Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/45fbc8abf572067cc291375e0d437d9a39707a08.roa
File:                     45fbc8abf572067cc291375e0d437d9a39707a08.roa (raw, json)
Hash identifier:          d37P6JGQrDNg9QtFDcrDUJns4MguEfjhnx2COBCpx58=
Subject key identifier:   83:66:1E:41:EB:7C:86:EC:7C:E2:7B:88:4F:27:0F:8D:CF:EA:E5:27
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0EFC16
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/45fbc8abf572067cc291375e0d437d9a39707a08.roa
Signing time:             Thu 27 Oct 2022 05:43:39 +0000
ROA not before:           Wed 26 Oct 2022 03:00:00 +0000
ROA not after:            Fri 27 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982038 (0xefc16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 26 03:00:00 2022 GMT
            Not After : Oct 27 03:00:00 2023 GMT
        Subject: CN=45fbc8abf572067cc291375e0d437d9a39707a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:34:0f:8c:9e:e7:16:dd:4d:1b:17:70:04:45:
                    18:c7:88:45:a0:a8:c9:5c:e1:a2:73:67:4b:24:f8:
                    8a:ee:1c:7c:fb:76:45:e7:8b:06:9e:21:6f:89:fa:
                    05:f5:66:38:b6:e6:7f:7a:1d:a2:fe:70:f0:19:47:
                    28:37:ab:27:db:ba:2f:a5:db:df:0d:93:a5:06:80:
                    1c:4a:9a:a8:cc:72:f3:7d:ce:44:b2:ec:7e:d4:c9:
                    61:92:63:46:c5:bb:e0:71:c9:2c:e1:46:1f:14:16:
                    2e:14:fe:7a:fe:36:5e:38:5e:d5:8b:24:44:f5:0b:
                    59:0e:97:ae:a2:e6:c0:13:e7:59:e1:fa:0c:fa:21:
                    89:72:95:8b:ed:62:a7:31:d0:79:04:41:f1:25:82:
                    42:6a:90:5a:24:e7:73:7e:9b:ad:01:e1:1c:d2:dc:
                    5e:13:c7:e9:3e:81:3b:11:4b:19:5f:24:b8:fe:1d:
                    4b:a6:4d:c3:fd:06:75:59:ee:cf:53:1e:66:bd:62:
                    c7:00:bb:8d:23:08:fc:4a:8d:09:c0:7b:3a:33:85:
                    ab:7c:ed:48:79:ae:ef:c9:82:e6:e4:34:e5:fc:56:
                    07:54:d3:91:f7:74:5f:9c:32:04:1a:16:af:cb:8c:
                    72:2f:4e:59:f3:42:f4:c4:2f:94:f2:4f:71:44:c3:
                    66:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:66:1E:41:EB:7C:86:EC:7C:E2:7B:88:4F:27:0F:8D:CF:EA:E5:27
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/45fbc8abf572067cc291375e0d437d9a39707a08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:ed:29:d5:cd:1b:e7:b0:4b:ea:ed:e0:27:ac:0f:54:10:33:
         78:45:d0:64:f0:fa:02:4b:bd:23:5e:02:98:0a:53:74:09:5f:
         87:6a:25:5d:f0:c2:40:13:35:c1:0e:09:1f:53:35:4a:ea:19:
         3c:fa:c6:9d:a5:e7:9c:97:b4:e6:91:45:18:e1:c3:33:7d:0f:
         f2:74:e0:b0:33:49:a2:06:b3:37:80:c9:35:87:1a:56:42:93:
         4f:97:8e:78:d1:ec:74:0d:c7:10:2e:3f:d8:37:0f:56:f9:2b:
         2b:71:f2:82:a5:92:e4:b0:f7:28:99:5c:8e:72:3a:cd:3d:24:
         c1:76:40:99:83:a7:08:85:98:5f:36:5c:36:aa:c2:0c:04:0e:
         9d:fb:8a:7b:9e:fa:22:f3:74:1a:2a:6e:99:b1:68:97:db:05:
         92:a9:7b:5c:23:26:6d:46:3c:42:31:4d:d9:6f:c5:48:81:eb:
         b2:a3:3f:20:1e:99:d1:b4:2d:e2:cb:4c:f3:65:f0:71:36:93:
         ef:1e:cb:71:52:3f:d9:00:73:72:88:42:ae:42:d0:8d:3a:22:
         fb:88:9c:31:de:67:ea:d3:cc:17:84:02:a9:0c:9b:69:4e:f3:
         01:a7:f0:f1:e4:c6:20:be:d5:06:50:e2:12:a1:a6:75:ee:a2:
         92:cd:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----