Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/ad8174b4b2a9ddc011a9ecf23aab5f4b9e7bde46.roa
File:                     ad8174b4b2a9ddc011a9ecf23aab5f4b9e7bde46.roa (raw, json)
Hash identifier:          G5mdjrF/vW/R0L1Wy4yAU+DjmaTByPDrgysxIgC3qwc=
Subject key identifier:   CF:BB:7D:7C:E3:3E:63:42:CF:CC:D0:0F:52:BC:3A:3D:04:D4:DE:C1
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DD4EC
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/ad8174b4b2a9ddc011a9ecf23aab5f4b9e7bde46.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4008::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906476 (0xdd4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=ad8174b4b2a9ddc011a9ecf23aab5f4b9e7bde46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:02:c3:91:b0:56:cb:06:32:74:f3:49:7d:d1:
                    b6:13:03:cb:c1:da:a3:ae:87:1b:84:e9:76:dd:e0:
                    53:d1:7d:9c:16:d0:c3:9b:c1:01:6b:0e:89:b2:3b:
                    32:28:68:a7:2a:81:50:dd:54:72:f7:29:39:87:28:
                    1f:24:1f:6a:c5:10:52:78:be:b5:d7:23:8b:1d:7d:
                    2d:8e:79:09:94:44:a2:b6:71:65:98:f0:71:40:91:
                    67:73:08:6e:e3:15:5e:25:71:47:ff:97:2d:8f:e7:
                    11:11:a9:c2:80:95:8a:57:90:a5:4b:c2:a2:3d:55:
                    e3:01:d6:90:55:68:ac:72:f1:13:c2:02:c1:9a:23:
                    6d:05:87:fd:e0:ca:1e:ca:00:f7:22:b6:a2:00:94:
                    1e:80:f2:d2:0a:f6:9b:b8:ed:37:a9:3e:d5:92:be:
                    56:b0:a4:9d:98:df:1e:bf:d0:b0:98:d8:4f:8d:5a:
                    de:5c:0a:e2:f2:35:d4:77:6b:36:17:69:73:c8:dd:
                    da:70:dd:23:91:f0:55:4e:80:a9:34:ce:8c:99:65:
                    c2:78:95:91:6f:e8:a3:76:b6:99:3d:81:95:b7:f1:
                    09:4a:20:ea:48:9d:40:9c:67:aa:30:7f:89:49:0d:
                    b2:02:11:ed:1e:72:03:04:03:18:7c:b8:96:95:80:
                    dd:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BB:7D:7C:E3:3E:63:42:CF:CC:D0:0F:52:BC:3A:3D:04:D4:DE:C1
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/ad8174b4b2a9ddc011a9ecf23aab5f4b9e7bde46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4008::/47

    Signature Algorithm: sha256WithRSAEncryption
         76:c3:70:a9:80:fc:98:5c:2a:32:49:97:32:95:e3:34:06:ce:
         f2:30:b2:e9:3c:56:09:9d:42:4a:5a:a7:33:de:f4:8f:9d:cb:
         59:b2:bf:5e:4e:e9:43:84:a3:e0:98:c6:f1:de:cb:dd:7b:75:
         bb:4a:72:e4:2d:0d:b0:ac:fb:f7:2a:cb:13:f2:3f:7a:44:d0:
         c8:40:03:ca:4b:7e:cf:4b:3c:51:90:b5:12:29:e2:3a:86:8d:
         37:10:24:66:d1:0c:6c:35:e0:59:01:89:8c:d7:94:3d:1c:78:
         f9:38:2a:3d:eb:c5:27:dd:65:7b:ab:7f:e9:9d:c4:77:7a:14:
         62:ad:29:b5:dc:18:39:66:dc:35:b9:0f:5a:88:2a:77:02:00:
         92:45:5f:d7:a5:43:e3:4a:73:2b:9f:ae:cc:cf:8f:60:ed:29:
         95:e6:b4:ad:36:00:d0:23:16:a1:41:be:e6:90:cc:bb:2b:bb:
         1e:b9:18:32:22:9b:6b:e2:5d:11:16:7e:77:67:55:cf:f5:5c:
         58:98:7d:88:a4:06:1f:52:05:fd:ba:ec:b9:85:c7:b8:69:88:
         de:9d:74:54:b1:70:d1:2d:38:ff:17:f7:7e:8e:49:7c:88:5e:
         cb:a5:e1:4e:88:0d:8d:45:f7:a3:c4:7c:0d:29:69:a0:91:c7:
         97:0c:6d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----