Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3a33f9240206dd8e3311733724d9fb3cbabb35ed.roa
File:                     3a33f9240206dd8e3311733724d9fb3cbabb35ed.roa (raw, json)
Hash identifier:          FVCcisWNwDOX3sQ2EffQ6lYI2I6DjYZTjDrwlbg2ggI=
Subject key identifier:   6F:57:72:7F:83:4C:3E:13:3A:83:88:ED:16:00:DB:8A:DE:B3:60:8C
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       02E8CD
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3a33f9240206dd8e3311733724d9fb3cbabb35ed.roa
Signing time:             Mon 31 Jan 2022 03:49:38 +0000
ROA not before:           Mon 31 Jan 2022 03:00:00 +0000
ROA not after:            Tue 31 Jan 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190669 (0x2e8cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jan 31 03:00:00 2022 GMT
            Not After : Jan 31 03:00:00 2023 GMT
        Subject: CN=3a33f9240206dd8e3311733724d9fb3cbabb35ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ce:e4:79:7f:78:0b:e4:72:a4:a2:9a:98:8d:
                    8b:af:f4:9e:f3:12:6c:12:45:13:15:c5:91:ab:47:
                    1b:8d:a3:1f:50:04:c9:47:f5:0b:87:9b:c8:70:74:
                    51:b4:07:df:38:88:f1:fd:5b:2e:64:e7:ea:19:1d:
                    f5:e9:27:3c:85:10:40:ec:6a:fa:1c:ce:cd:e8:a0:
                    5e:14:ab:1b:45:4c:93:a1:cb:23:bc:20:53:75:18:
                    30:3e:40:39:fc:0e:7f:d8:3d:eb:65:cd:71:f6:4b:
                    97:9e:02:0d:86:ef:9e:c6:f6:ec:b4:bd:f5:41:00:
                    08:07:f3:0f:d4:61:95:ae:f5:dc:1b:b2:4b:ea:80:
                    2b:b1:16:58:62:5c:05:79:26:85:f5:15:8c:ee:3c:
                    47:39:69:ad:5c:79:78:88:54:07:0c:b3:72:e2:fd:
                    b6:c4:e1:66:f7:cd:8b:9a:18:b5:d7:28:20:4e:52:
                    f6:4d:61:0c:4e:33:d1:45:59:4e:34:c4:d5:33:a1:
                    ea:92:1b:10:9c:cc:00:98:e7:77:1d:82:f3:9f:1b:
                    67:70:e9:77:a8:13:41:3b:34:cc:3f:12:3e:87:39:
                    2f:bf:e3:ce:bd:6f:2b:f0:4a:12:76:fe:91:0c:7e:
                    63:cf:c8:47:77:07:05:aa:67:98:2d:4b:4f:79:f1:
                    2f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:72:7F:83:4C:3E:13:3A:83:88:ED:16:00:DB:8A:DE:B3:60:8C
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3a33f9240206dd8e3311733724d9fb3cbabb35ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:36:09:13:9b:94:bd:4b:9b:2d:16:04:ce:28:95:d5:3a:83:
         3b:cc:24:5c:6f:65:9f:cf:31:d5:6f:8d:98:85:b7:02:e0:97:
         e6:37:9a:e1:ea:99:f3:39:66:6c:88:1e:3b:48:29:8c:e2:53:
         1e:af:0d:53:3f:64:32:b4:ef:7c:23:f3:0e:d3:0a:79:de:ca:
         85:81:b7:43:07:ac:c4:d4:48:3c:46:c8:70:a8:39:c8:6f:c6:
         ab:8b:6f:71:e1:92:92:28:fb:d5:99:34:a6:ba:f6:a6:d2:83:
         46:e6:38:2f:f8:a7:fb:9a:83:d7:25:a1:80:d1:b9:4f:1d:ac:
         2f:ec:76:5a:00:e9:39:e3:d6:a7:a7:1c:e0:56:6c:ab:57:1d:
         4a:2e:ef:f6:d2:74:da:84:0d:4d:95:dd:d6:68:9f:0a:51:f9:
         83:ed:02:d2:66:d0:00:e9:f2:bc:c4:c9:59:27:78:14:7b:61:
         04:b4:d5:9e:82:d5:25:3f:e1:d0:5c:47:09:cf:33:d3:24:7f:
         46:29:9d:1b:7a:a9:e5:cf:88:65:cc:d4:32:e6:1e:db:2e:d4:
         ed:49:a4:79:64:79:1c:14:b9:a2:cb:21:65:a7:c8:a6:bb:da:
         87:01:eb:52:34:fe:9b:27:2b:dc:37:01:c8:b4:38:4a:f3:94:
         e1:38:4d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----