Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/118f5869b3454df5f1eb9c2f56bbd7feba2e6688.roa
File:                     118f5869b3454df5f1eb9c2f56bbd7feba2e6688.roa (raw, json)
Hash identifier:          O54pQdSARd1WgCIxYzX9/ozQqKz8R53P/T6fD7CTOng=
Subject key identifier:   EA:6A:AB:7F:95:58:06:F6:2A:65:17:9C:28:B7:AE:97:FB:46:0D:EE
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       088F57
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/118f5869b3454df5f1eb9c2f56bbd7feba2e6688.roa
Signing time:             Sun 05 Jun 2022 02:31:34 +0000
ROA not before:           Sun 05 Jun 2022 03:00:00 +0000
ROA not after:            Mon 05 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560983 (0x88f57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun  5 03:00:00 2022 GMT
            Not After : Jun  5 03:00:00 2023 GMT
        Subject: CN=118f5869b3454df5f1eb9c2f56bbd7feba2e6688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:0f:54:bc:41:50:2d:ad:97:3a:b9:d9:66:
                    17:72:da:2b:b2:87:c1:dc:0c:55:8a:f2:ea:61:96:
                    e5:01:bc:ef:1e:33:12:29:3b:38:13:c9:8e:91:b5:
                    30:93:3e:52:9e:85:21:ac:58:9d:0f:ce:1f:61:47:
                    11:e9:6f:7d:82:84:65:4c:f3:81:71:7d:d3:88:46:
                    0a:c6:72:3c:f7:26:af:67:71:67:cd:82:9a:f0:bf:
                    eb:8c:d5:bb:4b:cd:fe:c2:ad:77:67:c5:76:4d:89:
                    30:6d:4d:68:3e:8a:b3:c7:a1:fc:71:6d:e5:eb:a1:
                    2f:e7:8d:0f:8e:fc:80:b4:c9:dd:00:67:44:10:a2:
                    ef:41:7f:4b:d3:80:b6:3a:ea:5e:34:d2:d7:31:f9:
                    37:11:55:0e:ee:d7:c2:a3:76:37:5e:62:73:74:c7:
                    31:f9:7c:a0:3d:01:c8:89:ea:05:5c:37:ab:94:ea:
                    bf:d1:75:98:bd:02:37:af:80:0c:c1:15:31:b6:ba:
                    ad:55:72:77:a1:9a:41:56:b3:73:ed:a4:ec:55:2f:
                    ba:84:1a:90:df:32:96:4c:40:35:19:02:89:6d:f1:
                    87:cc:27:5a:37:22:73:79:d8:1d:60:9a:30:91:72:
                    7b:f7:34:22:fe:dc:1f:46:9e:93:77:48:f0:36:32:
                    05:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6A:AB:7F:95:58:06:F6:2A:65:17:9C:28:B7:AE:97:FB:46:0D:EE
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/118f5869b3454df5f1eb9c2f56bbd7feba2e6688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:b1:eb:14:da:9e:1f:1c:3b:cd:93:ef:b5:65:88:37:20:fc:
         79:35:28:00:3d:b5:87:aa:86:2f:99:32:28:52:fd:f3:35:dd:
         4a:ed:88:e3:8e:da:d4:07:ad:93:9a:77:39:11:82:48:aa:8e:
         e8:bd:1f:d0:f9:46:be:f3:5b:45:59:98:49:ed:02:75:74:b1:
         2e:fc:54:98:4a:36:00:e1:d2:6f:03:02:80:85:ba:19:c8:f2:
         01:40:cf:11:8c:b7:6d:4a:81:f1:e5:2c:de:db:a9:d6:aa:89:
         7c:a1:74:cf:b5:cc:74:2c:54:f2:e0:06:87:0b:e4:17:3a:91:
         85:65:51:d6:4e:a8:f2:6f:f9:31:62:e5:38:08:28:57:6f:46:
         e5:85:fb:ef:88:6c:26:e7:52:4e:ed:b4:b0:a6:7f:fa:d8:54:
         de:5f:0c:9a:a9:a5:09:0e:0a:78:35:7a:a4:89:ee:d9:bf:05:
         09:76:58:ff:f8:3a:02:d1:ea:d7:c9:92:29:55:38:47:75:9f:
         a2:21:13:86:b9:d9:08:3f:69:f1:21:4c:09:55:0d:83:3c:db:
         39:ee:0c:c2:94:a9:3b:5a:01:5e:f7:86:9f:73:45:dc:4f:19:
         df:2b:54:b9:72:2f:55:90:61:5e:d5:e0:53:98:cb:e3:11:2f:
         9b:61:a4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----