Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/4396a50dc0c6c822d7b09309c5a3ebb0ba8cf518.roa
File:                     4396a50dc0c6c822d7b09309c5a3ebb0ba8cf518.roa (raw, json)
Hash identifier:          P6yj7/BO5keyDzPzJS19zNWk3c/oOKfOuwfjc0xa2I0=
Subject key identifier:   0D:94:3E:52:65:5C:4D:B3:8A:6C:D6:76:B4:14:3C:B0:63:8D:01:A4
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DFD55
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/4396a50dc0c6c822d7b09309c5a3ebb0ba8cf518.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916821 (0xdfd55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=4396a50dc0c6c822d7b09309c5a3ebb0ba8cf518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3c:6a:14:59:4a:59:80:6e:41:62:27:f8:d4:
                    a9:11:1c:15:d2:29:6a:d2:fa:23:24:86:7e:f3:c0:
                    cd:f3:07:cb:b5:e9:5f:ce:0f:30:fa:1c:4b:ff:56:
                    88:4f:a8:8b:f7:20:bc:26:12:04:a7:a8:e5:e4:1f:
                    3f:74:5e:d7:a9:ae:e9:f8:02:28:6c:13:5e:d5:86:
                    9e:44:3b:f6:e9:b6:92:4c:dd:9e:d4:12:fa:14:28:
                    7b:35:7b:d7:a2:d6:61:7c:39:a4:18:0c:67:bc:3b:
                    7f:e5:32:85:d4:12:ca:3f:94:ba:67:28:8e:aa:83:
                    9a:09:cc:0c:00:27:03:b2:71:e8:ef:9a:05:a8:86:
                    89:82:6a:6c:12:46:e5:a6:a3:ff:1f:8c:3d:e5:d1:
                    f0:40:42:b2:51:2b:cd:56:d7:1f:2a:5a:17:9a:fc:
                    3c:80:26:88:08:83:57:de:a0:df:3b:6b:81:cb:68:
                    19:b2:15:09:5a:af:35:7f:32:e4:1e:5a:2a:8c:e2:
                    af:38:dc:67:fd:a2:e8:1b:b5:aa:38:2c:ad:d8:e7:
                    88:93:c3:91:9d:f2:0a:12:40:3b:12:72:d5:de:b6:
                    f3:64:95:9e:0e:f7:14:57:45:b8:bb:97:ca:21:8d:
                    68:8c:b2:d2:34:99:80:6c:d1:81:d3:c5:88:c2:47:
                    5e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:94:3E:52:65:5C:4D:B3:8A:6C:D6:76:B4:14:3C:B0:63:8D:01:A4
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/4396a50dc0c6c822d7b09309c5a3ebb0ba8cf518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:89:b1:80:8c:9f:2e:05:26:5c:72:a1:84:c9:73:16:2c:
         86:a5:73:71:07:9c:6a:99:05:e8:0b:c4:53:4d:ad:cb:87:82:
         4b:de:69:5a:4d:78:31:98:1b:a2:6d:57:06:47:05:a9:8c:54:
         34:5c:95:48:cf:cc:cb:05:00:cb:06:9d:e5:0a:c6:cd:a6:38:
         3c:9c:a3:4a:69:b6:35:85:b9:d8:d4:7c:2e:7e:6a:c8:1d:5c:
         5e:8d:f7:ac:49:9b:aa:92:db:2d:8a:f8:2c:d9:f4:91:53:ef:
         3a:64:f3:2e:43:11:02:72:c6:b6:c8:79:b3:70:2f:1b:88:ea:
         d9:42:19:2b:a5:67:e4:a8:ee:cb:e1:81:03:33:6d:11:bd:8e:
         fe:9a:10:08:d6:cb:fd:95:00:e4:a1:c7:27:a6:07:fa:ec:5d:
         28:c4:bd:07:ef:c5:20:c1:7d:99:66:f3:2a:0e:f9:e7:07:6d:
         52:14:d5:e0:85:db:6c:95:c8:f8:5c:bb:68:c4:b8:76:c4:8a:
         1b:b1:f4:df:b3:0b:1c:b2:62:95:cb:27:fe:16:f9:1a:69:98:
         b1:70:91:f6:4b:10:53:70:23:5a:de:f1:a0:f7:89:1a:f4:70:
         cf:23:bd:a5:52:1d:ee:78:29:c3:90:e3:b5:6f:eb:1c:be:22:
         3f:85:b0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----