Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/81e1a9f51ce46f62f1ea9dd8d4d8d8478f10762d.roa
File:                     81e1a9f51ce46f62f1ea9dd8d4d8d8478f10762d.roa (raw, json)
Hash identifier:          HR4Z3OMR9UJbIBZwVTmcpKqqVbOFp41vKVSluVk2FdQ=
Subject key identifier:   28:8D:0D:64:A2:38:17:2C:69:32:41:3F:06:48:E6:58:75:58:00:5D
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0F1CAC
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/81e1a9f51ce46f62f1ea9dd8d4d8d8478f10762d.roa
Signing time:             Sun 30 Oct 2022 00:38:49 +0000
ROA not before:           Sat 29 Oct 2022 03:00:00 +0000
ROA not after:            Mon 30 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990380 (0xf1cac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 29 03:00:00 2022 GMT
            Not After : Oct 30 03:00:00 2023 GMT
        Subject: CN=81e1a9f51ce46f62f1ea9dd8d4d8d8478f10762d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:96:04:80:ca:8b:a0:a1:eb:02:db:f0:02:17:
                    8e:f1:65:9c:85:01:aa:d7:84:8d:6f:bd:30:37:ab:
                    3b:dc:62:7b:2a:b0:0d:38:07:74:d9:f9:0f:18:77:
                    48:91:05:00:fa:29:c3:26:82:75:23:18:33:ba:28:
                    ce:10:00:c2:04:5e:41:30:6a:7c:dd:12:5f:ec:e7:
                    c8:c0:45:b4:3b:a8:88:50:85:c5:54:e1:87:af:21:
                    7a:5f:f1:66:3c:8a:df:77:04:87:e4:2e:eb:4e:07:
                    62:53:44:51:54:2b:ca:80:56:80:bd:f2:a1:49:d3:
                    98:97:90:e7:02:e3:ce:40:9f:31:19:ea:47:88:a0:
                    8a:60:14:01:3c:0e:cd:49:b1:10:e4:8a:43:6b:3a:
                    d6:16:2d:c3:b6:27:e7:8b:9d:87:76:b0:c4:22:f6:
                    4e:71:32:97:17:fc:7f:61:93:ed:90:88:7c:20:bc:
                    09:92:cd:ed:17:61:85:ee:a3:52:d8:71:49:e0:fe:
                    5b:c6:dd:a3:38:12:d2:d3:e2:94:1f:dd:0e:15:90:
                    a2:b3:54:bc:ed:55:93:bd:92:11:6e:2f:6b:eb:f0:
                    0c:f7:3b:c1:da:1b:37:73:97:32:7e:72:83:2b:31:
                    54:0a:68:0b:16:62:52:e2:15:49:6a:80:89:87:de:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8D:0D:64:A2:38:17:2C:69:32:41:3F:06:48:E6:58:75:58:00:5D
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/81e1a9f51ce46f62f1ea9dd8d4d8d8478f10762d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:19:01:7d:e3:4c:1e:48:e5:73:3d:98:52:63:c3:18:22:93:
         8e:cc:8b:4d:b8:c0:54:85:ab:c6:55:16:f5:d8:06:50:d0:70:
         50:97:de:18:cd:c7:fa:a3:42:6e:ff:68:34:61:f5:75:eb:f0:
         66:92:66:4a:b9:a0:0d:29:2f:fc:71:4d:4f:de:e6:c0:8a:73:
         0f:d0:19:bc:16:b2:b6:81:4a:05:e0:13:9f:6b:9b:3f:7c:43:
         20:22:6b:bd:d5:a2:bf:7b:a6:3e:9d:55:a7:11:0d:73:ec:ff:
         bd:ac:f4:4a:12:36:87:a8:5f:4b:6b:ea:be:ea:ef:b0:7a:48:
         41:0f:08:42:b6:d0:4c:60:e7:fd:ff:1e:5b:0c:22:0d:9e:a5:
         ac:f4:a7:a9:b0:e4:99:42:84:52:b1:56:b6:db:ae:f1:4e:fa:
         0f:5d:bc:19:a6:d7:ba:b3:47:8f:62:84:d0:12:9f:2e:14:30:
         a4:0c:8f:3e:f7:b5:94:78:d2:52:6c:6c:e0:d1:bb:ea:95:be:
         07:1b:d2:a0:f2:20:8b:37:0e:ac:d2:2a:2d:a6:cf:6e:df:f7:
         10:5a:76:0e:ae:e4:74:31:e4:b0:55:e9:15:15:f9:ad:d7:54:
         e2:59:85:5e:c2:04:cf:20:f8:d3:34:f3:63:bd:0e:ba:34:72:
         d8:bd:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----