Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5f68d22d504b680d677a013d80a4efa5c601a08e.roa
File:                     5f68d22d504b680d677a013d80a4efa5c601a08e.roa (raw, json)
Hash identifier:          P3TEzF/Anb9KvhdQAv4I7VzefthK93inXJDuKUpVgm8=
Subject key identifier:   33:82:2A:0F:77:E5:87:71:DB:B1:EC:2B:0F:90:E5:C6:2E:EE:5E:76
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0900B9
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5f68d22d504b680d677a013d80a4efa5c601a08e.roa
Signing time:             Thu 16 Jun 2022 05:10:53 +0000
ROA not before:           Thu 16 Jun 2022 03:00:00 +0000
ROA not after:            Fri 16 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590009 (0x900b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 16 03:00:00 2022 GMT
            Not After : Jun 16 03:00:00 2023 GMT
        Subject: CN=5f68d22d504b680d677a013d80a4efa5c601a08e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:70:45:ee:00:c4:98:b6:cc:15:df:58:e2:1a:
                    d4:29:8a:ff:b0:c7:ac:41:50:92:03:38:a5:e0:75:
                    78:d8:0a:f2:5b:14:88:13:94:25:a5:38:4e:cf:ab:
                    fc:eb:a9:ec:45:e9:c4:81:31:5e:7c:79:76:21:7b:
                    b9:94:5b:93:96:2b:04:6e:31:8c:a8:8e:a0:98:68:
                    68:92:26:40:fb:7e:ed:ff:90:d5:47:52:5e:03:25:
                    ac:36:83:2a:40:97:dc:23:2c:9d:9f:3e:d4:4d:bd:
                    9a:a0:4a:ed:64:6b:a4:21:9b:ef:2f:99:e8:09:60:
                    f0:80:bc:d1:e3:a8:a8:8e:81:48:22:fb:ee:42:fc:
                    6b:f0:37:2a:a3:ea:5c:13:be:15:75:5b:eb:a9:27:
                    41:e9:c4:b7:0c:91:57:ec:d8:4a:4d:2c:5c:3a:9f:
                    80:ec:f4:06:c8:89:ba:1f:37:d9:50:c2:81:a3:02:
                    f5:f8:10:b1:ab:a3:fc:da:86:1b:ee:24:f2:89:21:
                    0b:41:bc:70:bf:dd:63:ac:2d:9e:b4:ef:28:cb:aa:
                    81:94:c5:f6:61:be:3d:0c:a3:9e:33:f0:69:f6:f4:
                    4b:74:ad:e8:52:c1:c2:e8:e7:e9:b4:cf:87:9d:78:
                    44:96:d8:cd:d9:f0:2f:46:f0:bb:ac:0a:2f:b7:ca:
                    3f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:82:2A:0F:77:E5:87:71:DB:B1:EC:2B:0F:90:E5:C6:2E:EE:5E:76
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5f68d22d504b680d677a013d80a4efa5c601a08e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:a0:0d:68:72:54:6a:6e:8f:90:79:31:12:55:08:5f:ee:c1:
         9d:10:4a:60:13:2e:25:d4:16:a8:89:57:6e:d2:f3:41:7b:be:
         11:e5:7e:05:0c:3b:5d:6a:31:3a:91:05:56:44:8b:78:b2:e5:
         d6:f4:5c:ed:bb:a1:d6:d9:05:7c:1a:08:53:74:24:26:04:7d:
         5e:97:27:a5:b9:69:67:5c:59:99:65:04:62:23:b7:aa:8a:0b:
         72:dd:c1:13:fd:d0:38:e3:00:d3:09:fb:3e:f6:59:fb:37:31:
         12:56:40:ac:ab:54:0b:6c:ef:b6:02:ef:54:8b:5d:2d:de:ed:
         36:6a:c1:b2:00:ce:1b:8a:47:fe:07:1f:ca:80:17:04:76:40:
         12:8c:66:da:31:6c:9b:fa:03:88:88:b4:ae:fc:27:e3:7b:61:
         14:cd:a8:dd:df:31:0b:c6:84:e3:ca:3f:28:1e:33:59:57:71:
         e8:9c:ec:92:d2:cb:65:20:bd:c5:9d:36:d5:04:ac:5b:1a:5d:
         98:02:ba:07:63:b4:26:35:1b:9a:37:5f:16:82:7e:03:ce:fc:
         2e:4a:c1:64:eb:20:b6:56:8c:25:ad:80:08:67:e9:38:2f:d4:
         0c:78:4c:94:8c:62:c5:6d:16:db:ae:4c:39:7f:fb:d7:8b:49:
         cc:3a:ec:75
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCQC5MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNjE2
MDMwMDAwWhcNMjMwNjE2MDMwMDAwWjAzMTEwLwYDVQQDEyg1ZjY4ZDIyZDUwNGI2
ODBkNjc3YTAxM2Q4MGE0ZWZhNWM2MDFhMDhlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtHBF7gDEmLbMFd9Y4hrUKYr/sMesQVCSAzil4HV42AryWxSI
E5QlpThOz6v866nsRenEgTFefHl2IXu5lFuTlisEbjGMqI6gmGhokiZA+37t/5DV
R1JeAyWsNoMqQJfcIyydnz7UTb2aoErtZGukIZvvL5noCWDwgLzR46iojoFIIvvu
Qvxr8Dcqo+pcE74VdVvrqSdB6cS3DJFX7NhKTSxcOp+A7PQGyIm6HzfZUMKBowL1
+BCxq6P82oYb7iTyiSELQbxwv91jrC2etO8oy6qBlMX2Yb49DKOeM/Bp9vRLdK3o
UsHC6OfptM+HnXhEltjN2fAvRvC7rAovt8o/tQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFDOCKg935Ydx27HsKw+Q5cYu7l52MB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzVmNjhkMjJkNTA0YjY4MGQ2NzdhMDEzZDgwYTRlZmE1YzYwMWEwOGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEASKANaHJUam6P
kHkxElUIX+7BnRBKYBMuJdQWqIlXbtLzQXu+EeV+BQw7XWoxOpEFVkSLeLLl1vRc
7buh1tkFfBoIU3QkJgR9XpcnpblpZ1xZmWUEYiO3qooLct3BE/3QOOMA0wn7PvZZ
+zcxElZArKtUC2zvtgLvVItdLd7tNmrBsgDOG4pH/gcfyoAXBHZAEoxm2jFsm/oD
iIi0rvwn43thFM2o3d8xC8aE48o/KB4zWVdx6JzsktLLZSC9xZ021QSsWxpdmAK6
B2O0JjUbmjdfFoJ+A878LkrBZOsgtlaMJa2ACGfpOC/UDHhMlIxixW0W265MOX/7
14tJzDrsdQ==
-----END CERTIFICATE-----