Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/86dbd1fcb53940559ebc6e69ac14c9993c4364c0.roa
File:                     86dbd1fcb53940559ebc6e69ac14c9993c4364c0.roa (raw, json)
Hash identifier:          7H1owmEVOTnR1nZ8HZgbboY+PwtyHW797xpiFjyqiHY=
Subject key identifier:   0B:6A:2C:42:63:08:16:1E:92:47:B4:65:8A:90:B2:21:C9:34:53:4B
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DB870
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/86dbd1fcb53940559ebc6e69ac14c9993c4364c0.roa
Signing time:             Wed 24 Mar 2021 14:28:46 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4023::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 899184 (0xdb870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=86dbd1fcb53940559ebc6e69ac14c9993c4364c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:37:09:a7:a2:01:be:7e:c4:89:87:d4:c5:88:
                    3e:96:77:cd:ae:94:66:55:95:66:64:96:d4:dc:7d:
                    77:7a:43:10:be:4a:08:71:dc:d2:3f:2d:3f:0f:88:
                    b9:c9:a2:d4:dd:e5:b4:a2:f3:4a:f1:4f:bc:a8:f5:
                    e8:87:15:77:44:59:fd:1f:da:31:53:91:f1:e5:4b:
                    48:72:e3:b8:e1:49:2e:8f:a7:21:dc:e3:e4:84:5f:
                    e1:c4:31:ab:55:eb:cc:db:f9:27:d4:3b:05:75:75:
                    f7:1d:aa:fb:be:bf:a4:0e:48:3b:43:00:db:bf:36:
                    54:1a:c9:38:ab:05:51:c4:00:6e:89:29:e3:b6:8e:
                    91:6c:8f:b8:74:dd:a0:7e:15:12:97:85:2c:aa:d4:
                    2a:21:15:70:7a:ec:b5:53:e4:f4:ab:04:f9:bd:a9:
                    9e:44:dd:da:86:71:57:bc:93:d4:bf:c0:ff:93:e7:
                    2a:d1:a1:46:17:04:75:7f:4d:da:ee:bb:1e:d3:77:
                    f1:67:13:1a:c4:d5:47:01:25:e0:25:c6:41:8f:df:
                    9f:05:34:54:b9:c2:da:ba:2a:f9:f5:a5:83:23:18:
                    17:cb:a6:2b:86:df:4f:5a:6d:79:f1:d7:ea:09:cd:
                    d0:3f:6b:11:7e:55:c3:f2:d3:5a:90:bf:b0:4a:ab:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6A:2C:42:63:08:16:1E:92:47:B4:65:8A:90:B2:21:C9:34:53:4B
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/86dbd1fcb53940559ebc6e69ac14c9993c4364c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4023::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:94:7e:67:8d:8c:8a:d0:a7:d8:e3:b1:ca:e5:41:90:d0:a3:
         15:ca:e8:9e:f6:a7:38:18:36:07:ac:d0:7d:4b:89:c4:53:52:
         74:99:16:3e:32:9c:8f:e2:7b:a7:cd:84:88:54:f9:64:e2:a6:
         18:62:b2:44:91:be:90:75:eb:77:35:58:e8:cf:d8:a5:c3:7d:
         b7:b2:02:fd:a3:d8:86:68:91:e6:6f:0a:cd:ed:25:79:03:ba:
         09:11:36:3e:8c:67:a6:f7:43:94:3c:b5:ac:f9:85:f5:36:5b:
         26:dc:fe:23:e8:25:08:99:36:51:ec:06:a2:8f:71:c4:43:51:
         f0:25:a0:cb:d6:ab:13:a8:5b:04:4e:0a:f5:d9:4b:85:77:11:
         d5:84:57:c3:a8:31:5e:e8:ba:0b:2d:8b:c3:f9:91:bc:15:f6:
         ff:cf:af:fd:29:39:fc:8d:80:ee:a3:97:a8:21:fe:92:42:b3:
         26:1f:e3:53:03:22:4c:69:45:b3:d1:c5:12:1a:a1:e5:99:fd:
         49:cc:b0:62:a6:14:30:96:64:b9:df:e3:12:36:55:60:31:80:
         12:9f:74:38:04:43:c4:2e:ff:43:d9:6b:f9:3f:cf:9c:47:b1:
         bb:6b:39:fe:c2:f2:e6:9b:b1:c8:85:48:cf:e3:2e:22:93:73:
         a0:35:dd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----