Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2b960ae02dfbf389826d59ca64fd29b58ae02e20.roa
File:                     2b960ae02dfbf389826d59ca64fd29b58ae02e20.roa (raw, json)
Hash identifier:          Ta7Pp32XIOnrovwjIdZljw5CnqAlzYzDLrmAyniQkDY=
Subject key identifier:   24:CA:32:5F:94:D2:5C:24:56:A8:99:59:36:87:4D:C9:81:39:1D:DF
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       056A3F
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2b960ae02dfbf389826d59ca64fd29b58ae02e20.roa
Signing time:             Mon 28 Mar 2022 00:33:09 +0000
ROA not before:           Mon 28 Mar 2022 03:00:00 +0000
ROA not after:            Tue 28 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354879 (0x56a3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 28 03:00:00 2022 GMT
            Not After : Mar 28 03:00:00 2023 GMT
        Subject: CN=2b960ae02dfbf389826d59ca64fd29b58ae02e20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:6c:55:d1:ce:6f:68:3d:48:61:bb:87:d6:
                    05:4e:a0:55:ca:ff:25:9b:66:80:14:21:cb:c9:25:
                    3a:9e:63:f7:1d:dd:cc:44:c8:45:94:fb:5f:47:84:
                    89:3e:69:35:68:7a:79:28:95:cc:a8:eb:7e:3a:aa:
                    88:b9:21:27:bd:17:6e:19:91:49:7d:2b:28:64:07:
                    9c:2d:6e:ad:50:87:da:4f:0f:76:ee:6e:52:eb:5f:
                    16:40:45:33:5f:ea:a2:8c:cb:54:28:82:4d:e0:2f:
                    35:e1:86:cd:6b:aa:7e:1b:5a:ad:b1:7c:a3:4c:8e:
                    23:73:7f:50:98:35:cb:56:da:93:6a:11:fa:9e:15:
                    a8:68:20:03:4f:0d:77:0b:b8:20:90:bf:b1:57:14:
                    1b:32:bb:bb:80:46:cf:13:d4:d3:af:11:f1:24:46:
                    85:81:a4:3f:2e:4f:81:d2:c0:d8:95:2c:e0:8f:f7:
                    58:62:20:b9:f4:0a:ef:1e:50:5e:22:ad:16:dd:11:
                    66:cc:c8:2a:bb:6e:ee:c2:44:f1:c8:3d:fb:42:f1:
                    92:5b:95:87:11:1a:96:78:23:bb:79:2d:0a:76:27:
                    a3:b4:91:81:da:71:86:2c:77:80:87:bc:92:fe:ab:
                    58:00:20:84:f1:9c:81:86:48:70:75:f0:de:2d:bd:
                    c1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CA:32:5F:94:D2:5C:24:56:A8:99:59:36:87:4D:C9:81:39:1D:DF
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2b960ae02dfbf389826d59ca64fd29b58ae02e20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:18:b5:39:2f:ad:bf:f6:95:ba:34:a0:61:3f:c1:43:5d:97:
         a6:c5:f3:a6:32:46:6b:9a:09:ef:de:ab:25:f9:4d:a4:6b:43:
         70:f0:18:ad:f3:40:db:92:7c:ce:e9:15:bb:cb:75:8b:2c:1d:
         98:d5:a0:90:a9:ec:0f:65:40:5f:ce:b0:6b:98:5c:1a:84:a2:
         55:e9:2e:db:9a:86:3e:59:33:f8:f0:8b:e0:fa:6d:e5:8c:7b:
         41:a1:fc:00:71:86:29:9e:e6:44:fa:a5:63:3f:15:54:0a:f3:
         71:0f:52:90:32:2e:22:9b:a6:57:46:b8:cf:30:5e:e0:7d:0c:
         91:db:24:a1:73:40:c9:85:2a:47:09:31:98:a7:1e:8d:37:99:
         5b:6d:a6:a7:52:38:26:c1:8f:45:bc:83:c4:c8:d1:a8:92:6b:
         ee:24:a3:21:cd:c9:5c:ec:ff:7d:be:b1:53:14:1d:a1:d2:e7:
         5b:b3:e3:49:0f:2f:81:93:8a:e4:c1:a1:d2:9f:91:5a:f9:e1:
         8d:dd:96:3f:7c:d4:db:bd:b4:bc:3e:83:64:c3:16:8b:59:bc:
         a0:b0:b1:44:00:b1:21:13:91:38:2c:63:6b:be:60:60:ca:3f:
         14:e4:e0:0d:a4:c1:58:75:ca:ef:65:7d:d6:b6:3a:89:68:2f:
         ff:37:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----