Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3a5a7ff894aaf325f05b419f963f3cbda8206c92.roa
File:                     3a5a7ff894aaf325f05b419f963f3cbda8206c92.roa (raw, json)
Hash identifier:          yUSD0cX/YCkWjnt7mHl5R1CwaPDmKa+Mrcq1EdnA4nU=
Subject key identifier:   DE:B0:88:A4:C6:E0:09:23:76:13:5F:4F:79:12:B8:14:DF:3F:50:7C
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       07FF4D
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3a5a7ff894aaf325f05b419f963f3cbda8206c92.roa
Signing time:             Mon 23 May 2022 04:52:39 +0000
ROA not before:           Mon 23 May 2022 03:00:00 +0000
ROA not after:            Tue 23 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 524109 (0x7ff4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 23 03:00:00 2022 GMT
            Not After : May 23 03:00:00 2023 GMT
        Subject: CN=3a5a7ff894aaf325f05b419f963f3cbda8206c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:73:7f:35:17:87:fb:95:02:81:9b:96:61:0e:
                    e4:be:39:d0:45:0f:97:eb:9c:eb:81:48:66:d3:a9:
                    19:9a:b2:55:0e:f1:dc:00:ea:e6:81:03:df:00:84:
                    cf:5c:ec:58:77:7d:95:33:c5:be:0e:7a:ff:85:42:
                    6e:8d:ec:c1:46:88:4c:ca:e6:01:54:35:40:c4:59:
                    6b:82:0b:1e:43:de:ff:be:b4:bf:ba:30:25:61:c6:
                    64:5c:f8:7c:1e:ed:b4:7a:7a:ba:4e:6f:12:4a:f8:
                    ad:71:cc:ee:fc:d8:21:88:14:24:e5:c0:bb:0f:18:
                    43:19:90:d2:ec:3d:48:0e:89:86:4e:04:9d:0a:88:
                    4f:a1:4e:5d:1d:71:d3:a0:b6:d4:a8:a4:dd:10:6d:
                    ed:10:40:1e:fc:54:5d:61:0e:27:69:4b:e9:44:5b:
                    16:c5:4b:60:e8:41:16:2b:16:e3:ae:ae:71:6b:34:
                    83:ae:4a:37:7c:87:d8:61:82:90:dd:98:ce:17:b8:
                    1f:38:c1:11:4f:b0:f8:4f:8b:08:48:28:2d:5b:ef:
                    b4:60:d0:4d:05:42:3d:14:21:73:79:17:eb:1c:b1:
                    eb:e2:e5:16:7e:35:a9:b4:f0:4a:55:ab:03:41:63:
                    f4:c5:2f:5e:10:82:32:f2:94:06:90:65:62:b0:cb:
                    c5:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B0:88:A4:C6:E0:09:23:76:13:5F:4F:79:12:B8:14:DF:3F:50:7C
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3a5a7ff894aaf325f05b419f963f3cbda8206c92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:d4:dd:6c:fd:84:fd:02:40:06:86:0e:5b:cc:70:54:c0:1d:
         37:4d:bf:b1:85:b2:f7:38:41:a3:eb:0a:0b:73:7e:db:82:32:
         e7:89:e9:b4:aa:74:59:36:ff:5e:0e:62:fc:84:a7:18:3e:42:
         bd:f0:fa:49:1e:2d:72:4a:76:05:72:ea:59:9d:56:76:db:61:
         a6:f4:e8:cf:6f:67:34:bc:22:69:13:62:0e:1c:aa:68:2b:89:
         dc:3b:78:5b:28:7f:96:43:85:59:19:b8:dc:87:49:e1:f6:71:
         0d:bb:13:e8:db:90:a9:5d:f9:f7:07:a5:52:f2:02:a5:c9:66:
         b2:c2:89:f2:4d:76:a0:f4:c0:e5:76:b3:9f:71:7c:57:75:92:
         70:38:8f:55:b7:47:a4:b3:fd:5c:c1:94:dd:80:86:ba:72:cb:
         4c:45:fc:e6:0b:29:0e:26:55:28:ea:85:fe:08:38:d4:74:83:
         f0:86:3f:86:bc:f4:21:80:07:d6:42:ec:03:74:9f:dd:44:b2:
         50:60:27:e0:7d:31:81:c9:7c:67:37:b7:43:ec:43:7f:0d:a9:
         ec:b6:92:7b:c6:6b:c7:9b:ac:f3:8e:fa:4c:c0:58:da:3b:38:
         0d:78:5a:89:eb:8d:ac:fe:09:dc:49:44:73:5f:ab:46:4b:04:
         45:eb:07:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----