Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/4a19934680286b96bae84696f8e24d929161ba52.roa
File:                     4a19934680286b96bae84696f8e24d929161ba52.roa (raw, json)
Hash identifier:          7mM3KdaZ0+qUHkPGRxyeNzqZ2mt36axoYSv6eSdpJpY=
Subject key identifier:   7A:BC:F2:A2:D6:69:22:30:C8:2A:41:C1:D2:B8:FE:F3:32:BA:27:03
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DFD2F
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/4a19934680286b96bae84696f8e24d929161ba52.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:400f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 916783 (0xdfd2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=4a19934680286b96bae84696f8e24d929161ba52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:31:8f:f8:71:64:1e:77:63:42:1d:8e:5f:
                    2f:27:61:3b:1b:39:8a:51:d0:62:a7:49:76:73:3b:
                    38:e7:26:47:a1:59:97:6d:01:fc:fd:94:5f:0e:0a:
                    79:cc:36:92:65:7b:f7:73:95:3e:0b:5a:13:c1:72:
                    9a:3f:ee:fb:0e:6b:27:6c:c1:0e:ff:bf:2e:4a:97:
                    db:1c:82:55:33:a5:a0:55:bb:0b:67:a2:b5:2e:03:
                    8a:d2:46:4a:7e:f0:d8:74:6a:b6:58:ea:9d:00:ac:
                    f5:87:e8:fb:d3:e7:d8:47:11:c5:dd:d6:d3:6c:cd:
                    44:af:df:31:fa:f6:bc:08:49:65:90:86:38:bb:1b:
                    d0:23:39:59:aa:eb:66:f6:94:4d:70:05:b4:27:13:
                    c6:ba:52:93:5a:8d:df:93:a2:f7:49:8e:16:bc:88:
                    4a:2e:26:cf:f8:79:c9:7b:39:06:9a:60:93:0c:ad:
                    24:46:1a:16:49:49:20:bb:1b:d8:4f:c4:98:5c:5b:
                    90:b1:af:cc:c5:9f:ab:86:4f:d3:3c:43:50:54:aa:
                    66:f4:40:f7:7d:0c:28:df:a1:87:e1:42:cd:3b:dd:
                    51:fe:24:66:cf:8c:cb:1e:38:f2:ca:24:1c:79:34:
                    50:bd:94:57:aa:2f:67:8b:4c:6d:af:4c:ba:fb:f8:
                    91:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:BC:F2:A2:D6:69:22:30:C8:2A:41:C1:D2:B8:FE:F3:32:BA:27:03
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/4a19934680286b96bae84696f8e24d929161ba52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:400f::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:3d:c8:e0:8a:2e:a0:17:0f:0b:d1:74:09:a0:61:e1:34:3f:
         83:8d:ca:ac:83:1b:11:bc:17:ae:2b:4e:d5:82:25:ec:a6:5a:
         93:23:0a:01:39:5e:0e:b8:33:d6:d4:1d:35:d5:3d:ab:00:68:
         13:15:af:28:82:43:8c:6d:b6:2b:e6:4a:f0:02:2c:92:83:42:
         5d:be:a8:36:bd:35:f6:dd:54:01:01:13:75:c7:f5:69:13:42:
         fb:33:1a:3d:c6:a5:01:e3:ce:10:5a:6f:42:b1:35:9d:dc:95:
         73:87:67:8d:a9:aa:a8:04:4a:78:27:ca:db:79:af:7e:a2:28:
         de:43:7f:f8:9d:94:2a:2d:da:de:45:e5:a8:35:b8:13:e2:e7:
         4c:2a:df:93:a0:a6:32:61:6d:70:ef:f3:7e:ea:cc:cc:7c:88:
         df:d8:78:40:e5:fd:6f:31:f3:c8:ac:0c:a9:c4:c5:8a:b2:5f:
         24:20:d8:8f:08:ce:2e:96:6e:69:08:56:4b:c0:92:31:ce:6d:
         9b:00:8f:1c:2a:d6:94:06:26:69:a3:0b:3c:ee:06:a4:01:ed:
         62:49:e5:d0:93:27:a8:6e:6c:42:e9:62:55:d9:e7:39:4e:ca:
         75:dc:02:e7:8d:bb:fb:5a:9c:45:b5:b9:4d:b2:01:b5:79:16:
         38:f2:07:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----