Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/13cbcb2616581428f60adcde67d83f0e3ea77158.roa
File:                     13cbcb2616581428f60adcde67d83f0e3ea77158.roa (raw, json)
Hash identifier:          Aqh8/+wJZCGLH5+OEN0Dd+p/1Db/xbCDBRFiT7pW5V8=
Subject key identifier:   99:C9:4F:10:59:62:83:72:62:19:DE:F0:6D:C9:52:D6:0F:C1:03:B4
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       048748
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/13cbcb2616581428f60adcde67d83f0e3ea77158.roa
Signing time:             Wed 09 Mar 2022 04:59:34 +0000
ROA not before:           Wed 09 Mar 2022 03:00:00 +0000
ROA not after:            Thu 09 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296776 (0x48748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar  9 03:00:00 2022 GMT
            Not After : Mar  9 03:00:00 2023 GMT
        Subject: CN=13cbcb2616581428f60adcde67d83f0e3ea77158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a3:23:29:f2:4a:58:c9:e9:12:a9:9a:4c:e8:
                    a0:a4:36:34:11:ac:d4:e1:4b:f7:0a:92:01:d2:66:
                    0f:dd:05:c3:cc:76:dc:8e:cc:d5:1f:24:8a:f5:35:
                    fe:33:7c:09:42:38:e1:c4:69:9c:b1:0c:19:0c:9a:
                    59:ab:27:2b:3a:13:fd:1e:16:b9:bb:a8:08:b5:b8:
                    4d:4e:e8:3c:ef:9f:01:b0:0c:e0:07:0b:fe:2c:6a:
                    07:0f:ff:c8:34:d0:02:88:f8:e7:86:f4:aa:43:d3:
                    ee:56:34:87:ec:f9:69:f5:40:84:6d:c7:4b:e6:69:
                    61:2d:05:15:12:93:eb:05:18:c1:bb:7b:5c:ae:2b:
                    a1:b7:cb:39:27:00:f4:7f:fe:ff:ff:9a:97:e3:38:
                    85:d6:23:c2:fd:0c:8b:8c:ce:26:88:03:29:86:e8:
                    41:79:4e:c2:aa:0c:a9:0d:db:19:9e:47:cf:72:eb:
                    d5:c7:22:3b:d8:dc:74:53:2f:c5:4e:a8:33:84:df:
                    22:17:41:a8:8d:a2:07:92:8f:ce:86:4e:5e:bc:b8:
                    69:85:09:67:2c:96:de:bb:f6:20:60:05:4a:7a:1f:
                    1f:37:78:f1:66:a2:76:bd:d7:cd:91:a0:3b:0f:00:
                    8a:44:61:e3:00:7d:2c:7c:79:6d:d0:1c:ec:31:e0:
                    b6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C9:4F:10:59:62:83:72:62:19:DE:F0:6D:C9:52:D6:0F:C1:03:B4
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/13cbcb2616581428f60adcde67d83f0e3ea77158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:fe:77:e4:19:aa:c7:fc:ce:24:21:06:4c:4c:34:fe:53:0f:
         77:fe:21:ad:a6:f3:80:11:13:d9:fd:6a:05:4e:59:2e:6a:23:
         17:fd:48:c9:2a:fc:40:28:e4:9d:ce:a7:e4:75:e7:71:b1:7a:
         b3:e9:c3:1e:e0:58:26:bb:c1:33:22:dc:2d:43:47:0f:c8:02:
         46:7f:a6:99:36:e1:5a:eb:88:20:09:17:2f:2c:37:cb:28:25:
         b5:02:86:90:ac:79:f0:7c:28:89:1f:4e:9d:f7:b9:44:8f:63:
         b6:80:a6:18:f6:d6:72:d4:ba:08:59:2f:b1:3e:5e:25:10:46:
         cc:1c:ee:c9:05:7b:26:f5:07:43:10:56:d2:bb:b3:e6:3a:83:
         65:fb:73:8c:fb:ed:fb:01:15:4e:dc:aa:aa:0b:1e:58:c7:c1:
         7e:10:6b:25:28:97:89:6b:5c:f1:55:34:1a:91:88:5c:e4:8e:
         dd:a2:74:be:12:ae:78:5e:9a:e6:90:8c:a3:4f:a8:8d:1b:c1:
         63:d9:ce:c9:6c:b9:73:d2:f9:9d:fe:9c:10:07:43:d3:a9:91:
         1f:f4:25:db:e8:40:64:d0:f9:02:14:8e:f9:77:f2:2a:e3:2e:
         a3:6f:82:64:78:40:ac:ca:0a:b4:23:b4:ef:63:92:96:d3:46:
         12:60:33:25
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBIdIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwMzA5
MDMwMDAwWhcNMjMwMzA5MDMwMDAwWjAzMTEwLwYDVQQDEygxM2NiY2IyNjE2NTgx
NDI4ZjYwYWRjZGU2N2Q4M2YwZTNlYTc3MTU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAq6MjKfJKWMnpEqmaTOigpDY0EazU4Uv3CpIB0mYP3QXDzHbc
jszVHySK9TX+M3wJQjjhxGmcsQwZDJpZqycrOhP9Hha5u6gItbhNTug8758BsAzg
Bwv+LGoHD//INNACiPjnhvSqQ9PuVjSH7Plp9UCEbcdL5mlhLQUVEpPrBRjBu3tc
riuht8s5JwD0f/7//5qX4ziF1iPC/QyLjM4miAMphuhBeU7CqgypDdsZnkfPcuvV
xyI72Nx0Uy/FTqgzhN8iF0GojaIHko/Ohk5evLhphQlnLJbeu/YgYAVKeh8fN3jx
ZqJ2vdfNkaA7DwCKRGHjAH0sfHlt0BzsMeC2YQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFJnJTxBZYoNyYhne8G3JUtYPwQO0MB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzEzY2JjYjI2MTY1ODE0MjhmNjBhZGNkZTY3ZDgzZjBlM2VhNzcxNTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAhv535Bmqx/zO
JCEGTEw0/lMPd/4hrabzgBET2f1qBU5ZLmojF/1IySr8QCjknc6n5HXncbF6s+nD
HuBYJrvBMyLcLUNHD8gCRn+mmTbhWuuIIAkXLyw3yygltQKGkKx58HwoiR9Onfe5
RI9jtoCmGPbWctS6CFkvsT5eJRBGzBzuyQV7JvUHQxBW0ruz5jqDZftzjPvt+wEV
TtyqqgseWMfBfhBrJSiXiWtc8VU0GpGIXOSO3aJ0vhKueF6a5pCMo0+ojRvBY9nO
yWy5c9L5nf6cEAdD06mRH/Ql2+hAZND5AhSO+XfyKuMuo2+CZHhArMoKtCO072OS
ltNGEmAzJQ==
-----END CERTIFICATE-----