Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/268e26a43b9e494bfff1b56160b00a42d6e30e5f.roa
File:                     268e26a43b9e494bfff1b56160b00a42d6e30e5f.roa (raw, json)
Hash identifier:          J+1OfBu9shrfKaLJqcF8zo+aQBdjRwGPEt8iHhWpgB0=
Subject key identifier:   90:18:0F:0C:CC:67:6B:85:E1:C2:28:D3:0D:90:0B:CF:3A:7B:75:A2
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0AC137
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/268e26a43b9e494bfff1b56160b00a42d6e30e5f.roa
Signing time:             Wed 27 Jul 2022 03:23:24 +0000
ROA not before:           Wed 27 Jul 2022 03:00:00 +0000
ROA not after:            Thu 27 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 704823 (0xac137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 27 03:00:00 2022 GMT
            Not After : Jul 27 03:00:00 2023 GMT
        Subject: CN=268e26a43b9e494bfff1b56160b00a42d6e30e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e4:37:3e:b3:c6:6a:a8:26:71:15:26:79:76:
                    ac:a7:ac:05:de:38:e2:05:4f:99:ae:8e:5d:17:e0:
                    66:88:82:1c:ad:c7:19:d9:23:5f:55:3e:1b:9f:a4:
                    14:c3:3e:84:b8:a1:43:9b:56:0a:c2:05:fb:27:9e:
                    27:17:9a:7b:97:34:80:27:da:79:fd:ac:9c:dc:88:
                    41:b2:bc:ac:5a:cf:5b:93:28:54:30:5a:ec:74:cb:
                    14:f5:03:1f:19:7e:13:bd:53:a5:ac:32:80:b9:e1:
                    15:d8:f2:dc:e8:fe:64:ca:9b:55:65:4d:79:30:63:
                    b4:fb:b0:aa:e1:78:39:f0:93:2c:ba:a5:58:bf:42:
                    8a:18:d4:75:2e:98:57:a3:a4:ba:90:d8:b9:8d:73:
                    a4:7a:4e:bf:e5:a4:03:7c:b6:9a:fe:f3:bd:8f:e1:
                    d6:68:d9:b1:52:58:64:f8:c2:d4:42:86:3d:15:b2:
                    85:0a:bd:ae:f4:2e:f0:68:8c:9d:09:dd:30:f6:4d:
                    55:18:d3:e4:0b:50:86:47:f2:3f:b7:bb:77:fa:65:
                    06:58:d7:aa:ac:d5:da:2e:6f:ba:ed:08:91:e3:85:
                    7d:1c:d7:f2:2d:36:02:77:27:cb:db:8b:87:33:30:
                    1f:b8:5e:ea:11:9a:21:05:c8:34:2a:1f:94:79:de:
                    97:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:18:0F:0C:CC:67:6B:85:E1:C2:28:D3:0D:90:0B:CF:3A:7B:75:A2
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/268e26a43b9e494bfff1b56160b00a42d6e30e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:43:01:00:de:70:4b:d3:37:7e:d8:3b:db:03:d1:98:54:5d:
         fd:24:7f:15:ff:fd:69:83:74:20:dd:67:5b:55:e7:9d:79:b0:
         6c:cd:20:e6:79:0c:05:87:b0:57:bf:bb:1c:2d:00:75:49:f8:
         e6:bc:5d:79:43:0a:5b:35:55:f8:0d:46:66:e6:f1:32:95:77:
         f0:66:58:d3:57:03:60:9f:4e:75:49:a0:6f:db:81:54:bf:71:
         da:94:f2:99:6d:85:87:29:ee:38:ed:eb:41:5b:e5:ba:0b:48:
         05:45:9e:a2:5f:ae:fc:c1:ee:a8:8c:e3:a9:aa:0c:98:c2:72:
         d0:89:f2:a0:4c:79:ec:f0:c0:99:3b:3d:06:e7:19:8d:b4:0c:
         fa:80:c3:f6:bf:d3:94:b9:cf:99:47:9c:25:7a:1b:f7:c3:f3:
         35:ed:7d:a3:88:55:d9:d3:b4:e1:23:9d:75:f2:96:d0:92:98:
         cd:93:84:76:ff:77:4e:89:c5:4e:63:19:6e:b5:83:e5:59:5b:
         13:d1:fa:18:2c:dd:8e:8e:63:00:d5:d7:ef:58:9b:23:86:eb:
         90:7e:c5:26:1d:70:bf:ce:b8:bc:af:f9:d7:06:42:a8:e2:2c:
         2b:73:4f:15:c2:f6:74:e4:be:d1:54:06:e7:9b:4d:2e:a9:98:
         6b:02:7c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----