Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/5d227b35ec373ca0c6c986fba7370655ca057038.roa
File:                     5d227b35ec373ca0c6c986fba7370655ca057038.roa (raw, json)
Hash identifier:          3CeHTu5+JiruTxFsROwHEiQ/lkHq+eXY5WF6XSfkMVw=
Subject key identifier:   22:65:F1:6C:27:A6:5F:90:D0:44:8C:C5:03:2C:71:96:C6:91:43:FC
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DF69D
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/5d227b35ec373ca0c6c986fba7370655ca057038.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915101 (0xdf69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=5d227b35ec373ca0c6c986fba7370655ca057038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:fc:6f:a1:6f:7f:4e:7d:d8:f1:a8:35:e1:
                    88:f9:89:03:d0:e6:e1:2e:33:33:bb:26:77:e2:30:
                    5c:d6:cb:ab:f9:9a:1d:63:e1:bd:17:a6:bd:25:18:
                    bd:7c:c1:fb:84:bb:af:46:0b:0f:08:49:89:58:74:
                    24:f9:30:6e:33:1c:6e:33:a8:20:50:13:e3:f5:ad:
                    f4:9c:c3:c2:1a:65:03:90:3f:99:83:99:2e:e2:30:
                    12:84:16:cf:74:6f:b8:68:9d:8b:64:b6:81:9d:04:
                    b6:9e:30:0b:29:72:85:9d:9f:88:4d:f7:69:1e:16:
                    62:49:63:14:18:5d:49:7d:d3:05:a5:92:fa:67:cc:
                    1f:26:d5:e8:c3:00:2a:b7:47:5d:bb:25:7b:43:c6:
                    f5:6e:17:58:11:6c:e7:b5:9e:90:eb:b6:bb:3c:d6:
                    02:31:76:bf:d1:dd:fc:de:de:94:07:04:07:08:0e:
                    a3:80:67:66:ed:6f:a8:ae:4e:19:02:a6:8b:7d:80:
                    de:41:2d:03:92:25:87:02:b3:5b:ef:17:43:4b:a7:
                    5d:f1:cc:e5:16:45:01:ed:50:2b:a8:7a:5a:19:51:
                    f6:dd:bf:10:25:72:6d:ed:8f:8c:2b:20:e9:3f:78:
                    50:bf:27:a8:f7:04:89:dd:09:6f:76:7d:50:e0:6e:
                    26:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:F1:6C:27:A6:5F:90:D0:44:8C:C5:03:2C:71:96:C6:91:43:FC
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/5d227b35ec373ca0c6c986fba7370655ca057038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4005::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:eb:8e:b9:69:dc:c1:0c:ae:b8:5d:4d:62:f3:75:f6:08:c8:
         00:85:98:d1:21:f7:56:92:ef:cd:d8:e8:9f:7e:84:8c:6a:4c:
         61:33:2b:83:f6:96:00:fa:53:72:4b:64:5b:c1:74:98:e0:ba:
         3a:fe:14:75:38:d2:fd:92:f6:df:39:36:6a:9a:db:24:59:b8:
         ba:8e:07:8e:fc:ca:f3:66:51:19:ff:a4:3f:07:84:91:b4:91:
         70:d9:20:fe:4d:2f:e0:d9:50:3e:4d:4c:d6:47:60:1f:da:61:
         92:73:8c:61:57:fa:c2:4a:82:eb:5e:85:62:2e:b9:c8:60:2b:
         ea:b5:5f:2c:38:88:84:2f:52:e5:a4:0c:00:d4:24:d2:f2:ca:
         ae:5d:94:9e:3f:cb:2f:a8:4e:73:50:9e:0f:c5:72:7b:ff:5c:
         21:ee:85:07:20:b1:96:f6:88:73:a7:7a:52:22:9d:f5:0b:6d:
         57:d7:0a:58:f5:f0:ed:9f:3c:af:83:75:84:f8:c8:ed:5a:21:
         e1:44:9e:93:4a:66:49:9f:61:12:4d:5b:4b:39:24:00:2a:06:
         a5:fd:67:3c:e8:f7:90:d5:ed:77:f8:9c:2a:86:40:c9:bb:6d:
         30:4c:a9:94:6f:3d:e7:b5:f0:16:1e:47:90:bc:0a:a2:c0:5f:
         7e:92:d8:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----