Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ef1633b3-783c-4a12-8843-b06641bcccbf/716d28603d141bf5993b3d90d505af580ac7ae9f.roa
File:                     716d28603d141bf5993b3d90d505af580ac7ae9f.roa (raw, json)
Hash identifier:          eyMVd7VOcF0ytGPS3ynm5FMzzDeP6I0Eqv1Xx5sKGY0=
Subject key identifier:   08:21:AD:2A:45:92:55:BE:E2:16:47:49:D3:C4:17:07:E4:99:B7:37
Certificate issuer:       /CN=adf9faacf5b1001e511e4cd7a5d4b571f58a77d9
Certificate serial:       0EF199
Authority key identifier: B0:89:56:F8:44:D6:63:D3:69:73:0B:30:CE:41:65:75:C0:D0:71:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adf9faacf5b1001e511e4cd7a5d4b571f58a77d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ef1633b3-783c-4a12-8843-b06641bcccbf/716d28603d141bf5993b3d90d505af580ac7ae9f.roa
Signing time:             Mon 24 May 2021 15:30:36 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     263232
IP address blocks:        2803:4e80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979353 (0xef199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf9faacf5b1001e511e4cd7a5d4b571f58a77d9
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=716d28603d141bf5993b3d90d505af580ac7ae9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ee:c5:26:30:f5:19:ea:68:9a:57:da:0d:60:
                    3f:e0:79:16:e5:dd:49:aa:7e:3a:72:ee:00:fb:f7:
                    05:e0:e6:8f:85:73:45:1e:86:e2:d6:ad:13:58:63:
                    5a:15:42:ad:2a:b0:f2:91:4b:a2:da:a3:a6:ac:8e:
                    58:eb:97:44:c5:ce:41:09:3c:e3:78:e3:64:a5:4d:
                    e1:70:28:ad:f6:5e:76:93:00:ae:50:e6:d0:32:72:
                    14:6e:4e:7a:97:1d:8b:59:6d:df:6a:0d:f1:0e:1a:
                    b1:ff:78:87:79:16:27:33:05:b3:c6:ce:6c:8f:ce:
                    60:c7:e6:00:38:31:73:ad:78:b3:5e:6e:46:be:27:
                    68:19:ac:a1:13:63:e4:6b:64:41:31:23:18:78:46:
                    dc:7c:03:71:c9:46:e4:c4:cc:c7:98:bd:d3:b8:49:
                    08:53:4a:ec:e6:3a:71:10:5f:c6:30:09:13:02:d8:
                    a5:78:7b:0d:0e:12:2c:61:e2:e5:1f:1e:a7:dc:71:
                    6e:74:bb:ed:29:b2:8b:f7:a8:84:92:de:a6:9b:21:
                    7a:6b:b0:ea:09:5b:ce:04:7c:b9:5e:33:c1:86:e8:
                    45:72:be:fd:a2:f0:ee:69:e1:f5:01:59:a9:bf:49:
                    0c:89:5e:49:12:ba:9d:2d:ee:f5:53:ef:33:01:e3:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:21:AD:2A:45:92:55:BE:E2:16:47:49:D3:C4:17:07:E4:99:B7:37
            X509v3 Authority Key Identifier:
                keyid:B0:89:56:F8:44:D6:63:D3:69:73:0B:30:CE:41:65:75:C0:D0:71:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adf9faacf5b1001e511e4cd7a5d4b571f58a77d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ef1633b3-783c-4a12-8843-b06641bcccbf/716d28603d141bf5993b3d90d505af580ac7ae9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ef1633b3-783c-4a12-8843-b06641bcccbf/adf9faacf5b1001e511e4cd7a5d4b571f58a77d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:c4:93:32:99:b2:33:94:6c:52:bd:d2:7a:f5:ae:30:95:1a:
         62:6c:1a:bc:fa:ea:6d:f2:13:0a:b4:3b:88:53:29:16:32:6d:
         86:c7:85:a0:a4:a4:a8:c9:12:f7:8a:ec:b2:80:6a:ab:66:a1:
         77:69:23:ef:fe:5b:cc:7c:7e:21:3a:24:df:3f:5e:92:fe:be:
         ad:08:34:ee:ca:17:7e:88:96:77:dc:bd:58:09:02:1b:50:37:
         2a:63:34:85:02:4a:79:3f:de:7c:58:ec:3b:7c:2b:ca:4f:c2:
         1a:85:35:4f:53:df:a3:84:45:88:19:b3:29:83:81:85:96:eb:
         a8:b5:45:a0:86:1a:2e:87:2d:91:44:21:be:14:bf:3e:0a:e7:
         7a:c0:b0:39:1e:4f:e3:90:0c:3a:a4:04:b0:c3:4d:a6:93:e6:
         05:7e:f0:33:67:46:a9:aa:3c:d3:68:4d:40:cb:33:80:65:26:
         6b:1e:c1:ae:ef:55:1b:f4:08:28:88:a3:2e:55:ae:a8:66:4a:
         ee:fb:c4:e6:fb:7d:35:b0:e9:a8:d4:a4:dc:42:50:e1:a0:f6:
         e1:03:85:5f:02:66:ca:d8:63:aa:a4:fa:15:9a:c6:48:1b:31:
         47:52:e0:7d:d6:cb:4d:53:c1:37:28:24:35:1a:9c:74:4a:75:
         8c:cf:00:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----