Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e28e72aa-0949-45fc-beaf-65e120218846/9f65c89a0dd948eab6e817c890b8d2a27f5b0044.roa
File:                     9f65c89a0dd948eab6e817c890b8d2a27f5b0044.roa (raw, json)
Hash identifier:          meL09an4HGC5NycE4iEPycBwnVdht28LMLizAS+Y3CI=
Subject key identifier:   56:76:8B:47:F2:64:EA:9A:42:7C:F9:A4:34:1B:AB:33:B7:E7:E3:B5
Certificate issuer:       /CN=0bbdc95d39e670a4cf162ecb090ca3079994fef5
Certificate serial:       0A438F
Authority key identifier: 2D:0A:F6:7C:CB:EB:60:7D:CC:23:46:9F:B6:E1:26:4B:DA:33:57:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bbdc95d39e670a4cf162ecb090ca3079994fef5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e28e72aa-0949-45fc-beaf-65e120218846/9f65c89a0dd948eab6e817c890b8d2a27f5b0044.roa
Signing time:             Wed 24 Mar 2021 14:31:28 +0000
ROA not before:           Wed 24 Mar 2021 14:31:28 +0000
ROA not after:            Tue 24 Mar 2026 14:31:28 +0000
asID:                     269890
IP address blocks:        2803:e4e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672655 (0xa438f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bbdc95d39e670a4cf162ecb090ca3079994fef5
        Validity
            Not Before: Mar 24 14:31:28 2021 GMT
            Not After : Mar 24 14:31:28 2026 GMT
        Subject: CN=9f65c89a0dd948eab6e817c890b8d2a27f5b0044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6b:28:41:1c:d1:02:ff:ee:38:db:3c:ee:01:
                    6f:ae:d8:6e:2d:26:52:26:6b:0c:66:9e:c0:28:48:
                    71:4d:02:dd:dc:a3:f3:4c:a1:9d:9f:28:86:50:10:
                    c1:23:56:c3:a5:66:02:95:90:65:b2:03:f7:e0:0f:
                    e2:2c:8c:b0:53:38:db:24:d9:04:ff:66:37:d8:b6:
                    79:ba:54:7c:7c:5e:44:89:68:d9:3c:fb:3b:e4:f7:
                    4b:29:2d:79:f9:ef:bf:30:79:01:4e:80:f8:93:8f:
                    47:9d:95:44:ef:ea:9f:b7:0b:4a:72:14:a5:e6:33:
                    24:bb:88:24:32:c2:36:70:f3:44:62:28:c8:d1:19:
                    68:f7:a1:d1:fc:38:e1:22:59:78:b4:af:4f:6d:60:
                    40:4b:64:31:25:d6:b5:cd:0f:02:9a:33:0f:67:0f:
                    54:67:0c:17:23:93:02:f8:dc:01:36:9d:ba:41:1f:
                    ce:b6:59:d9:b5:d6:91:0d:e7:a4:9d:6c:e1:99:d4:
                    b1:06:94:29:28:f8:f0:75:76:50:e0:19:3b:84:30:
                    71:31:4f:46:0c:d8:9a:93:ae:e9:f2:b4:26:89:f6:
                    1b:e5:2e:27:bc:c0:89:5e:1b:14:3b:8b:30:75:3a:
                    64:22:61:2d:28:39:cf:9b:45:55:6e:71:5f:76:9a:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:76:8B:47:F2:64:EA:9A:42:7C:F9:A4:34:1B:AB:33:B7:E7:E3:B5
            X509v3 Authority Key Identifier:
                keyid:2D:0A:F6:7C:CB:EB:60:7D:CC:23:46:9F:B6:E1:26:4B:DA:33:57:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bbdc95d39e670a4cf162ecb090ca3079994fef5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e28e72aa-0949-45fc-beaf-65e120218846/9f65c89a0dd948eab6e817c890b8d2a27f5b0044.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e28e72aa-0949-45fc-beaf-65e120218846/0bbdc95d39e670a4cf162ecb090ca3079994fef5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:4e:d9:45:7a:f9:50:2c:23:5f:f5:e8:99:79:a8:3d:b7:7d:
         4c:4c:90:1e:fa:47:ef:8a:d4:97:83:a1:40:e7:db:67:40:a6:
         7b:04:25:75:e6:6c:02:f0:44:ad:5c:ba:3c:1f:57:0d:16:7b:
         5a:c8:ad:ce:9a:f1:0e:ee:67:ff:0b:f2:4f:7b:c5:06:60:68:
         9c:fd:d6:94:3a:45:b5:54:d0:f2:94:09:10:9b:d9:b5:e6:ea:
         f3:33:30:c5:f7:c2:26:cd:74:83:86:f7:97:33:9c:f8:a7:fc:
         5d:5c:a2:bf:53:67:7c:5e:9f:ed:b2:48:51:9d:27:09:d5:50:
         89:2e:56:f6:92:44:c7:f6:ea:4a:8d:67:b1:bc:30:bf:4f:c4:
         a2:79:2c:41:f9:23:a3:f7:66:ec:64:67:a9:0f:d0:72:d8:d0:
         a1:b6:c8:bf:6b:25:dc:ba:dd:07:bc:83:6d:75:a4:19:a7:65:
         2c:ef:76:e5:b1:42:40:40:04:e7:e7:6a:7e:ca:c4:bb:49:fb:
         cb:67:c2:ad:c3:8c:86:b7:48:18:d8:50:81:ff:57:b8:b4:ac:
         01:03:98:9f:ec:0a:10:67:98:4d:a4:68:16:ed:b8:ed:7c:8f:
         7d:ab:54:52:4f:c9:63:dd:cc:ce:ba:50:50:a9:de:35:16:88:
         54:8e:1f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----