Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/29781d4f69751cfbe512bdd3d28094060e7e2e94.roa
File:                     29781d4f69751cfbe512bdd3d28094060e7e2e94.roa (raw, json)
Hash identifier:          ibXFd+ID6ybFU/dQ6eMJ07VRU8PvBaxnYwrMyE2ZKPI=
Subject key identifier:   C3:15:85:D1:34:80:06:55:32:A9:D8:9C:56:0D:C9:80:96:AD:C8:E6
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0AF732
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/29781d4f69751cfbe512bdd3d28094060e7e2e94.roa
Signing time:             Sun 31 Jul 2022 02:56:52 +0000
ROA not before:           Sun 31 Jul 2022 03:00:00 +0000
ROA not after:            Mon 31 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718642 (0xaf732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 31 03:00:00 2022 GMT
            Not After : Jul 31 03:00:00 2023 GMT
        Subject: CN=29781d4f69751cfbe512bdd3d28094060e7e2e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:35:dd:02:6e:e3:3c:34:6c:bc:03:31:51:32:
                    c5:cc:bf:05:51:78:b2:c5:e8:c3:cb:c2:01:4e:17:
                    86:b8:31:d7:6f:8c:c4:40:1f:83:a3:46:6b:e1:49:
                    34:d4:33:85:78:42:5d:78:6e:5f:24:e3:44:65:4e:
                    81:31:c6:98:82:7f:94:2e:5e:48:b0:59:14:0b:45:
                    ce:88:79:3c:12:62:53:f4:c7:34:26:94:28:15:7f:
                    a9:27:9e:5b:60:31:56:b1:3a:a5:af:7f:0b:38:db:
                    5b:60:95:07:e7:64:d1:8a:f9:2b:c9:97:b0:c4:5e:
                    b3:46:9e:9a:02:47:fd:63:4b:02:06:d4:3f:eb:66:
                    9f:62:c2:b1:8c:53:f6:0b:41:cd:89:86:0a:40:f7:
                    ed:cb:1e:89:27:04:8b:66:85:d3:c5:84:1f:e1:5b:
                    3f:0c:da:7e:20:55:23:25:49:cc:32:bb:bb:9f:de:
                    7a:87:5f:14:8b:83:d5:3e:6d:c9:cc:be:e9:cb:2d:
                    bb:64:08:c2:99:de:6f:2d:79:dc:53:ab:66:a4:ba:
                    e0:1a:b3:a9:c3:4f:30:44:58:66:c4:2d:b3:60:3d:
                    d3:8d:61:5f:dd:6a:1a:88:3c:d8:73:54:99:22:39:
                    35:ed:8c:37:16:86:61:0b:35:e7:21:34:86:df:de:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:15:85:D1:34:80:06:55:32:A9:D8:9C:56:0D:C9:80:96:AD:C8:E6
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/29781d4f69751cfbe512bdd3d28094060e7e2e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:df:31:09:ad:a9:79:38:d0:59:96:eb:52:81:e1:f1:16:e5:
         6f:56:a8:aa:10:c8:eb:ac:da:6d:2a:02:d3:82:58:9e:b0:fa:
         06:2d:2e:4a:14:5c:e0:07:e7:84:39:06:25:65:e6:5e:3f:96:
         73:9a:54:7c:8d:70:ac:f0:e6:85:0f:d6:be:a6:49:f4:4d:2d:
         8e:48:ae:38:91:cf:63:4f:dd:8d:d3:63:00:95:10:c6:d8:0d:
         e7:db:e4:61:39:06:97:61:de:db:13:41:42:5a:04:8e:c7:a0:
         6f:07:d5:23:1c:30:c2:18:8a:c8:a9:1b:59:f5:d6:19:d0:ab:
         60:d8:01:4c:98:6a:34:a3:ad:84:4d:02:75:e2:8c:a6:b5:ab:
         26:bb:00:a5:8f:20:e9:5a:48:3a:35:85:50:19:82:84:c9:51:
         c2:d7:d4:fd:b9:7b:a4:86:cb:3d:8d:e2:17:a7:d4:82:e8:c7:
         6e:86:2e:71:d3:7d:35:ef:82:8a:fd:34:74:5a:77:36:99:75:
         aa:d3:42:de:5f:6b:a2:ad:61:d6:3a:c1:31:49:4a:a0:39:b6:
         fb:4a:3e:e7:9b:5e:3c:c5:2d:58:44:19:38:cc:98:6b:98:12:
         55:68:7d:ec:69:9c:27:83:d1:0a:db:23:7c:77:29:39:ea:fc:
         d6:f3:f7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----