Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/6beef25212776fd0ba391e7fc5a4f631f87cbac6.roa
File:                     6beef25212776fd0ba391e7fc5a4f631f87cbac6.roa (raw, json)
Hash identifier:          RbxkHzUaNtPJOKHJdHQqk4brHypWI4udgl/PbyoNJxk=
Subject key identifier:   8C:4B:84:1A:B2:99:84:B1:65:01:4A:B4:F7:DD:F2:C8:4E:9B:B3:75
Certificate issuer:       /CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
Certificate serial:       0101BC
Authority key identifier: D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/6beef25212776fd0ba391e7fc5a4f631f87cbac6.roa
Signing time:             Mon 01 Nov 2021 21:50:20 +0000
ROA not before:           Mon 01 Nov 2021 03:00:00 +0000
ROA not after:            Sun 01 Nov 2026 03:00:00 +0000
asID:                     267689
IP address blocks:        2803:1a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 65980 (0x101bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41
        Validity
            Not Before: Nov  1 03:00:00 2021 GMT
            Not After : Nov  1 03:00:00 2026 GMT
        Subject: CN=6beef25212776fd0ba391e7fc5a4f631f87cbac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:56:94:13:f2:39:9d:1c:98:63:00:71:93:f0:
                    f3:10:ba:b5:e5:06:28:58:a0:fd:ec:4b:e1:2f:d3:
                    3e:5c:d7:03:b4:fc:62:8b:6c:d3:0b:d3:c8:07:45:
                    53:ac:2b:60:58:dd:7e:68:be:8b:3c:91:c3:f8:21:
                    8d:dd:51:50:cc:87:e3:9b:81:13:8e:24:95:b0:82:
                    ad:48:33:2d:c0:02:42:5c:12:5f:b4:de:f4:ce:b6:
                    90:88:fd:39:89:8d:07:72:01:7f:db:c6:bd:a9:5a:
                    4b:96:73:a2:76:f6:a7:61:77:b0:3b:78:dd:25:ee:
                    e1:4e:73:50:cc:b4:bb:42:0c:63:36:4b:c0:c4:7c:
                    5b:d6:ba:89:d3:b7:90:72:12:42:91:cb:97:22:5b:
                    97:ac:10:d1:01:a8:08:50:b2:87:94:17:d8:ea:7e:
                    3d:db:ab:54:84:89:05:90:30:48:ec:af:b1:8e:f0:
                    28:41:ec:ff:1d:3c:bd:88:a8:fc:0d:a7:94:d6:bd:
                    15:0b:a5:19:10:32:4d:44:01:c7:7d:9a:dc:4a:eb:
                    af:0e:08:cf:7f:7a:b5:48:0d:c5:ae:06:0e:0f:8a:
                    5d:cc:61:ba:48:6a:44:38:40:54:df:67:b0:e8:38:
                    fe:a0:81:45:d9:5d:62:3e:c9:90:52:54:cb:d6:9e:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4B:84:1A:B2:99:84:B1:65:01:4A:B4:F7:DD:F2:C8:4E:9B:B3:75
            X509v3 Authority Key Identifier:
                keyid:D9:6D:D2:B7:71:67:C2:1F:92:DE:02:EE:86:61:3D:1D:C7:99:1B:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/6beef25212776fd0ba391e7fc5a4f631f87cbac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df5ce020-a0af-4e15-8905-3ed4e73670a1/dce0c8e8f0ae7604b42eaed64a0f996cf82a4b41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:0a:68:27:81:95:2b:6b:7a:03:ff:7f:cd:20:b9:70:66:83:
         1c:11:26:d0:09:c4:0a:69:24:29:3d:03:15:4e:1f:fe:12:81:
         01:24:df:f7:ee:b5:12:74:62:90:45:c9:3d:78:81:b6:4c:cd:
         d5:af:81:c4:d1:2d:c9:dc:e0:b9:51:c4:e9:3c:00:7c:88:86:
         7f:4b:41:c8:8e:76:23:bc:02:90:41:63:40:b6:20:6d:a8:b2:
         59:c5:35:93:2d:2e:e5:d4:d8:af:6b:3a:6a:56:82:46:eb:36:
         ec:84:1e:bc:da:b8:a5:b6:cd:39:ed:a7:09:c9:56:cc:59:17:
         8e:ce:18:52:06:2b:a4:e7:00:ea:d1:1d:b7:7d:4d:b0:52:4d:
         d4:e2:c0:8f:a4:bb:e6:cc:a2:49:de:3e:32:40:98:75:ec:4d:
         8a:2c:84:bb:9f:db:60:43:72:20:65:7f:e1:69:e4:54:04:47:
         35:48:99:bb:bc:e8:ce:54:cc:f6:ba:bc:8c:25:96:55:9f:6c:
         39:12:ed:db:70:f7:42:ae:6d:a9:86:b1:4f:d9:1b:70:98:4e:
         68:ba:d5:3e:5a:62:b2:d8:4e:0f:3a:14:ae:f6:32:60:ca:04:
         f4:df:27:d3:21:6c:e3:d8:fc:57:66:70:af:b7:5a:14:9a:3f:
         99:bf:73:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----