d3:b5:61:0d:b9:46:0e:59:87:da:b4:62:f2:39:f3:b4:
         44:e1:a0:1d:2d:ba:64:e9:c2:71:67:01:43:ba:eb:cc:9c:2d:
         be:cf:27:04:e3:a2:ec:07:39:8c:d9:4e:10:7c:78:a7:8b:29:
         41:2b:cc:88:04:d8:72:3f:0c:67:97:55:b9:70:e7:dd:ea:91:
         77:ea:d5:18:9a:d0:6c:43:78:65:fe:48:cb:55:62:28:a3:07:
         19:f4:e4:45:60:54:ee:5c:70:b8:ba:cf:06:dd:ca:02:12:df:
         04:c7:c3:62:d2:15:90:a1:e5:d6:21:8b:ba:e8:75:00:8a:10:
         1e:89:dd:22
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDDW5hMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ4
Y2IxODVkYzJiNjdmZWE0ZThmY2M5MzAzZGU3NmIyZTZiM2U3NjUwHhcNMjEwMzI0
MTQyOTAzWhcNMjYwMzI0MTQyOTAzWjAzMTEwLwYDVQQDEyhhYzU1ZGI3ZWFkZmRl
YmI3YTIyNzUwN2E5ZjYxYzU3YjQzZjAxMThhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAikZ8ntGMJwv6CeL+SUHX/hRjNMLmCToDyjMmTMaHDZTfJ6Zj
iZafd7nWJCfWhpTgiFpx0itkPdl+iLGm3JQXLdbPug03ubSWSl2Otuc/ZmvHs5WN
/jLPvh/ZnRylUCvfySeSZCthx1QxZMBfDw5AV3dcS6ZvyHjsIHnqDoUujbR4mZQs
YGBg8eAbh3i03WxNZCRABYEcvwcmG8r2NKWpmodO0se5iqTsza0HEPSoMnF0Kwsg
Lx+Z/4k7cweNr8/N9WQlcK2F2Qizm4XnJFiABxzGu9XAivrVFzPbod0L9bV1ncSi
5d60gFZBOc69BASeqy/mOsNLoQwpL9Ddb+0lJwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFDpCQxhiJ/nWgmw+5kNk4+jiHk8pMB8GA1UdIwQYMBaAFEA3K4qkZDF+pWHm
xGPL9wTNlKBjMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDhjYjE4
NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2NS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2ZmNzZlYzAtN2Q0YS00OWMzLWI0YWUtM2U2YTkx
YjcyM2NiL2FjNTVkYjdlYWRmZGViYjdhMjI3NTA3YTlmNjFjNTdiNDNmMDExOGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZmY3NmVjMC03ZDRhLTQ5YzMtYjRhZS0zZTZh
OTFiNzIzY2IvZDhjYjE4NWRjMmI2N2ZlYTRlOGZjYzkzMDNkZTc2YjJlNmIzZTc2
NS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDJgAwDQYJKoZIhvcNAQELBQADggEBACl65hLXfF9LIpHC
0nUg9DVt8OVGLbOekdce9MoP0EFBMRNr90Jr1Umk8qtSa3X3uzkpc9RPdIz0vRf5
HmLYxt4jZEyCOGo/RtodPQkZirKoqPCLwFj8cZe3xBqsPTtbb0348yENXJoTElkM
Q1jVxEmkxqzEwOqFK2ZsboOdRYAd07VhDblGDlmH2rRi8jnztEThoB0tumTpwnFn
AUO668ycLb7PJwTjouwHOYzZThB8eKeLKUErzIgE2HI/DGeXVblw593qkXfq1Ria
0GxDeGX+SMtVYiijBxn05EVgVO5ccLi6zwbdygIS3wTHw2LSFZCh5dYhi7rodQCK
EB6J3SI=
-----END CERTIFICATE-----