Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/d86789fec2cfda0dbf44c68f0e29ece83fd4ebd4.roa
File:                     d86789fec2cfda0dbf44c68f0e29ece83fd4ebd4.roa (raw, json)
Hash identifier:          Q0Y0+4X2lL9hcJ/4HqpZq5qof7G8Tcsomlryb8soW2E=
Subject key identifier:   3D:B8:8D:3E:25:16:F4:E8:C9:06:74:33:B5:D9:51:00:DD:03:2D:6F
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DDE8A
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/d86789fec2cfda0dbf44c68f0e29ece83fd4ebd4.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:405c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908938 (0xdde8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=d86789fec2cfda0dbf44c68f0e29ece83fd4ebd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:29:9a:c5:5d:66:3a:a9:2e:3f:14:4d:88:9f:
                    81:e6:5f:6c:53:b8:af:f4:01:65:f6:8c:cb:1c:c3:
                    8d:4a:86:6a:7c:8f:81:0a:00:9d:b5:ef:0f:7c:1f:
                    f0:ee:a6:24:48:2a:3d:5d:ae:d3:ca:5c:d4:44:e0:
                    8c:45:58:6d:6a:6e:99:12:56:70:27:4d:60:d2:f5:
                    1a:f8:35:c7:da:0e:c4:e7:d9:2c:1d:6c:36:83:d3:
                    46:be:d0:bf:6e:e7:96:a5:87:1e:b3:42:db:27:11:
                    04:35:f9:d2:72:e4:60:e3:0a:79:0c:0e:7a:6f:c2:
                    5d:58:a9:07:3a:6c:c6:a1:40:8b:aa:6a:02:32:ae:
                    b5:b6:5f:7d:78:6e:aa:6a:a3:45:e9:c2:51:9b:e1:
                    16:1e:48:12:d7:cb:be:44:1a:d0:7b:c9:ab:2f:1e:
                    87:5a:3c:0d:7a:6f:9b:ad:74:f7:47:9a:d9:c2:cb:
                    bf:2f:38:e7:92:2f:b0:ce:6d:8d:4b:91:7a:5e:c9:
                    e1:8c:ca:99:05:31:c3:13:6a:16:b3:c7:b9:24:4c:
                    b2:6f:08:e0:8d:1f:79:bf:51:98:f4:25:cf:64:17:
                    7d:1f:8c:0f:f1:f9:4b:40:07:ac:1d:85:93:a8:3d:
                    de:57:fb:ed:f9:df:a8:46:63:0e:1c:1b:4a:36:50:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B8:8D:3E:25:16:F4:E8:C9:06:74:33:B5:D9:51:00:DD:03:2D:6F
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/d86789fec2cfda0dbf44c68f0e29ece83fd4ebd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:405c::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:f2:7e:20:4b:e2:16:84:ab:27:3c:bf:ea:37:5c:37:29:80:
         bc:a3:a7:90:9a:ae:14:c9:48:c5:d7:87:e9:4c:85:94:bc:26:
         0b:e2:ac:8b:70:06:e2:5b:26:a2:5c:ef:e1:e2:92:c0:fd:5c:
         5b:92:82:70:21:50:a7:96:ac:cc:4f:b7:d3:a8:33:e9:b4:5a:
         0d:bf:58:72:dd:5e:08:07:7e:d8:b7:f3:d0:4c:07:a8:d2:27:
         3d:9d:4f:96:19:df:fe:79:4c:51:95:1d:60:ff:ff:3d:ad:1d:
         2b:87:67:77:54:53:49:7d:50:be:a1:32:09:69:c9:e8:ea:d0:
         fb:a5:2b:a4:7c:2a:6c:36:31:8f:76:4f:40:df:d2:bd:0f:36:
         3e:1c:be:54:3d:d9:55:19:3f:f3:8b:a6:54:64:e3:f2:0a:a9:
         2d:65:7a:ca:98:80:5b:37:a9:b7:3f:be:1e:71:01:26:c1:e3:
         b3:14:18:f3:3b:cd:b9:43:aa:93:a2:41:6e:53:60:f6:a0:05:
         f6:d1:e0:88:99:21:2c:96:5a:63:5f:cb:b9:e1:42:97:a2:cb:
         34:c5:d4:21:bd:70:ad:5e:c4:a6:d5:20:3e:23:8b:be:0b:90:
         46:7f:18:94:a3:85:2d:a5:6b:26:aa:b0:a8:20:c7:fe:0a:d5:
         de:d1:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----