Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/33b3e41158056b5435c163b39b11ac6221082ed5.roa
File:                     33b3e41158056b5435c163b39b11ac6221082ed5.roa (raw, json)
Hash identifier:          R4IG2DK19kwXMIFKeg0sOt51T5ATD/nAX02qMeP+N2M=
Subject key identifier:   D1:35:4D:8C:60:4F:57:31:13:3D:C9:5B:F8:14:0E:69:F4:CD:0B:E5
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0B01C5
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/33b3e41158056b5435c163b39b11ac6221082ed5.roa
Signing time:             Tue 02 Aug 2022 00:09:31 +0000
ROA not before:           Tue 02 Aug 2022 03:00:00 +0000
ROA not after:            Wed 02 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721349 (0xb01c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug  2 03:00:00 2022 GMT
            Not After : Aug  2 03:00:00 2023 GMT
        Subject: CN=33b3e41158056b5435c163b39b11ac6221082ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:98:6d:cd:c5:e9:94:90:de:ea:ae:3a:1a:
                    5a:1c:6f:87:e5:37:3a:b4:9a:8f:b8:70:76:43:2b:
                    46:50:d5:d7:5d:33:0c:89:3f:88:0c:cc:93:c6:ae:
                    a4:08:f3:c1:11:66:ad:cb:a5:6d:f9:85:b9:df:52:
                    6d:18:6b:e8:26:65:5c:1d:2d:83:97:64:e7:6c:81:
                    35:89:6f:cd:32:eb:6b:26:f7:0d:e7:7a:79:b1:26:
                    e1:a2:cc:3c:59:18:4f:5c:40:b1:28:c2:40:06:7d:
                    f1:c8:43:9c:c0:12:db:fd:12:54:11:a8:d6:97:d4:
                    2f:b3:62:e8:e0:59:92:b7:5f:a6:40:55:0f:1c:88:
                    98:42:85:3e:c9:17:83:eb:09:74:e4:ac:e8:4f:6a:
                    90:b3:a8:ba:3b:97:80:dd:5a:c2:d7:17:d6:fa:13:
                    23:67:eb:e3:07:17:bb:44:c3:52:7f:99:e2:6b:8c:
                    f4:2a:19:85:78:20:28:2f:35:34:66:e8:e8:03:e8:
                    d5:6d:3b:f6:06:76:39:bb:ae:7a:98:5b:b6:be:27:
                    0e:4e:2b:2b:25:a7:ae:6b:fe:6c:63:bf:ca:ab:13:
                    4b:ca:ae:61:e1:e3:a5:32:87:fc:59:79:87:f5:18:
                    27:c1:93:56:46:d6:1d:c5:8e:e0:7c:46:0c:b7:a5:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:35:4D:8C:60:4F:57:31:13:3D:C9:5B:F8:14:0E:69:F4:CD:0B:E5
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/33b3e41158056b5435c163b39b11ac6221082ed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:db:2f:fe:f3:bd:db:63:a5:8e:59:e3:db:43:13:58:b5:6f:
         18:1f:e9:6e:c2:a2:d8:5a:a8:21:61:40:69:80:c2:cd:17:77:
         b6:8b:ac:9d:e4:3d:18:6e:c8:b2:94:ce:60:a3:80:24:07:3d:
         12:6f:99:d0:3a:d8:bf:eb:67:10:d4:10:e6:7c:23:06:e6:23:
         0c:c4:11:8a:f7:2a:9c:01:af:46:fe:8b:0b:91:d4:26:b5:9a:
         92:4f:65:3f:17:30:f6:cd:2d:da:60:19:c9:0d:fa:18:af:79:
         64:ab:e8:39:e5:5e:b7:b6:58:de:ce:22:f8:d9:8f:f3:7a:b3:
         af:cb:52:b5:a5:31:1b:bb:96:65:49:d4:9d:ee:a9:0f:3f:df:
         a8:08:f7:0d:9a:32:3b:29:c8:72:85:2f:d9:38:01:76:b1:a4:
         64:e3:2c:4e:24:57:34:d2:e1:21:44:36:11:92:a4:d1:a5:45:
         01:f2:0f:f2:1c:19:c2:e8:d1:7b:97:3d:4e:9c:20:ff:cc:f4:
         c2:53:4a:88:12:ef:cb:7a:87:ac:15:4a:fc:ba:dc:4f:5c:79:
         94:e8:6b:3e:15:8b:68:fe:e0:43:80:05:09:61:1e:c5:b1:fa:
         d2:5f:da:8c:78:1c:cc:be:1f:83:bc:44:a9:4c:a4:14:63:23:
         bb:3c:78:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----