Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/17bb17e4f17a3035d1b102a4247d0e54c3e1c264.roa
File:                     17bb17e4f17a3035d1b102a4247d0e54c3e1c264.roa (raw, json)
Hash identifier:          /h72k4BjRzFZO3QOfpFa9EcF3g+JrmE7c5EAWClitlM=
Subject key identifier:   B5:E7:98:F6:82:2A:FE:48:4D:4B:D5:99:DD:88:0B:9A:02:B7:D6:B0
Certificate issuer:       /CN=b9674112d06595f2d6b84802ac8416687159afd1
Certificate serial:       0D3402
Authority key identifier: 54:08:20:24:F6:0A:38:3E:38:22:4F:8F:77:77:E2:E5:35:5E:9F:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9674112d06595f2d6b84802ac8416687159afd1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/17bb17e4f17a3035d1b102a4247d0e54c3e1c264.roa
Signing time:             Wed 24 Mar 2021 14:34:05 +0000
ROA not before:           Wed 24 Mar 2021 14:34:05 +0000
ROA not after:            Tue 24 Mar 2026 14:34:05 +0000
asID:                     262237
IP address blocks:        2803:6200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865282 (0xd3402)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9674112d06595f2d6b84802ac8416687159afd1
        Validity
            Not Before: Mar 24 14:34:05 2021 GMT
            Not After : Mar 24 14:34:05 2026 GMT
        Subject: CN=17bb17e4f17a3035d1b102a4247d0e54c3e1c264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:32:9c:c4:ab:da:c8:6d:2f:f0:5d:89:25:e2:
                    87:69:e9:03:74:30:5c:d9:b6:33:53:f9:dd:cb:df:
                    3c:32:54:1f:f8:45:1f:86:18:a0:65:d2:fc:cb:8c:
                    3a:c2:fe:0e:c5:5e:c4:90:bd:56:05:44:8e:c2:b0:
                    24:0d:f8:a2:30:0c:c2:05:25:08:63:30:87:af:0d:
                    d7:7b:73:de:84:b2:98:92:32:d6:4c:a8:61:9e:a4:
                    5a:c4:68:5e:68:5e:00:be:38:1e:f7:e4:30:ef:4b:
                    28:bb:36:64:1a:ab:d8:b0:c6:a0:5f:7a:7d:4f:2f:
                    be:05:a9:4c:4d:bb:94:9d:cd:70:58:70:99:bf:fe:
                    76:f9:23:0f:78:89:84:dc:eb:9e:f7:9a:c5:b8:69:
                    98:79:91:fd:78:9e:3e:3e:85:50:b3:81:54:2f:e8:
                    f9:9b:15:6c:78:e1:1b:b7:76:0f:28:f0:42:5a:59:
                    2e:6c:b0:96:63:26:f9:57:01:3c:25:d7:af:9f:c9:
                    e6:e1:dd:e6:8f:56:37:60:db:03:ee:69:2f:6a:e3:
                    13:02:ae:0a:52:a0:77:23:9c:f0:40:3f:f7:32:40:
                    aa:dc:a2:08:3c:a0:ac:90:0a:c9:fc:93:dd:1f:f8:
                    a6:d1:11:0b:49:d5:3f:e5:ff:71:23:9c:aa:22:e9:
                    d1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E7:98:F6:82:2A:FE:48:4D:4B:D5:99:DD:88:0B:9A:02:B7:D6:B0
            X509v3 Authority Key Identifier:
                keyid:54:08:20:24:F6:0A:38:3E:38:22:4F:8F:77:77:E2:E5:35:5E:9F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9674112d06595f2d6b84802ac8416687159afd1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/17bb17e4f17a3035d1b102a4247d0e54c3e1c264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6be347d-7bf1-4135-9b8f-3bf7977b2d8a/b9674112d06595f2d6b84802ac8416687159afd1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6200::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:2a:7f:50:9f:14:d7:75:be:ec:d8:ad:1c:02:7d:ab:bc:52:
         9d:58:ae:d7:ed:62:3c:54:99:b5:34:33:f1:fc:22:21:5c:80:
         51:76:97:2a:ff:e0:22:d2:f3:53:db:59:35:94:e8:9e:4d:a9:
         7a:87:b1:83:41:9e:1a:dc:75:b1:0d:65:d7:6d:db:ea:06:2a:
         72:4c:8a:e2:99:ac:15:2f:e8:a0:b6:2f:63:d1:3c:63:91:6c:
         82:c0:55:e7:a5:a2:90:3a:9a:3f:9f:e6:5f:a2:a9:6f:a5:8e:
         e5:69:cd:6c:3f:ee:bd:f7:68:62:af:05:fc:e2:b3:bc:3e:89:
         b7:e0:b8:b3:1b:a8:d0:56:c7:14:5f:20:93:f3:87:a7:1e:53:
         48:44:26:40:d0:05:cf:cd:6b:38:87:eb:cc:74:4f:4a:3b:4c:
         fc:40:7a:b3:83:e9:a8:59:60:a5:93:ec:00:ba:44:96:2f:77:
         8a:53:54:0d:51:15:56:72:80:8a:4b:00:5f:1e:ae:a2:fb:f9:
         e4:77:a9:7c:4d:0f:03:07:2d:a6:22:3f:84:f7:ef:58:a6:58:
         9d:65:73:c4:44:67:8f:6d:a6:9e:dd:bf:22:de:d3:15:a0:52:
         9a:46:1d:97:4f:9a:82:f4:00:59:5d:42:4e:e7:ee:88:d7:dd:
         5f:99:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----