Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff69234e-b485-4bd9-b2b0-251e710afd97/8b3301cf3b33f7b840531fd5eeaf50e09969c74b.roa
File:                     8b3301cf3b33f7b840531fd5eeaf50e09969c74b.roa (raw, json)
Hash identifier:          Ik9awYCQUGs4isnkCEF1eA0ZxXe1J8ccstZXl9a8vyM=
Subject key identifier:   12:B8:8D:01:49:C8:D2:1D:D2:FA:1A:99:A3:5A:49:86:89:13:96:85
Certificate issuer:       /CN=69813c730fd9e85b82ed4f58164a66407cc89431
Certificate serial:       0D2DBD
Authority key identifier: A7:B1:EB:0D:B4:78:95:80:C9:4B:49:3A:61:22:D3:1E:8A:BD:83:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69813c730fd9e85b82ed4f58164a66407cc89431.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ff69234e-b485-4bd9-b2b0-251e710afd97/8b3301cf3b33f7b840531fd5eeaf50e09969c74b.roa
Signing time:             Wed 24 Mar 2021 14:38:03 +0000
ROA not before:           Wed 24 Mar 2021 14:38:03 +0000
ROA not after:            Tue 24 Mar 2026 14:38:03 +0000
asID:                     11960
IP address blocks:        2001:13c8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863677 (0xd2dbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69813c730fd9e85b82ed4f58164a66407cc89431
        Validity
            Not Before: Mar 24 14:38:03 2021 GMT
            Not After : Mar 24 14:38:03 2026 GMT
        Subject: CN=8b3301cf3b33f7b840531fd5eeaf50e09969c74b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ab:46:52:f4:64:fe:f6:27:2c:1c:a4:9b:b0:
                    aa:35:74:94:d9:ba:9f:97:f4:b6:be:db:19:85:b4:
                    77:ec:ff:40:23:f1:25:f5:82:f2:71:c7:0b:01:93:
                    df:2a:40:0c:90:7f:18:6c:e3:3a:01:ce:c8:d9:e3:
                    f6:d8:b4:46:a2:a2:eb:a5:24:f2:0a:20:64:2b:ec:
                    73:03:11:f0:0e:93:88:83:8f:fa:59:a6:65:8f:f5:
                    c2:00:d8:27:4c:8d:eb:0f:78:95:2a:bd:66:b2:92:
                    ce:0d:f3:ad:f2:f9:06:e4:a6:06:7b:7d:59:c5:64:
                    30:1f:58:57:40:f6:3f:a6:5f:a5:6a:b0:12:23:b1:
                    8a:fa:11:f6:05:b9:fa:ee:79:60:4d:12:03:1b:74:
                    c1:af:ca:e5:af:48:ae:6f:fd:04:6b:14:1e:4a:ac:
                    49:f4:65:5b:b9:f0:49:e2:78:30:20:41:fe:c8:bb:
                    de:d6:95:2a:3f:0e:c8:10:8e:30:4a:20:ff:26:ce:
                    9a:b4:3b:b6:db:1c:d9:5e:0b:b9:9b:5a:50:b9:78:
                    39:43:cc:4e:8c:70:61:b4:7f:dd:8b:2b:45:38:a7:
                    4f:fd:ed:59:26:f2:12:af:ca:7d:56:36:4a:f7:4c:
                    bf:f3:40:e7:b3:80:2e:c6:be:f5:c3:30:7b:41:12:
                    ab:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B8:8D:01:49:C8:D2:1D:D2:FA:1A:99:A3:5A:49:86:89:13:96:85
            X509v3 Authority Key Identifier:
                keyid:A7:B1:EB:0D:B4:78:95:80:C9:4B:49:3A:61:22:D3:1E:8A:BD:83:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69813c730fd9e85b82ed4f58164a66407cc89431.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ff69234e-b485-4bd9-b2b0-251e710afd97/8b3301cf3b33f7b840531fd5eeaf50e09969c74b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ff69234e-b485-4bd9-b2b0-251e710afd97/69813c730fd9e85b82ed4f58164a66407cc89431.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:04:5a:77:ef:cd:bf:af:21:ef:6a:47:0a:d1:fe:79:b0:10:
         b7:e5:4e:87:f7:db:58:a0:99:00:5b:8c:d6:95:e5:54:b6:f2:
         55:7a:f5:8b:6f:64:9b:83:bf:81:c3:39:a1:07:38:a5:65:d1:
         07:d3:98:1c:fd:b8:7b:bf:a5:91:4c:8d:06:c4:a2:dd:a4:b6:
         71:58:70:e4:8d:ec:bf:08:bc:fe:99:30:c9:5d:dc:e3:e4:ea:
         3f:30:ec:4e:65:9d:0a:5c:be:a0:04:1d:87:a6:f7:19:a0:14:
         0d:4d:cd:06:66:4b:6b:fe:90:c4:47:07:3b:89:7f:9f:95:fc:
         fa:46:3c:43:32:b8:ad:c4:5c:a5:14:a4:2b:6c:06:78:79:a4:
         c5:20:ce:e4:43:19:47:23:94:90:0d:a0:51:da:a8:68:9d:d3:
         3e:aa:8f:40:e3:ea:5f:11:ac:62:72:15:99:f1:bf:7b:29:5f:
         60:d9:72:3f:a0:f1:5c:b7:c1:91:87:c0:86:a9:e1:2f:19:d5:
         c5:68:f2:78:b9:5f:5c:a6:5b:f0:3b:06:ab:af:da:bc:6f:5d:
         8a:e5:79:7f:ae:73:47:ef:e1:9e:22:20:ac:76:6d:75:18:0a:
         76:7c:b0:9a:42:dc:11:a8:3f:48:0f:ec:f8:a0:72:3f:14:72:
         2b:d3:eb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----