Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3f5298448fd670f5b0d6a1348484126c48d39843.roa
File:                     3f5298448fd670f5b0d6a1348484126c48d39843.roa (raw, json)
Hash identifier:          AOkJF+38hedBhCK9GEMxpmA73GncRFeHcCX1ln9pDF8=
Subject key identifier:   14:88:C0:43:01:70:8B:19:A3:D3:DF:11:BA:D9:87:BB:37:4E:8A:FF
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       092DAC
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3f5298448fd670f5b0d6a1348484126c48d39843.roa
Signing time:             Mon 20 Jun 2022 03:08:02 +0000
ROA not before:           Mon 20 Jun 2022 03:00:00 +0000
ROA not after:            Tue 20 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601516 (0x92dac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 20 03:00:00 2022 GMT
            Not After : Jun 20 03:00:00 2023 GMT
        Subject: CN=3f5298448fd670f5b0d6a1348484126c48d39843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:1c:17:cd:06:f4:29:21:b7:bd:5c:df:c4:
                    7f:26:29:16:e7:bb:cd:b9:51:c9:a8:1d:db:df:63:
                    c7:f6:3b:e3:4e:d8:fc:0b:30:a6:c1:ab:8f:55:a4:
                    63:3c:9a:86:58:d7:9f:88:ef:30:8a:96:13:2d:88:
                    2c:7b:b1:ff:e0:54:ed:0e:62:ea:73:4c:3e:49:72:
                    5f:d2:a6:9c:3d:89:11:30:91:8d:c2:a8:5c:81:16:
                    ae:05:a2:ef:08:9e:e2:2f:aa:58:4b:28:84:95:74:
                    50:21:28:49:69:6a:47:c3:7f:4a:a6:72:44:39:62:
                    09:56:e8:e5:fe:60:14:b0:8b:1b:26:89:27:c2:c4:
                    09:a7:ab:9a:f8:4d:8f:4c:32:ff:06:37:d0:fd:cc:
                    fe:7a:ae:32:28:97:d6:5c:7f:2d:12:1d:7f:ac:01:
                    bb:21:ec:fb:90:64:76:bf:ab:b2:fe:4e:50:4c:3a:
                    d7:07:48:2d:8d:0d:28:49:34:6a:6c:0a:3e:8c:e5:
                    45:e9:12:6d:6f:37:a6:cf:07:0a:ce:5e:7b:84:71:
                    5d:80:98:1c:2e:15:62:8d:c5:c3:76:30:ed:55:c2:
                    8a:78:7f:0a:14:23:14:3a:c1:0d:e5:f6:17:ad:9a:
                    b5:51:be:2e:59:d3:97:be:96:9b:1f:b8:ce:7c:42:
                    df:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:C0:43:01:70:8B:19:A3:D3:DF:11:BA:D9:87:BB:37:4E:8A:FF
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3f5298448fd670f5b0d6a1348484126c48d39843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:37:27:97:be:dd:a8:7f:a4:ea:ee:39:7a:65:5c:09:64:
         c4:83:87:ef:e0:b9:72:ac:24:e3:a5:21:bf:96:49:1a:3a:72:
         14:df:79:a9:1c:1f:3a:59:83:d7:ee:ee:f6:44:4d:2b:50:1e:
         39:14:0c:ce:e2:d3:18:3e:61:73:7f:5d:21:f1:00:31:fb:f9:
         6d:43:f3:ea:01:3f:28:ca:51:83:63:22:12:26:73:cb:23:22:
         ed:fa:65:5e:46:7a:c0:f3:85:e1:85:dc:65:d4:4a:f9:d2:8f:
         e4:e0:09:fa:32:29:cb:f4:d6:68:04:0e:e1:32:31:10:e2:34:
         dc:50:e7:ee:6d:3e:85:67:27:de:4e:c2:ef:47:65:8d:ae:9e:
         33:d4:f6:ab:25:31:12:14:9e:27:a4:7d:a7:0a:b8:dc:71:64:
         f2:f7:b0:b6:6e:62:15:a2:1a:c1:c5:5c:4c:c4:9a:3a:58:a5:
         0a:e1:d0:55:6b:96:56:45:b3:4d:a5:6b:50:9d:28:c8:ef:07:
         4d:a2:27:3b:04:d4:13:1b:25:3c:5d:20:dd:7d:8c:d6:86:d7:
         8f:17:5f:04:61:58:a9:dc:ab:2e:c9:d7:4a:86:78:5d:d9:3c:
         f7:92:1f:2e:60:3f:6a:4e:b4:46:05:30:53:63:b8:dd:fe:d5:
         06:94:aa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----