Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dda12001-8cca-436f-b674-941354406abe/fc1e423b9bf88f4d2fd55025faf5ea6605a3f7bc.roa
File:                     fc1e423b9bf88f4d2fd55025faf5ea6605a3f7bc.roa (raw, json)
Hash identifier:          OBIuquDNnXZv1SBZ3oG0HCpIjR/WM7u1NlJcFWTzqmY=
Subject key identifier:   9E:12:44:5D:DD:BC:FA:DD:C6:25:05:FA:20:2B:5A:1F:8A:5C:DE:A0
Certificate issuer:       /CN=e35dc36dd70b890fdb4c9484c3c7d1ea19270c7c
Certificate serial:       01F000
Authority key identifier: 20:8F:5D:DE:6C:74:82:16:3E:01:FD:A7:1C:E7:61:99:35:28:60:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e35dc36dd70b890fdb4c9484c3c7d1ea19270c7c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dda12001-8cca-436f-b674-941354406abe/fc1e423b9bf88f4d2fd55025faf5ea6605a3f7bc.roa
Signing time:             Sun 21 Nov 2021 19:30:42 +0000
ROA not before:           Sun 21 Nov 2021 03:00:00 +0000
ROA not after:            Tue 21 Nov 2023 03:00:00 +0000
asID:                     271951
IP address blocks:        2803:3610::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126976 (0x1f000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e35dc36dd70b890fdb4c9484c3c7d1ea19270c7c
        Validity
            Not Before: Nov 21 03:00:00 2021 GMT
            Not After : Nov 21 03:00:00 2023 GMT
        Subject: CN=fc1e423b9bf88f4d2fd55025faf5ea6605a3f7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:95:16:05:71:b3:e9:76:5d:d8:0d:54:76:
                    73:a2:95:75:e6:ab:cd:4d:e1:9a:6b:50:69:f7:64:
                    12:e7:00:0d:39:a0:2b:26:9a:32:f6:52:52:51:25:
                    ca:2b:7c:ad:be:21:c4:99:a4:06:c8:e5:d0:be:a7:
                    7f:97:31:b8:28:7f:8a:b8:93:9b:9a:6f:fc:e3:be:
                    0d:56:d9:6f:e6:48:9b:67:a5:22:34:cc:b3:1a:f9:
                    4a:9c:6f:12:3e:3f:14:32:51:3c:c9:3b:c7:e3:4c:
                    4c:28:f3:6c:d9:d3:8f:a9:21:63:dc:6f:0e:a6:59:
                    07:f1:8e:e0:f9:d2:02:74:26:ff:c6:c0:e9:6d:cd:
                    34:32:f0:29:b2:17:46:52:26:22:a1:16:36:8e:89:
                    65:35:e3:e0:02:45:3a:9d:26:87:77:ec:d0:c6:46:
                    17:96:4c:af:05:1a:1e:63:cc:03:30:1a:2d:58:b4:
                    82:53:77:59:b9:bc:f2:68:1e:f6:d8:70:15:26:a7:
                    1f:69:c1:77:6e:a6:35:cb:98:9a:65:39:61:0a:07:
                    1b:ef:0b:53:fa:3a:7a:6b:18:68:3e:97:a2:43:cd:
                    5f:5f:da:b8:27:53:ec:81:55:23:da:7d:19:55:14:
                    15:29:53:7c:01:c2:cb:51:90:52:ef:23:cb:ce:31:
                    d1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:12:44:5D:DD:BC:FA:DD:C6:25:05:FA:20:2B:5A:1F:8A:5C:DE:A0
            X509v3 Authority Key Identifier:
                keyid:20:8F:5D:DE:6C:74:82:16:3E:01:FD:A7:1C:E7:61:99:35:28:60:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e35dc36dd70b890fdb4c9484c3c7d1ea19270c7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dda12001-8cca-436f-b674-941354406abe/fc1e423b9bf88f4d2fd55025faf5ea6605a3f7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dda12001-8cca-436f-b674-941354406abe/e35dc36dd70b890fdb4c9484c3c7d1ea19270c7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3610::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:d3:28:1a:01:a6:ed:1d:7e:88:7f:69:4a:24:59:6d:e7:46:
         b0:03:f8:e7:b0:2b:73:f6:b2:0a:34:f2:fc:c7:1f:86:c9:8f:
         bd:b7:1c:d8:1f:b5:35:ec:15:46:64:ea:d1:35:18:4f:76:d0:
         ad:40:ba:2c:1d:a8:ea:30:9f:3b:40:ca:e6:6e:cb:88:05:39:
         a7:cc:07:40:01:e6:e8:5b:fc:56:68:ed:ea:dd:e6:05:18:eb:
         6d:6a:b4:39:4c:40:22:52:38:92:90:59:2a:82:ec:99:c1:64:
         00:4c:c0:cb:0d:75:f6:ec:68:17:92:1f:87:81:05:37:37:0c:
         e0:e9:75:8b:ac:99:35:97:37:6d:88:0a:0d:5c:52:0a:9f:d2:
         66:ac:06:35:97:0e:c4:9c:e3:a3:53:4d:56:54:ed:4c:73:7f:
         3b:0e:d7:90:af:02:75:11:41:9d:c3:bc:a3:16:31:22:b8:34:
         83:44:b3:86:9c:65:c6:21:b9:43:a7:d4:5a:30:27:53:be:7b:
         0e:c0:cc:82:54:80:34:a1:5e:5e:0c:90:2e:bc:b0:aa:98:67:
         f2:ed:0b:af:de:a4:08:fc:4a:81:21:76:d7:85:e1:38:f6:eb:
         55:38:60:50:59:5e:60:46:62:ce:8b:db:5d:bb:51:89:73:33:
         f2:47:e7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----