Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/ed18d0d691856c752668db887764df3c895de3cc.roa
File:                     ed18d0d691856c752668db887764df3c895de3cc.roa (raw, json)
Hash identifier:          Xq2Ixo9070VPrdT5WjyUbh0aIoO0KrFGjz2pV4vvyQo=
Subject key identifier:   DF:3B:9E:90:AB:14:25:BA:61:E6:06:92:46:B3:33:0D:A5:1C:F5:F3
Certificate issuer:       /CN=581e0c9d08ecb217623b5290ee851242221cdc85
Certificate serial:       0D98E1
Authority key identifier: 80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/ed18d0d691856c752668db887764df3c895de3cc.roa
Signing time:             Wed 24 Mar 2021 14:39:16 +0000
ROA not before:           Wed 24 Mar 2021 14:39:16 +0000
ROA not after:            Tue 24 Mar 2026 14:39:16 +0000
asID:                     264668
IP address blocks:        2803:2c20::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 891105 (0xd98e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=581e0c9d08ecb217623b5290ee851242221cdc85
        Validity
            Not Before: Mar 24 14:39:16 2021 GMT
            Not After : Mar 24 14:39:16 2026 GMT
        Subject: CN=ed18d0d691856c752668db887764df3c895de3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:02:ec:73:a6:92:a4:5f:1d:5e:7e:97:e4:
                    f7:76:05:a0:e6:99:ec:c5:40:20:db:2b:03:8a:8e:
                    c3:ca:c8:82:2a:b7:43:63:b7:12:16:bc:04:b1:84:
                    12:6b:6e:8d:52:bc:2a:8b:12:49:b0:9c:a1:95:cf:
                    f5:ce:0a:cc:4c:ee:30:6b:89:fc:d9:fd:e3:52:09:
                    d2:5b:25:fd:64:df:5d:70:48:22:3d:9d:93:e5:5a:
                    47:a7:b7:c3:02:8a:8d:d3:75:16:55:c2:29:56:d2:
                    63:90:c2:97:26:a0:50:ea:21:07:45:ca:a3:f3:79:
                    5a:9b:b5:e0:75:0f:5c:aa:da:95:65:0e:a0:70:8d:
                    86:43:48:87:29:56:be:e6:bf:15:38:98:ee:a9:ea:
                    91:00:3b:0d:be:f0:4b:28:f7:c9:94:f0:59:60:62:
                    59:f6:c9:a7:03:73:27:13:b6:f5:3d:e8:75:c4:91:
                    f2:cb:aa:66:be:89:41:ce:31:32:25:c1:aa:23:38:
                    4f:52:31:1b:13:f9:97:4c:93:7d:77:c6:6f:da:0d:
                    75:05:9f:57:a3:0c:7b:09:90:04:28:64:90:ab:93:
                    6d:0f:d0:c8:12:27:fa:30:2a:04:5f:c6:a6:6e:41:
                    fc:67:a9:c8:ec:81:21:ba:6d:ee:88:46:d3:08:ee:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3B:9E:90:AB:14:25:BA:61:E6:06:92:46:B3:33:0D:A5:1C:F5:F3
            X509v3 Authority Key Identifier:
                keyid:80:04:EA:0A:FB:6A:C0:26:B6:FE:AC:80:48:FD:11:65:E8:63:F9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581e0c9d08ecb217623b5290ee851242221cdc85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/ed18d0d691856c752668db887764df3c895de3cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e571b174-cc90-4dbc-8519-355b841d74db/581e0c9d08ecb217623b5290ee851242221cdc85.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:ac:3a:72:d2:98:1d:fd:6e:31:d8:c6:77:f1:fc:21:f1:dc:
         82:c8:05:40:b2:b5:c3:c0:76:d8:7d:aa:b8:1a:84:36:59:56:
         f9:77:e4:ec:ac:46:99:0f:91:9e:b6:10:d2:35:1b:00:ee:69:
         8c:51:a8:bd:7a:00:a3:42:24:20:9a:46:9a:bf:f3:8a:62:e3:
         f4:6d:b7:6c:12:83:68:ce:29:33:b9:93:c3:41:62:b7:69:84:
         d5:2d:c9:9c:87:80:33:3f:ca:06:15:37:64:02:e9:28:03:2f:
         51:c5:e3:0a:37:49:43:67:39:8c:1d:4b:73:e9:df:4f:90:83:
         ad:73:2b:7e:55:8c:2c:2e:4a:b2:56:cd:62:ae:5e:1d:9a:fd:
         5b:70:0d:df:bb:d7:d4:d5:03:d7:6a:81:f3:7b:fe:a9:ea:f3:
         04:57:75:47:13:b6:bc:b3:d0:fa:7e:87:e6:0d:bb:d4:31:a9:
         64:10:9c:6b:81:98:4a:c5:36:25:c1:77:2a:ee:a7:40:b2:97:
         fa:ae:c5:d6:9b:0d:bd:08:d5:2a:f0:ca:d2:59:f1:9d:ff:98:
         05:8b:07:0c:1e:58:0a:9e:79:7c:d3:96:0d:53:37:f5:b8:41:
         83:b8:f3:57:af:d5:ea:25:8e:34:14:1a:2b:48:3b:ac:4a:f2:
         6e:1c:73:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----