Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/7bca619bf632658b4776fa1b9197d6b54c6a6d61.roa
File:                     7bca619bf632658b4776fa1b9197d6b54c6a6d61.roa (raw, json)
Hash identifier:          Tgze6RacGkLojFOhdmoHwjckvI+tMWTTKE5GpS+Cl4c=
Subject key identifier:   C5:C9:9E:5C:CC:D3:EE:39:04:D0:0A:91:DC:01:8E:CD:08:E2:7F:B1
Certificate issuer:       /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial:       0D8AED
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/7bca619bf632658b4776fa1b9197d6b54c6a6d61.roa
Signing time:             Wed 24 Mar 2021 14:40:18 +0000
ROA not before:           Wed 24 Mar 2021 14:40:18 +0000
ROA not after:            Tue 24 Mar 2026 14:40:18 +0000
asID:                     269799
IP address blocks:        2803:a0a0:900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887533 (0xd8aed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
        Validity
            Not Before: Mar 24 14:40:18 2021 GMT
            Not After : Mar 24 14:40:18 2026 GMT
        Subject: CN=7bca619bf632658b4776fa1b9197d6b54c6a6d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ae:d5:b0:25:e5:02:85:82:f2:28:45:d1:e8:
                    39:26:0a:ed:5a:8c:88:63:58:93:6a:22:38:ce:73:
                    28:e9:74:71:87:94:61:6c:a5:23:13:54:96:c1:55:
                    fe:fb:9c:65:b4:fb:0f:87:3a:79:b3:a8:de:b3:1f:
                    d7:96:4e:87:67:64:ff:76:31:55:2d:08:9c:3e:60:
                    dd:2e:90:6d:78:41:3f:e7:25:f0:26:fc:9c:d6:66:
                    8f:7c:be:3d:04:90:d1:0b:18:47:94:44:3f:51:5f:
                    a5:7a:87:44:43:24:d4:6f:1a:61:71:d0:01:ca:a9:
                    73:96:77:ea:e0:1a:bb:fd:b1:6c:90:c5:71:8b:42:
                    d5:fa:91:ee:c4:cb:6e:34:a6:2b:99:6b:d7:69:34:
                    78:99:d5:91:2b:b3:a0:9a:f8:ba:55:77:12:f2:9f:
                    4f:d8:c1:ac:54:c6:2b:82:b7:29:1c:62:a7:5a:bf:
                    d1:00:98:18:96:38:5c:c7:01:07:71:f5:75:ad:96:
                    5a:3e:e4:5c:41:4c:69:e9:87:81:e9:24:78:c1:dc:
                    cc:94:00:59:0d:67:41:07:6d:e2:51:09:0c:e8:49:
                    2a:ea:3f:e5:c8:e6:58:32:08:bd:4d:56:1c:7b:18:
                    73:af:3b:5c:13:59:87:40:39:65:64:b5:58:bc:da:
                    41:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:C9:9E:5C:CC:D3:EE:39:04:D0:0A:91:DC:01:8E:CD:08:E2:7F:B1
            X509v3 Authority Key Identifier:
                keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/7bca619bf632658b4776fa1b9197d6b54c6a6d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a0a0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         9d:57:75:4b:aa:29:2f:af:df:68:1c:1d:24:bf:13:08:73:4a:
         f7:b8:f6:62:09:f6:3d:b8:d3:d2:df:d8:80:83:fa:cf:4a:78:
         c9:8c:9f:3a:e5:98:9f:b9:4c:dd:4e:60:e5:6c:ae:ae:f3:36:
         ba:99:21:94:9f:93:e7:99:58:35:0e:12:25:83:cc:15:e6:0c:
         7f:ed:98:3d:6b:19:c5:d1:10:32:dd:e2:54:59:22:29:26:98:
         63:cc:93:0c:70:67:8d:6a:a4:81:dc:e3:75:12:e1:8e:63:58:
         90:49:e1:7e:55:5e:50:41:ad:5b:dd:0e:79:dd:45:64:31:28:
         88:fb:5b:87:bb:00:27:c6:87:96:60:6f:0d:45:42:cf:a9:05:
         e9:6c:2c:6e:a5:80:80:e2:4e:ca:9d:ed:52:4b:a3:5a:1f:2b:
         23:41:6a:be:28:64:56:83:0a:18:92:0d:91:da:74:28:a6:18:
         98:47:7b:77:76:92:cb:d3:f8:b9:a2:7f:0f:13:7e:7b:4f:f9:
         62:dd:f6:58:8e:1d:01:bf:7c:f5:5a:18:f6:56:16:76:84:5d:
         0a:29:88:f3:70:e3:0f:bf:ba:08:0b:e6:9d:05:db:60:7c:44:
         86:61:83:9d:91:5b:e2:c6:c7:11:f2:55:b6:ac:e1:83:81:81:
         f8:7e:6a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----