Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/935514f7c93c4ed775336929f72d7f1fc0d10980.roa
File:                     935514f7c93c4ed775336929f72d7f1fc0d10980.roa (raw, json)
Hash identifier:          olaCcQSRpLE+xOciIC3F6tnSp6p+8sDsNXTRdwDFoDk=
Subject key identifier:   1F:B8:16:12:A4:14:D9:7C:F3:4D:F5:9F:31:AE:CB:80:B7:C4:42:0C
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DCE08
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/935514f7c93c4ed775336929f72d7f1fc0d10980.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 904712 (0xdce08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=935514f7c93c4ed775336929f72d7f1fc0d10980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:58:d2:7b:bf:66:dc:74:10:42:5b:e0:38:
                    32:19:26:7a:03:29:87:2e:39:cc:45:f2:c6:0e:e2:
                    87:59:92:b8:84:f0:20:e5:04:41:bc:5c:c8:4b:fe:
                    a0:15:6a:4b:f1:5f:35:57:0f:d0:19:e7:4f:27:cd:
                    27:6e:d2:3f:db:0b:a6:05:95:0b:de:31:98:be:17:
                    cd:ef:3a:23:58:13:ea:b2:59:01:f9:bd:56:59:98:
                    70:23:54:2f:d1:23:68:f8:5d:e5:5c:0f:4a:58:65:
                    f0:f3:74:cd:1d:8c:b6:d6:61:35:08:b6:4a:7e:70:
                    32:24:93:59:5a:36:73:b7:54:bb:86:7b:c1:3f:72:
                    29:77:ac:50:27:d1:7b:92:9e:db:35:6a:05:9f:c7:
                    91:66:f9:cc:39:09:0d:16:5d:3c:f6:7e:22:83:23:
                    a0:a3:71:b7:94:22:fa:b2:8f:ac:7f:46:00:f3:3f:
                    7a:15:83:20:84:35:9b:01:ce:cf:e5:e4:f7:18:b7:
                    32:fe:b0:5e:cc:f5:36:da:34:40:35:3f:61:0a:50:
                    f8:36:c2:a4:fd:d6:32:8f:54:a2:19:48:b7:57:ad:
                    96:93:06:f4:37:ed:5f:16:b9:b4:9b:c2:4d:34:39:
                    b0:1d:9a:da:a8:36:57:85:1f:8c:11:d8:dc:cf:79:
                    cf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B8:16:12:A4:14:D9:7C:F3:4D:F5:9F:31:AE:CB:80:B7:C4:42:0C
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/935514f7c93c4ed775336929f72d7f1fc0d10980.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4002::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:0b:5b:a1:13:b1:1d:68:ed:15:c1:fb:75:7b:55:5e:7f:86:
         78:2d:67:a8:9c:29:06:1c:13:45:d6:ba:db:8f:46:dc:18:37:
         fd:bc:d0:53:6c:fd:a7:48:ca:51:9b:e6:9e:db:3f:23:13:b7:
         02:51:ce:f1:23:4e:da:57:2a:e6:98:52:b0:fc:1c:16:11:91:
         45:39:2f:d7:10:e1:99:20:8d:04:94:8c:90:92:35:c9:52:ff:
         62:52:c9:54:55:1e:07:22:73:fb:89:f9:27:c3:12:85:91:bd:
         73:e8:7d:60:b8:b8:f6:a3:16:01:bc:94:3b:de:d6:06:00:8f:
         b8:78:2b:de:0b:85:c2:6d:a1:54:ba:21:f1:1c:15:10:80:c2:
         6d:ae:75:cb:0e:b5:f1:62:46:ce:9a:8c:06:8b:98:96:45:d2:
         51:55:4a:49:bf:4c:c2:03:a0:57:f6:59:c0:b2:84:29:d7:45:
         2a:ce:78:5e:51:61:d8:23:2e:ad:c7:5e:ea:61:b4:9e:82:b9:
         30:8a:15:86:d5:37:a9:ff:94:3e:17:50:f9:8c:d9:e7:44:69:
         97:36:ff:e9:a3:b9:cc:6c:72:23:0e:e2:c9:3d:0a:16:7b:84:
         68:ad:56:ef:61:cb:26:47:0e:cc:27:e0:1b:fa:e8:e4:0b:7c:
         52:5f:99:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----