Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0c113d0280bb4687c5cff194502ab4f66ae0718f.roa
File:                     0c113d0280bb4687c5cff194502ab4f66ae0718f.roa (raw, json)
Hash identifier:          LzsFFJUbU0/3tpCl+HTbUiSrSg8uA4ODFX/V/t9eYVU=
Subject key identifier:   71:35:4E:23:76:F5:9E:A0:41:28:B3:6D:B8:7A:10:7D:E4:FE:78:40
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0AD9D5
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0c113d0280bb4687c5cff194502ab4f66ae0718f.roa
Signing time:             Fri 29 Jul 2022 01:58:21 +0000
ROA not before:           Fri 29 Jul 2022 03:00:00 +0000
ROA not after:            Sat 29 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 711125 (0xad9d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 29 03:00:00 2022 GMT
            Not After : Jul 29 03:00:00 2023 GMT
        Subject: CN=0c113d0280bb4687c5cff194502ab4f66ae0718f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b1:b4:64:d3:e6:4f:04:0f:ea:d8:be:89:23:
                    ac:20:91:cb:ba:d4:e7:72:eb:32:c8:82:15:d9:74:
                    28:f7:69:84:2f:14:0d:43:05:41:29:c3:9b:11:fd:
                    4a:7f:8a:5e:38:5c:c1:13:b2:22:e5:69:6e:d8:6e:
                    bd:ff:9f:d7:24:05:54:5f:62:a7:e4:66:c6:d1:ec:
                    63:6b:be:10:6f:72:45:0f:64:03:67:9c:2c:df:7a:
                    c1:16:3a:73:45:cf:65:80:2f:10:67:42:f1:df:85:
                    09:27:34:7a:c1:0a:8c:d0:68:84:08:b4:71:91:21:
                    e7:b9:4d:25:cc:1c:33:dd:23:08:36:35:cb:3b:05:
                    40:57:23:bd:95:3f:cf:3d:7b:f3:67:63:7d:98:68:
                    10:4e:f8:04:04:86:0b:1e:b9:3e:62:17:0f:c1:eb:
                    27:06:67:c3:9f:5b:df:b0:24:87:77:e6:c8:8a:8b:
                    c3:ee:3d:e2:5b:c7:70:14:9b:f0:22:8c:08:27:ba:
                    9b:b9:be:2a:43:0d:2b:7e:53:1d:c7:65:b4:3a:78:
                    c2:03:bb:0e:27:ed:02:93:e6:56:63:8e:1c:b8:43:
                    5f:a2:27:0c:ec:50:be:db:12:3a:f4:eb:c9:fc:9e:
                    8d:98:14:8c:fa:98:49:35:cd:72:11:6f:67:c5:62:
                    c4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:35:4E:23:76:F5:9E:A0:41:28:B3:6D:B8:7A:10:7D:E4:FE:78:40
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0c113d0280bb4687c5cff194502ab4f66ae0718f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         af:e2:b2:2b:d8:c9:9b:fc:55:94:f9:c2:d3:9e:7b:41:55:dd:
         22:cf:de:e7:fe:56:68:14:f9:6c:c8:8b:7c:ac:ab:50:47:fe:
         f2:84:36:99:e9:c0:d4:cb:df:7f:a3:31:f0:ab:a3:8a:a8:77:
         87:73:3c:c8:53:c7:f0:33:04:41:21:03:4d:43:86:78:b0:86:
         89:7f:6f:f2:c1:b7:cf:65:aa:33:b1:6b:68:9b:9c:62:95:fd:
         75:c3:6a:d0:c3:98:f7:a3:49:6c:ed:3b:42:81:73:29:9e:3b:
         73:15:81:64:eb:7d:2d:d6:76:f7:db:f7:f6:ef:7e:bd:21:3c:
         da:4d:4d:03:06:01:81:8a:e0:50:33:97:bd:2e:a1:8a:1e:19:
         b0:86:be:a5:fe:d9:99:93:30:b6:e7:26:ea:9f:44:48:0a:2b:
         7d:be:ca:2d:0a:6c:f3:3f:53:2c:60:66:48:e3:92:44:8e:74:
         6c:3e:58:35:18:d5:56:d4:4e:d8:54:29:d7:79:01:9e:b0:3c:
         11:c2:50:bb:0d:3d:d1:fd:38:46:f5:9e:05:0f:91:85:d1:b0:
         75:59:90:19:27:94:6c:ca:6d:1c:28:55:c5:64:9d:49:7c:72:
         1d:93:58:56:e2:6f:b3:a3:b4:3f:39:cf:7c:ed:1f:be:bd:f5:
         57:fa:b2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----