Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/42e5a159a1531d0168c9bcb25d1ddbe6fc994f02.roa
File:                     42e5a159a1531d0168c9bcb25d1ddbe6fc994f02.roa (raw, json)
Hash identifier:          iA2iw4woSsZ/s2EvwV/arWO42/cFdzXX1SM8Ckg8wnY=
Subject key identifier:   A4:BD:D6:67:88:FA:A0:C1:A7:1D:B9:77:10:BB:98:0E:D2:88:D9:33
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E13D3
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/42e5a159a1531d0168c9bcb25d1ddbe6fc994f02.roa
Signing time:             Wed 24 Mar 2021 14:28:49 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4058::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922579 (0xe13d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=42e5a159a1531d0168c9bcb25d1ddbe6fc994f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:08:79:d6:e1:ba:2e:e8:bb:b1:62:c2:38:
                    a4:6c:ac:2e:01:2b:0c:78:11:cd:d4:01:7f:46:77:
                    74:a7:e6:c6:a5:12:c6:3e:b1:af:04:69:95:ee:e4:
                    dc:47:ef:06:53:72:ac:ae:2b:f9:07:50:67:35:c8:
                    a7:5f:3e:57:23:60:08:e2:6e:1f:42:23:db:9d:19:
                    af:3d:b6:b4:1b:8c:ca:29:16:44:49:50:71:bc:48:
                    b0:e7:03:97:df:ac:2c:2a:a3:6f:9d:c3:26:a4:32:
                    da:b2:7a:ab:99:ee:2b:ae:b0:23:b7:4e:25:b0:c9:
                    76:c3:6e:46:43:fc:6c:53:b9:d9:37:a9:aa:66:36:
                    d5:7b:b0:93:e8:4a:1a:55:8e:75:de:54:44:27:1f:
                    ca:58:55:85:75:99:04:d5:42:9a:93:47:5f:af:e8:
                    81:28:c2:05:d2:13:77:9a:cb:45:6e:00:9f:a1:2e:
                    46:53:af:90:35:d1:84:9e:ce:14:39:9f:f3:ce:81:
                    67:54:d9:9c:b0:5f:15:54:58:5d:03:af:b0:27:a2:
                    3e:51:29:1f:92:cf:07:6b:f1:68:50:f0:37:93:6d:
                    34:00:6d:1c:98:36:dd:62:1a:8d:03:7a:69:b8:4d:
                    b0:c2:5a:9f:c1:ba:db:7c:ce:21:b4:bd:7b:ef:7d:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BD:D6:67:88:FA:A0:C1:A7:1D:B9:77:10:BB:98:0E:D2:88:D9:33
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/42e5a159a1531d0168c9bcb25d1ddbe6fc994f02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4058::/47

    Signature Algorithm: sha256WithRSAEncryption
         c0:86:2e:1f:06:37:b7:c9:ed:8d:80:b9:95:b5:c7:b8:31:a5:
         6f:63:6a:9c:6f:54:2c:6e:c6:fc:36:c3:77:43:f9:49:b0:6c:
         1b:f6:8c:ca:df:89:eb:bd:62:bf:db:b4:2b:d4:c3:48:cc:cd:
         11:19:6b:f4:9e:6f:97:a4:f8:90:b7:ff:74:31:1b:ea:fb:7b:
         d7:9e:c2:ef:35:b8:e7:8f:fd:ca:05:9e:1d:8f:ab:2e:a8:16:
         b8:92:17:d4:64:71:9d:11:c3:c8:c9:c3:52:ef:f0:e2:25:e7:
         af:8c:47:70:23:51:b5:3a:8a:92:eb:0e:47:7e:1d:8b:c6:9a:
         e8:2c:34:b1:c3:36:c4:48:ff:dc:32:02:10:67:38:45:34:c5:
         d4:13:f8:8a:e5:fc:f8:ef:20:0d:34:c0:bc:c0:0f:19:86:f3:
         86:0d:1a:bc:8b:cc:c9:73:29:03:2a:32:e6:b0:2b:ff:7f:ca:
         e4:13:9f:ef:31:3c:18:d8:71:99:73:fb:9e:89:af:b4:cf:ad:
         bf:a2:54:3d:0d:3d:88:1e:af:0c:32:74:da:74:ad:47:d0:b9:
         ec:d8:d9:f3:ed:a7:13:8f:28:2d:a7:4b:8c:09:b2:d2:31:47:
         3a:84:1a:1a:0d:96:12:11:a8:a6:7c:17:5c:e6:36:d4:c0:e5:
         fe:6f:f9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----