Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7394dfe28818847fe5058d182d8ac4a30221116c.roa
File:                     7394dfe28818847fe5058d182d8ac4a30221116c.roa (raw, json)
Hash identifier:          avJI2UDbafn8f0C216kB4jVfMmNV8z4Yg9M+w+/5TXk=
Subject key identifier:   F7:13:B7:74:B3:8B:AB:05:74:9E:CB:D5:0C:C0:6E:DB:6C:03:B5:5B
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       03F62D
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7394dfe28818847fe5058d182d8ac4a30221116c.roa
Signing time:             Thu 24 Feb 2022 04:58:51 +0000
ROA not before:           Thu 24 Feb 2022 03:00:00 +0000
ROA not after:            Fri 24 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259629 (0x3f62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 24 03:00:00 2022 GMT
            Not After : Feb 24 03:00:00 2023 GMT
        Subject: CN=7394dfe28818847fe5058d182d8ac4a30221116c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:34:af:79:10:2a:0b:9f:ab:12:c5:be:3f:d6:
                    08:b5:d4:5c:fc:c5:51:86:55:97:91:5c:4d:20:6b:
                    0f:80:16:54:4b:b9:b2:27:70:78:51:11:c4:02:cc:
                    09:f0:0e:69:88:77:cd:03:80:1b:d1:ce:27:7f:07:
                    d6:28:58:99:d4:d5:0d:ab:51:65:4d:d9:b2:ea:35:
                    89:42:fa:49:10:10:47:34:8d:8c:a1:62:60:f3:76:
                    48:97:e4:c6:69:4b:95:b3:6a:6b:a1:c5:be:c8:ae:
                    0d:97:1b:76:39:66:9c:29:33:af:1f:9c:51:bb:e4:
                    11:92:ea:7b:cc:8d:0c:b2:87:6a:57:5b:59:36:89:
                    eb:37:e6:a1:74:4d:3e:9e:97:4d:72:07:2f:96:83:
                    3a:df:fd:97:9a:9d:79:19:95:ac:bc:42:ec:31:74:
                    7c:aa:8d:fe:ab:96:01:92:b9:b2:b7:ab:49:a0:a0:
                    10:a2:fb:25:bb:b0:8f:bf:eb:45:bc:ee:46:40:28:
                    65:e2:a2:0c:04:ec:df:d5:85:14:e6:93:36:66:f8:
                    66:25:d4:31:bc:ef:88:a8:c4:fb:e9:b4:f7:b6:96:
                    03:3a:a3:7c:48:1e:f6:4a:a8:83:82:bb:4e:4d:3d:
                    50:29:ef:a6:bf:6b:13:5a:97:b0:b6:89:d8:db:78:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:13:B7:74:B3:8B:AB:05:74:9E:CB:D5:0C:C0:6E:DB:6C:03:B5:5B
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7394dfe28818847fe5058d182d8ac4a30221116c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:c7:4d:86:03:2e:2a:44:f2:e8:a2:d6:25:d8:57:12:c2:95:
         e4:47:53:3f:ee:7e:02:6d:14:b0:ec:ad:1a:f5:1b:b4:bf:f1:
         2d:6c:47:33:10:9f:a9:b1:44:0b:79:4d:45:8d:dc:3b:65:f8:
         5c:b9:26:c7:7a:8a:ce:68:c2:28:0e:09:7e:60:f0:78:b2:cb:
         d8:bb:e2:55:fa:d9:31:7a:1d:90:d6:25:19:d2:81:bb:dd:9c:
         8e:97:e8:ec:9f:a3:ab:30:e7:14:6e:e2:a7:c5:69:f8:c1:69:
         6d:d2:72:b0:9d:d4:4b:c0:94:c7:0b:68:b9:26:91:1a:7d:fa:
         84:b9:a2:a7:5a:c9:d7:7b:55:84:f2:a1:fc:bc:df:df:ee:d1:
         03:2d:f0:3f:74:0f:51:48:0f:fb:66:80:10:82:de:df:c0:15:
         6e:72:b7:3f:24:2e:6b:69:0b:47:2b:03:54:4c:31:f1:8c:cd:
         7f:98:36:8b:69:e0:05:59:5f:1f:68:18:9f:68:78:41:cb:ce:
         46:bf:6e:d3:5f:ab:a0:67:42:e8:b2:50:08:1f:c1:54:d7:05:
         7f:13:48:3f:70:a0:b1:06:70:ea:f3:f3:a4:fc:30:24:4d:62:
         7e:17:48:4b:5d:cd:0d:8b:86:f1:5b:8f:af:60:e9:82:49:77:
         79:7a:2f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----