Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/a79d0c1ad7505499d0202efbdf69db71c8c29b42.roa
File:                     a79d0c1ad7505499d0202efbdf69db71c8c29b42.roa (raw, json)
Hash identifier:          j6NA0VNBAs2zsZkIa/wJm2f7p8IFDUoKnt93GgU2o8I=
Subject key identifier:   EF:4F:58:5E:BA:E7:08:E2:58:81:09:4A:F2:AC:A0:85:FA:F3:6D:1B
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DFED3
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/a79d0c1ad7505499d0202efbdf69db71c8c29b42.roa
Signing time:             Wed 24 Mar 2021 14:28:48 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4006::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917203 (0xdfed3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=a79d0c1ad7505499d0202efbdf69db71c8c29b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9f:8a:16:51:25:ec:fb:ca:3d:f4:e9:0d:01:
                    0c:d4:43:ac:8e:40:28:55:97:67:f6:69:c8:e3:3a:
                    1f:63:da:65:c2:64:88:0e:7b:be:f7:07:cc:14:c1:
                    7c:b2:5e:fc:3e:0b:a8:f4:42:4f:24:56:aa:87:ca:
                    22:b3:11:2a:03:7b:d1:77:dc:05:02:6c:0a:e1:02:
                    f2:18:71:24:97:c9:6d:1e:fb:67:5e:32:22:9c:ff:
                    8d:3d:ca:09:16:ae:a5:d3:71:33:b0:b4:b3:0e:b7:
                    fb:4c:7f:ec:28:06:57:01:6a:a5:8c:26:44:5a:5e:
                    83:db:4b:af:be:25:5e:ad:cc:d7:62:7b:29:79:f0:
                    8d:c3:b2:aa:09:9a:9a:85:09:f7:34:97:6a:82:f7:
                    17:12:b6:32:61:27:79:3f:4b:f5:39:d9:70:16:33:
                    c7:bf:62:69:58:71:ce:7a:eb:0b:75:74:6a:33:23:
                    0e:59:47:1f:71:ba:41:d3:88:29:46:02:ca:94:f7:
                    15:f3:ed:47:ce:d5:2e:d5:d7:86:12:fd:79:bb:b3:
                    8f:40:84:81:c4:dd:07:b9:3a:dc:65:dc:92:9a:cd:
                    34:13:da:8b:9b:7a:f6:b6:4e:b6:18:66:06:67:ad:
                    e1:ec:6e:a0:f8:85:1e:88:c7:66:09:fb:b8:0e:bb:
                    d9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:4F:58:5E:BA:E7:08:E2:58:81:09:4A:F2:AC:A0:85:FA:F3:6D:1B
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/a79d0c1ad7505499d0202efbdf69db71c8c29b42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4006::/47

    Signature Algorithm: sha256WithRSAEncryption
         6d:5d:92:0a:07:1a:68:8b:fb:a4:52:a3:78:8f:57:8f:35:60:
         8b:1f:44:3d:9f:8c:d4:5b:58:77:de:ee:1b:38:83:10:66:37:
         41:52:0b:98:2e:8e:5a:4c:4d:b3:c9:82:15:52:d3:03:26:b3:
         75:e7:7f:ac:55:00:88:a1:05:17:23:87:d6:8f:39:78:37:0d:
         36:5e:94:9b:11:fa:50:49:57:b5:27:b6:fb:ee:41:9e:3c:0c:
         d9:54:2b:67:95:e3:d2:d8:0b:f4:be:d2:91:a2:8e:b8:9e:f4:
         69:26:93:16:e0:0f:4f:ff:fd:db:bc:88:5d:5b:5c:82:70:c8:
         6e:9f:af:df:76:b5:45:e8:0f:36:79:5a:4a:d5:34:53:a7:a5:
         ee:48:90:a1:02:7c:07:20:77:ef:1e:9e:91:26:5d:11:4b:12:
         37:25:b7:d9:0a:12:e3:76:15:58:98:f2:5d:a2:5c:e5:72:1f:
         9f:32:c2:b7:0c:12:2c:59:91:63:21:83:72:d3:05:ab:ec:8d:
         39:2e:92:e7:e7:c8:9d:5a:f4:07:ba:8f:9e:2d:80:b3:0c:33:
         8f:14:8c:1e:59:78:ef:9d:ea:48:fd:92:c1:3d:15:68:ad:ca:
         50:fa:65:22:19:5f:4b:41:58:cd:bc:95:72:ce:84:2d:9c:9f:
         00:e3:d0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----