Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/38d62fa9563ae793145b8529a4bfc7365329b4e9.roa
File:                     38d62fa9563ae793145b8529a4bfc7365329b4e9.roa (raw, json)
Hash identifier:          bMUEdeUIhH5kiZuPWk32RQsJr1t7pwwRzuE4wigSzQ4=
Subject key identifier:   91:68:7B:9D:B3:02:DF:DB:28:C8:9C:BD:38:B4:11:E8:7C:A9:E6:FC
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E1F1F
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/38d62fa9563ae793145b8529a4bfc7365329b4e9.roa
Signing time:             Wed 24 Mar 2021 14:28:49 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4016::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925471 (0xe1f1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=38d62fa9563ae793145b8529a4bfc7365329b4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:16:d5:61:c2:73:30:cf:2c:a4:37:4a:4c:0b:
                    50:8d:7c:43:33:7c:67:d6:51:f9:9d:e5:6d:fc:40:
                    87:78:06:c4:be:f6:40:ad:f3:97:b2:d2:cc:69:99:
                    bb:9d:48:d4:01:51:fe:56:30:69:51:e7:40:b8:d8:
                    b5:ed:7a:da:17:fb:7a:3c:d0:52:1a:c6:b4:bd:61:
                    92:f7:da:f0:69:d7:bf:e2:f9:5b:63:f8:fd:04:ee:
                    58:1a:8b:ac:9a:a4:dd:44:92:d0:be:ff:5e:05:54:
                    b3:8d:1c:cb:14:5d:ee:8b:86:56:47:87:55:90:e4:
                    68:51:f7:3e:17:44:82:b4:27:2f:17:26:e8:6f:09:
                    8c:91:2f:2b:7a:d7:59:91:1a:5d:67:16:ee:e6:25:
                    c2:b9:63:78:f9:a9:ca:2f:32:a9:5e:06:e7:85:27:
                    b0:ad:42:e9:31:0e:26:a0:4b:16:76:ff:44:da:01:
                    ae:3f:6e:e2:2f:3c:d3:b4:1e:60:78:50:20:b8:72:
                    0a:e7:ae:d3:a8:43:bc:39:f2:6d:5b:03:dd:20:86:
                    8b:b8:c3:63:c6:1d:f1:dc:8e:b9:47:5b:ca:47:34:
                    06:f5:95:f1:4d:b7:95:bd:15:72:6f:09:de:37:1b:
                    ed:2a:55:2b:d8:7f:a6:8f:44:44:4a:59:11:01:37:
                    02:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:68:7B:9D:B3:02:DF:DB:28:C8:9C:BD:38:B4:11:E8:7C:A9:E6:FC
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/38d62fa9563ae793145b8529a4bfc7365329b4e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4016::/47

    Signature Algorithm: sha256WithRSAEncryption
         1f:a0:65:06:00:d0:a3:4c:83:65:55:b6:9b:8d:36:79:75:33:
         73:bc:d2:df:aa:2f:a8:c9:74:a8:4a:1b:05:83:c4:e4:d4:12:
         5e:04:95:93:e2:1a:19:a4:58:7a:0e:60:13:65:48:b9:bb:b7:
         a4:65:84:23:b4:d3:33:81:a5:53:1a:e3:48:0e:06:53:3f:03:
         55:62:e2:9f:2e:58:8c:95:d4:18:a3:01:10:a3:94:1e:12:63:
         f6:59:c0:78:c6:20:31:7c:16:2e:fd:b2:74:81:63:11:46:6f:
         b0:b3:c2:8b:5b:d0:3f:60:19:86:99:65:75:6f:0c:6b:c4:e2:
         12:d2:a5:43:cd:12:f0:f2:2b:40:e5:4d:37:91:36:bc:66:7a:
         90:04:96:ef:25:bc:e3:af:b7:21:47:ef:54:85:21:4c:88:1d:
         99:c5:84:5c:6d:75:9f:ff:12:87:4a:e2:62:d3:e1:0c:2c:6e:
         3b:d0:79:ac:ad:ff:d6:30:42:9e:c3:c3:97:b5:0d:94:df:b1:
         4f:99:fc:34:b9:95:6a:e6:66:2a:34:35:3d:a7:b5:03:b5:6c:
         ef:c7:f4:57:77:6d:03:dc:a9:52:fd:83:64:6a:0b:90:f9:18:
         44:43:1c:76:a0:f2:0e:ed:ff:89:ed:ab:e8:6f:dd:53:96:15:
         bc:89:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----