Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/46ad47f10449614d39f40214b6320ec9e1b1fbc6.roa
File:                     46ad47f10449614d39f40214b6320ec9e1b1fbc6.roa (raw, json)
Hash identifier:          CE/Q726GbrPctS128T6bfv8nk6fDnZBdN5xQqX7yows=
Subject key identifier:   07:67:76:0B:13:3B:DE:36:12:36:B2:B3:77:D2:96:F8:45:5B:68:97
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DD09E
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/46ad47f10449614d39f40214b6320ec9e1b1fbc6.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905374 (0xdd09e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=46ad47f10449614d39f40214b6320ec9e1b1fbc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:a7:45:16:43:c9:cd:13:7d:24:d0:a8:b8:
                    c2:9d:ed:bb:d1:60:29:53:be:08:d4:db:5a:a6:c8:
                    f2:dc:88:a4:56:33:89:cb:d6:ec:62:30:6e:59:98:
                    f8:a5:30:93:46:b2:1d:29:73:24:4f:01:f5:ca:84:
                    72:e3:77:03:2c:56:57:07:93:96:cf:7a:05:91:96:
                    80:d7:34:52:7b:60:83:21:57:98:1e:59:49:8f:a5:
                    32:1e:10:17:0b:e9:d8:58:d3:a2:da:f5:b1:c2:61:
                    11:74:1c:11:23:1c:e7:a6:3d:26:c5:7e:31:5d:f3:
                    84:66:58:ea:72:39:4a:6b:af:be:f2:e4:c1:85:a0:
                    15:d6:69:33:47:15:ca:a8:cc:ac:c7:db:8c:43:ba:
                    71:33:bb:0e:d3:7e:e2:57:ad:c5:0f:4a:53:fb:db:
                    aa:67:25:14:87:d1:59:3e:7e:70:cd:b8:64:ad:71:
                    4f:c9:e6:b2:6a:b2:ee:b9:ef:28:b5:61:3c:7d:b4:
                    7b:17:33:66:24:c8:dd:ab:24:80:ed:8b:7a:cf:63:
                    22:3d:2d:ac:c2:50:24:2f:f9:5b:f0:c4:9f:68:57:
                    0d:62:51:59:dc:a8:2a:c1:ba:c1:41:40:d2:46:bf:
                    c0:2e:67:72:49:a1:0c:0f:44:86:8d:2e:a8:61:6a:
                    a2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:67:76:0B:13:3B:DE:36:12:36:B2:B3:77:D2:96:F8:45:5B:68:97
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/46ad47f10449614d39f40214b6320ec9e1b1fbc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4003::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:4c:5c:b5:a1:bb:26:c7:46:ea:c7:26:9b:a9:80:5e:d4:31:
         ff:c0:c6:02:4e:dd:46:a5:d4:69:43:02:da:4e:fc:86:e3:9f:
         93:15:47:50:06:01:e7:de:3a:05:81:68:1c:66:93:55:2c:e5:
         d9:fc:cd:f6:ce:4d:61:2d:b3:5b:0b:b9:bb:1f:f8:85:60:7e:
         c5:f8:c4:f5:4c:67:47:c2:75:87:fa:dd:ca:ef:d0:92:24:1d:
         79:ce:86:66:e5:a6:6a:20:4e:e1:82:6a:6f:18:9a:b9:f7:26:
         18:6c:9e:b0:5d:dc:53:74:7c:77:0f:1e:b6:b1:85:a6:19:ee:
         af:a6:75:7b:f2:a2:e1:ea:39:3b:aa:81:3e:fd:13:2b:01:13:
         9f:39:98:dd:f0:0d:b3:78:dc:0a:e4:13:f8:14:d9:9b:f0:13:
         57:7e:4a:40:bd:4f:6d:7a:74:2e:66:13:b8:dd:57:eb:a4:38:
         57:05:76:e2:3c:cf:96:69:4b:2b:5f:6d:f4:98:37:4a:48:df:
         dc:2d:69:90:84:f2:9a:58:5f:7a:2f:91:37:56:8d:39:fa:da:
         10:73:23:43:9a:94:57:e1:68:ae:a3:b5:e5:ad:e1:fb:2d:da:
         f4:52:f7:99:7a:11:bb:41:d1:a5:73:15:ce:dd:fb:55:da:1e:
         37:3f:23:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----