Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3700a7b95bb65035093e0ff4e405810138591269.roa
File:                     3700a7b95bb65035093e0ff4e405810138591269.roa (raw, json)
Hash identifier:          DckAtoBUOasXot9rEGhNUvXCXHty8qUgLkgWEFqznnI=
Subject key identifier:   64:4A:87:A5:F4:74:BD:0E:57:81:44:24:C2:3F:FD:15:12:9E:C2:54
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       09B788
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3700a7b95bb65035093e0ff4e405810138591269.roa
Signing time:             Sun 03 Jul 2022 00:41:25 +0000
ROA not before:           Sun 03 Jul 2022 03:00:00 +0000
ROA not after:            Mon 03 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636808 (0x9b788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul  3 03:00:00 2022 GMT
            Not After : Jul  3 03:00:00 2023 GMT
        Subject: CN=3700a7b95bb65035093e0ff4e405810138591269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:80:cb:7e:f8:37:0c:e9:ac:5b:e5:f4:d5:aa:
                    6e:6d:2b:43:a1:d4:b8:32:10:ae:67:41:e8:2d:3c:
                    fb:da:bb:6c:6d:ee:21:54:7c:b2:c9:38:cb:c9:cb:
                    3b:75:23:81:8f:43:32:88:57:88:2a:88:af:28:85:
                    7b:50:90:9a:0b:87:a4:e7:cb:51:63:01:ae:42:93:
                    80:26:a7:10:fc:b9:c6:e0:2f:41:f1:82:ef:d9:a4:
                    b3:5a:cd:b5:1e:6d:d0:1c:ff:46:29:6b:6c:a4:f5:
                    09:c9:c6:f5:11:46:64:a3:43:3f:69:bb:f1:c1:89:
                    a5:91:a0:c8:23:b4:2b:4c:ba:7d:e7:91:2a:cc:7e:
                    f6:8d:a6:38:93:25:34:d7:2f:4c:95:d3:cb:bd:36:
                    b4:70:1f:22:2f:17:85:1f:24:8b:b6:d6:7d:6e:df:
                    5f:09:27:64:e7:46:78:6b:55:ba:5d:0a:75:ec:8c:
                    4c:b8:37:1d:3a:87:02:b9:cd:4b:c1:52:db:c3:40:
                    49:6f:2c:5e:c3:de:28:fd:bd:f8:4a:2b:89:68:f3:
                    ea:7d:ff:72:c0:1f:eb:42:db:bb:fd:80:af:19:bf:
                    dc:2c:5d:59:de:85:7d:ba:6a:0d:a8:3a:38:2d:8f:
                    d4:fc:2a:10:9e:b4:fe:4c:98:7a:9a:82:a8:74:37:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4A:87:A5:F4:74:BD:0E:57:81:44:24:C2:3F:FD:15:12:9E:C2:54
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3700a7b95bb65035093e0ff4e405810138591269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:d0:e2:06:9f:b4:33:82:7a:7d:8c:68:46:5b:74:c2:81:d8:
         2f:d6:69:4f:ed:5b:e2:f3:6f:4d:4f:37:96:2c:40:69:b5:5e:
         d1:5c:98:c3:68:f2:29:9c:f0:95:ff:74:e4:45:35:b2:cf:61:
         c2:1b:e3:9c:c9:c4:33:36:45:85:20:7a:51:2a:ca:56:7b:01:
         18:81:c8:0c:14:3a:f1:ec:f1:f3:31:40:69:6a:83:61:a7:d7:
         3b:4d:0a:30:43:c0:52:cf:78:e3:63:2a:65:eb:7e:c5:73:af:
         bc:c5:bc:c5:74:d9:f9:9a:29:7d:d1:55:4f:02:3e:ce:85:58:
         bf:13:fa:88:63:ad:1b:e3:5c:ca:9e:6a:cf:aa:27:5a:d5:e6:
         26:52:5a:a0:0a:dd:d9:0e:7d:4b:63:9e:ca:ab:33:c1:6b:7a:
         5d:de:2f:0f:aa:cf:62:81:72:68:27:7e:9f:57:48:0e:f6:36:
         bb:6a:a2:ff:37:67:f5:a3:81:6d:c1:bd:7f:0c:17:1d:d8:d3:
         d4:64:7b:29:15:7b:eb:9f:9d:d6:45:77:1c:12:a4:5f:63:aa:
         1d:3f:5e:88:1f:b6:a0:32:7b:93:55:86:40:23:52:12:e6:11:
         10:d8:fc:25:0e:af:df:2f:9d:0e:4b:fb:b1:fc:8b:33:86:7f:
         bb:ff:9c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----