Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/6c3d0d7950f5ab08ee45b9ce080b72a113ad46de.roa
File:                     6c3d0d7950f5ab08ee45b9ce080b72a113ad46de.roa (raw, json)
Hash identifier:          GG+lkhehqGLXqPNCHoX9YeUm0DuXj3igj5pjChGfoXA=
Subject key identifier:   9B:F8:E7:09:C4:12:37:74:02:7F:2D:CD:EE:01:DF:37:9B:01:82:58
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0B958F
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/6c3d0d7950f5ab08ee45b9ce080b72a113ad46de.roa
Signing time:             Mon 15 Aug 2022 00:36:37 +0000
ROA not before:           Mon 15 Aug 2022 03:00:00 +0000
ROA not after:            Tue 15 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759183 (0xb958f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug 15 03:00:00 2022 GMT
            Not After : Aug 15 03:00:00 2023 GMT
        Subject: CN=6c3d0d7950f5ab08ee45b9ce080b72a113ad46de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:81:58:74:83:29:c9:5d:1b:de:fd:94:be:
                    df:a4:10:23:49:ff:fa:5d:62:9c:13:75:c2:6a:b4:
                    79:69:35:36:08:7c:29:df:89:70:7c:92:50:d9:dc:
                    f7:f5:80:6d:78:ef:87:2f:8d:45:d2:ab:ed:5c:0e:
                    06:e3:f9:58:51:de:58:a8:ae:12:18:7b:e3:0a:75:
                    b0:12:e2:48:a3:18:5f:91:a3:d0:ab:8f:02:e8:2f:
                    be:66:08:3a:6d:3b:57:22:f7:c8:16:6a:f8:1c:94:
                    2e:ec:50:28:3c:d8:53:76:8a:90:25:2a:75:7a:d9:
                    3f:b2:3b:9d:89:29:32:17:df:11:3d:ca:35:70:9d:
                    16:73:24:83:c9:b1:e8:24:e4:b4:0a:0f:9e:40:7e:
                    32:a8:04:04:3d:2f:de:a7:ad:6b:2d:dd:10:7e:a0:
                    fb:2a:b0:db:96:11:1f:e9:41:93:fd:02:37:f2:04:
                    38:f2:26:54:15:8e:cd:f6:a5:a1:c8:53:b7:2b:f0:
                    16:bb:b7:82:3d:b6:9f:a9:80:e8:34:fa:d4:82:75:
                    3a:1c:95:0d:bc:16:11:f1:f1:3b:85:ea:fd:f8:f5:
                    bd:ea:be:3b:98:a7:19:59:62:6c:9d:3e:65:a7:20:
                    eb:91:9e:af:b7:11:43:b1:28:02:74:67:e6:6e:e7:
                    52:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F8:E7:09:C4:12:37:74:02:7F:2D:CD:EE:01:DF:37:9B:01:82:58
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/6c3d0d7950f5ab08ee45b9ce080b72a113ad46de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:2b:3d:05:cd:06:9c:fd:8d:9c:90:b3:68:ae:ca:8b:86:b2:
         9f:c2:00:9c:61:5c:7f:20:37:51:08:47:4e:a4:f6:46:41:e8:
         fb:b1:9a:a0:14:1e:05:f5:c7:17:c8:1c:ba:76:4e:8a:9b:85:
         38:91:df:9e:37:80:14:56:df:86:8c:9f:bd:5f:2a:96:b1:dc:
         7b:d4:92:f1:c9:a4:e3:49:db:24:90:7c:b5:26:aa:50:68:52:
         39:d4:78:c2:1b:31:9f:23:e0:89:39:d5:11:00:1b:d3:1d:49:
         0d:ef:73:b8:78:1f:9e:5c:79:33:bb:9a:23:81:d1:26:4c:84:
         f9:7b:97:26:1f:4f:e6:7c:55:d9:b6:1d:43:d4:c9:6f:d7:a9:
         1b:78:59:1d:3c:10:36:66:c4:4e:f9:99:44:e9:6e:1c:79:13:
         e9:79:59:20:6d:e2:91:2b:31:1b:c6:1c:fa:66:b2:d1:95:6e:
         11:1b:f3:d4:b6:85:b8:7a:cd:52:a2:8b:00:77:e4:86:53:db:
         9f:3e:58:db:b4:f2:54:38:2a:b5:84:40:df:ed:51:39:e1:37:
         d3:a9:97:c9:90:fa:97:21:49:a7:3d:84:3e:9b:62:ef:a2:51:
         6b:cf:37:2d:57:70:fc:15:53:be:dc:bc:2b:0d:03:2c:d6:ec:
         f2:2d:2d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----