Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/12eee6c6e05aa5a04a55d8fe89bba22c21b2b077.roa
File:                     12eee6c6e05aa5a04a55d8fe89bba22c21b2b077.roa (raw, json)
Hash identifier:          CfLXezu0/D2oSFKDcMJ6bDMcauwfO0Ka4ESKdspQ2fE=
Subject key identifier:   BD:A0:04:D8:27:41:0A:55:C0:A8:6A:B0:22:19:13:FC:F3:53:22:CC
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       078570
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/12eee6c6e05aa5a04a55d8fe89bba22c21b2b077.roa
Signing time:             Thu 12 May 2022 04:53:46 +0000
ROA not before:           Thu 12 May 2022 03:00:00 +0000
ROA not after:            Fri 12 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492912 (0x78570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 12 03:00:00 2022 GMT
            Not After : May 12 03:00:00 2023 GMT
        Subject: CN=12eee6c6e05aa5a04a55d8fe89bba22c21b2b077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ef:ed:00:c2:8d:b8:fc:b7:74:96:9b:28:cd:
                    01:09:95:bf:e8:cf:f9:fc:5f:6c:f7:fa:2c:c6:77:
                    04:ae:ce:b2:94:30:d9:04:fd:7b:09:a4:5d:d3:40:
                    e5:c5:f1:72:e4:00:61:0a:3e:38:cd:b3:cb:8b:38:
                    10:ec:d5:8e:5d:99:2a:d7:56:bb:1a:2f:fa:fe:98:
                    3c:fd:e6:f3:45:23:f0:8f:e8:71:ce:a2:b5:79:98:
                    cb:15:4d:b8:1e:b4:ef:2c:20:51:92:d4:f9:dd:31:
                    de:9f:40:62:1f:63:9d:56:77:f4:6a:65:51:e0:f4:
                    f5:e2:a6:25:05:98:95:d6:e6:e0:2b:98:0c:95:6b:
                    e7:b9:61:14:e4:22:03:3d:68:51:3e:d1:b4:1d:04:
                    d6:0a:a2:e6:35:18:5b:f8:04:01:2d:03:6b:b5:e1:
                    23:54:9d:01:d1:3e:95:44:12:73:58:81:f5:9f:fc:
                    35:b5:dd:ba:2d:8b:20:2b:4d:4f:5a:fb:1b:34:da:
                    ae:0c:cd:7c:74:cd:8e:86:72:17:af:35:25:2d:d1:
                    07:69:6a:49:48:b4:87:09:db:17:04:a2:0f:a6:1a:
                    6f:8a:0f:e5:d1:4d:36:0c:a1:45:80:48:70:83:90:
                    b1:ba:1e:51:0e:89:3f:bd:d8:28:2e:38:35:94:07:
                    d9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A0:04:D8:27:41:0A:55:C0:A8:6A:B0:22:19:13:FC:F3:53:22:CC
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/12eee6c6e05aa5a04a55d8fe89bba22c21b2b077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:a8:5e:a2:45:ce:40:d7:08:f3:9a:b6:a6:c6:75:03:22:87:
         9b:52:b4:9e:32:b7:57:57:53:71:37:19:fe:fc:e4:e8:14:f5:
         17:52:54:0a:af:8d:36:25:e1:3e:da:cc:13:68:a8:c6:fb:dd:
         a3:68:4f:8d:d5:28:fb:cf:d8:c1:c9:19:88:aa:d9:eb:c1:3e:
         db:94:56:2e:57:a3:01:8f:9c:29:6c:b9:c0:71:3a:50:ff:9d:
         c0:6c:70:2b:e9:db:c8:0a:a3:03:77:cf:07:28:36:44:ac:c3:
         a4:9e:25:66:e2:d5:b1:bd:10:34:f6:88:00:e7:4b:3c:ee:8e:
         50:b5:ea:00:19:20:14:78:49:a0:e8:cf:54:40:05:24:33:4b:
         65:04:d7:6c:13:39:12:d7:a3:6f:24:25:cf:df:ab:9c:76:fb:
         4c:d3:05:4f:f0:14:c9:64:5b:bf:e5:77:72:a1:3a:51:8b:56:
         a3:d0:a0:10:7d:8d:c4:3a:d0:ef:06:9e:0f:15:48:22:06:4d:
         07:98:e1:40:87:7c:6c:45:00:44:d4:f4:bf:0d:24:05:62:3e:
         ca:f5:d4:a8:58:90:ea:32:25:e4:17:0f:88:72:9a:03:8e:a7:
         f1:b3:71:8f:f8:5d:c5:8e:3a:80:74:4a:fa:7a:4a:d8:29:bd:
         7c:72:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----