Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/a4687f80438c8d8589caaaec3577b613e8683cd2.roa
File:                     a4687f80438c8d8589caaaec3577b613e8683cd2.roa (raw, json)
Hash identifier:          etuaLt+yv8pf8sq34ON7pCl6mZDcDBCQmpHQxXfDTZ4=
Subject key identifier:   06:70:21:2F:43:A3:D1:62:67:91:20:CC:D3:9D:FC:47:CB:D7:D1:36
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0E1DED
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/a4687f80438c8d8589caaaec3577b613e8683cd2.roa
Signing time:             Wed 24 Mar 2021 14:28:49 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:405e::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 925165 (0xe1ded)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=a4687f80438c8d8589caaaec3577b613e8683cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:0d:f8:77:a3:cf:7d:62:54:80:50:a5:3f:e8:
                    46:b4:39:ca:85:33:f4:fe:c3:e2:12:45:74:0b:ec:
                    0c:7d:7b:ed:20:55:a7:41:39:50:5e:18:44:f4:79:
                    aa:c5:69:f0:aa:82:75:42:89:a7:d4:f7:7b:56:e5:
                    b9:22:3d:a1:55:b5:f2:d8:4e:15:b0:90:f5:b1:96:
                    71:d6:ac:8c:d4:58:3e:bc:c0:38:0c:cd:1e:f6:b1:
                    50:93:ca:8e:d9:56:74:bc:95:c6:b4:58:7c:4a:16:
                    5a:f2:19:fa:39:14:f8:88:67:b3:b5:aa:0b:0a:d0:
                    b4:3a:5a:94:65:8c:47:22:45:e2:aa:f0:91:13:ce:
                    d2:31:cc:89:da:cc:68:b0:eb:42:ff:34:e1:9c:f5:
                    e8:a3:e0:3a:b0:4a:b9:71:3b:24:f1:74:20:da:ef:
                    04:a3:13:fb:d3:20:31:3e:b1:60:fd:c2:6b:2e:64:
                    19:0d:f0:56:46:9f:6a:17:5f:a9:64:f2:75:ec:50:
                    3a:0e:2d:b5:89:e9:82:33:06:6f:10:91:8a:fc:95:
                    a2:ee:01:13:6f:67:04:f0:15:3a:be:68:dd:fd:92:
                    eb:9e:7b:6b:a6:cd:7b:c4:4f:0b:a2:d4:e1:b4:79:
                    83:61:33:00:38:d1:7e:a9:b5:2d:a5:83:6d:2e:86:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:70:21:2F:43:A3:D1:62:67:91:20:CC:D3:9D:FC:47:CB:D7:D1:36
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/a4687f80438c8d8589caaaec3577b613e8683cd2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:405e::/47

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:df:56:95:3c:4b:61:c4:5c:0a:2a:6d:ad:24:31:e5:cc:
         84:49:6d:7d:20:d3:b4:35:d3:18:de:31:61:9d:4b:53:b3:14:
         22:1a:86:d5:b1:9c:15:1f:9c:78:7b:7e:ed:ee:1f:5a:b7:de:
         26:13:9a:ca:59:c2:52:62:4d:ed:a2:a3:50:07:39:ce:6f:a3:
         55:7e:1f:95:6c:3b:74:ea:db:c5:46:9c:78:e2:0d:aa:89:5b:
         b7:eb:7d:54:c5:73:b3:b7:78:35:59:01:88:61:56:9f:ff:79:
         ba:24:18:0b:64:a8:f1:81:43:b6:85:10:9d:13:ba:ed:38:c8:
         88:d5:9a:8b:1a:d5:9e:96:f5:11:9e:3f:9a:6a:ca:d6:31:46:
         73:00:b3:be:12:04:85:3f:f5:84:b1:d6:75:a2:16:41:14:58:
         d1:26:c9:51:12:d2:ea:81:65:b4:16:ff:26:6f:38:49:be:e1:
         6f:b1:02:69:e2:dc:33:d3:f6:8a:14:1c:60:a9:2b:5e:bf:f6:
         c5:d0:bc:62:91:eb:f4:56:92:bf:95:ed:ed:52:50:40:7b:db:
         02:a9:84:ce:13:be:5f:fd:1d:87:7a:c2:b7:5d:de:aa:d2:4e:
         80:98:a1:d9:d9:ab:17:82:d7:00:c8:40:40:3d:ae:6b:52:c9:
         b2:22:12:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----