Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/f31c4d74a89fd9d2d8cdfe455c624b944acaacdb.roa
File:                     f31c4d74a89fd9d2d8cdfe455c624b944acaacdb.roa (raw, json)
Hash identifier:          qGNMUbVdf5PUxz6JUT2qFGq49XaJD1qCWhgLNOUfVFA=
Subject key identifier:   5F:16:01:25:53:4D:02:E2:9D:34:38:E1:32:DE:E9:0B:15:C3:64:7E
Certificate issuer:       /CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
Certificate serial:       0DC769
Authority key identifier: 3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/f31c4d74a89fd9d2d8cdfe455c624b944acaacdb.roa
Signing time:             Wed 24 Mar 2021 14:28:47 +0000
ROA not before:           Wed 24 Mar 2021 14:28:44 +0000
ROA not after:            Tue 24 Mar 2026 14:28:44 +0000
asID:                     3573
IP address blocks:        2801:1f0:4014::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903017 (0xdc769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f89b5c8084a0939dc8e220f4e102cdcf33e2ac
        Validity
            Not Before: Mar 24 14:28:44 2021 GMT
            Not After : Mar 24 14:28:44 2026 GMT
        Subject: CN=f31c4d74a89fd9d2d8cdfe455c624b944acaacdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:17:f0:cf:35:de:2b:af:25:69:9b:0d:0b:69:
                    78:96:f3:f8:20:26:db:3c:10:27:bf:1b:17:44:f9:
                    c7:f7:55:b5:94:c6:30:33:9a:84:e4:9a:0d:de:8e:
                    1d:bb:ad:3b:8d:7c:7c:1b:63:c2:c1:26:71:94:91:
                    3c:c7:1c:ec:16:55:3f:36:8f:f4:75:0e:8a:13:52:
                    35:aa:30:2a:d6:f2:c7:32:3a:5a:be:32:e5:df:c4:
                    c4:af:3c:66:51:f9:84:b3:39:4d:f6:46:33:f1:77:
                    14:d8:ad:a5:94:14:b5:1c:39:43:c6:e7:a3:e8:b3:
                    3f:3a:c4:20:03:ab:be:38:d2:f6:bc:d4:29:19:0d:
                    85:e4:a5:70:b0:49:2a:67:b8:8f:a1:1e:0a:47:bf:
                    9b:bc:fa:83:b5:7d:66:4f:54:5a:8e:56:c8:42:b3:
                    34:d6:11:02:c3:39:f4:8c:85:54:77:11:44:6a:77:
                    ff:2d:7d:ef:30:a1:85:01:25:e3:fc:fe:e6:43:8f:
                    6e:c2:a4:ac:17:81:d9:eb:07:a5:b4:52:eb:0f:3e:
                    22:9b:32:4c:a6:c5:4e:10:88:32:fd:fa:c4:10:81:
                    c9:2c:6b:c7:90:b0:bb:63:c4:55:1f:55:3d:2e:45:
                    d4:4e:59:c4:4e:8e:41:d5:0f:c2:de:55:9c:db:9f:
                    b1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:16:01:25:53:4D:02:E2:9D:34:38:E1:32:DE:E9:0B:15:C3:64:7E
            X509v3 Authority Key Identifier:
                keyid:3B:B5:15:11:30:2B:8B:9A:9A:1A:27:29:C3:76:31:BB:81:BE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/f31c4d74a89fd9d2d8cdfe455c624b944acaacdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dc2457a9-f5b0-4f30-b92b-e4c57a9c812f/61f89b5c8084a0939dc8e220f4e102cdcf33e2ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4014::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:51:28:27:df:1a:66:9b:d5:79:3d:c4:9c:3c:99:77:a7:6c:
         44:c9:0c:a2:75:e4:90:e7:ac:ac:37:2c:2b:f3:c4:35:fe:19:
         45:6b:cb:c6:2c:1a:34:30:78:5b:13:a1:41:98:a7:17:eb:03:
         9f:46:36:14:f5:4c:07:c7:95:f3:c7:d1:47:2b:f0:18:20:9f:
         70:9d:f3:f1:b5:c9:65:09:19:89:80:2b:0f:f4:dc:0b:2c:71:
         f8:ec:8c:80:73:e2:56:e8:c4:73:3b:35:e3:34:f5:ea:84:e8:
         f8:1f:d3:b8:61:77:3d:08:4d:f1:da:24:25:b4:88:78:be:12:
         0d:2a:07:be:f7:b2:87:11:53:ca:9e:25:b7:a9:75:88:51:b9:
         86:3d:b9:4f:4c:1a:d5:0c:37:87:4c:1a:b6:c3:9f:6d:4f:89:
         1d:27:d3:52:cf:64:a6:e9:5c:3f:fd:45:fd:0a:45:c2:da:9e:
         7a:df:5c:02:42:b6:87:e3:34:0a:55:7d:9a:93:ec:b0:f6:e0:
         85:76:31:27:45:87:ff:dc:11:d6:67:5b:df:c7:91:8b:dc:20:
         cf:0f:b0:9d:63:29:9d:9a:93:00:57:22:06:93:20:29:9b:98:
         2d:63:cb:1b:87:2a:57:07:a8:f2:a3:a5:e7:8c:67:e5:7a:3d:
         57:1b:44:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----