Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/94e9af6c0c0357c2cc81a014b0f51511a294f200.roa
File:                     94e9af6c0c0357c2cc81a014b0f51511a294f200.roa (raw, json)
Hash identifier:          WKJtR53YbKXTwmrn89rH7ZI+UO8KMSjFkTZRngLQGqI=
Subject key identifier:   89:DA:E6:2B:1B:04:7C:61:B0:36:96:A8:E1:32:C6:B5:80:68:64:18
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       055CC2
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/94e9af6c0c0357c2cc81a014b0f51511a294f200.roa
Signing time:             Sun 27 Mar 2022 04:47:01 +0000
ROA not before:           Sun 27 Mar 2022 03:00:00 +0000
ROA not after:            Mon 27 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351426 (0x55cc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 27 03:00:00 2022 GMT
            Not After : Mar 27 03:00:00 2023 GMT
        Subject: CN=94e9af6c0c0357c2cc81a014b0f51511a294f200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:81:c7:8d:73:a4:68:55:42:84:c1:9c:7b:b7:
                    06:28:50:d5:90:b1:a0:12:a2:bb:c7:15:ac:f5:83:
                    7f:c0:08:bd:54:b7:a9:02:9a:85:79:c4:a8:67:12:
                    67:78:47:cf:a1:bd:c7:48:6f:d3:26:10:c2:8d:41:
                    17:b7:0c:98:5f:5a:8d:4f:df:17:f3:8b:ef:4a:b8:
                    af:aa:82:7a:b3:7d:0c:53:03:10:69:da:1d:99:24:
                    7c:54:f1:49:7a:35:9c:f9:87:13:31:80:d0:1a:8f:
                    60:6c:1c:f7:00:d5:b9:97:35:e0:14:b6:3a:0b:d5:
                    91:0a:25:35:42:e4:41:9a:a1:ef:d5:f9:75:d1:4f:
                    d3:a5:25:f3:60:7c:0a:ca:2a:63:12:a4:2a:2c:07:
                    31:cf:98:f4:55:01:01:20:eb:7f:4f:fd:86:b5:0b:
                    e1:24:48:44:82:a2:e7:80:13:34:4b:09:c5:a8:3a:
                    01:b9:28:26:f8:ef:c2:92:2e:39:0e:fc:68:b8:78:
                    29:82:b2:60:7f:d2:fb:af:e6:87:55:15:63:5a:47:
                    63:3c:ca:26:e7:b1:11:45:a1:02:59:60:6a:a0:54:
                    30:cc:0c:86:0d:30:1f:c0:44:28:86:cf:06:31:89:
                    a4:5e:81:8d:0d:ea:80:f3:45:4a:e8:9b:be:39:37:
                    49:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:DA:E6:2B:1B:04:7C:61:B0:36:96:A8:E1:32:C6:B5:80:68:64:18
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/94e9af6c0c0357c2cc81a014b0f51511a294f200.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:5a:31:8d:54:89:e9:e1:85:f2:d2:36:44:5d:8d:8a:d5:ac:
         bc:ea:1a:d8:23:01:99:a9:57:52:a4:4f:a3:93:c3:08:50:ba:
         32:c2:6e:e8:a3:f6:2a:54:3e:28:bb:aa:87:f5:23:ad:22:60:
         ce:0a:5e:90:82:68:a8:8d:12:62:fe:5c:1c:53:ec:7c:32:0d:
         22:0c:82:50:c8:6a:c8:1a:f5:66:e1:df:ba:61:7d:23:7c:a8:
         87:2d:df:0a:7f:29:a0:e3:0b:bb:a2:e3:3c:29:d6:bf:c3:a9:
         56:94:99:71:a4:cb:4d:66:e0:99:f7:66:75:14:ad:b9:67:bb:
         de:af:2f:3b:05:2e:50:41:c6:d5:dc:55:d2:26:bd:c8:a2:1a:
         46:90:69:36:63:7f:4c:83:ae:2f:34:6b:ad:e9:21:74:40:ba:
         d2:3e:73:00:bc:c1:12:69:b8:0d:6f:54:d9:9a:b0:60:80:a6:
         79:66:96:3a:00:cb:7b:48:38:91:00:30:b7:7e:aa:7e:ae:40:
         62:9c:6b:a7:a0:70:1c:d7:d2:7c:73:51:d0:09:50:d2:5e:9b:
         41:13:83:aa:a8:82:88:42:b7:e5:e3:a5:bd:2a:92:11:9c:d0:
         fd:b5:a0:38:29:21:29:dd:f3:1d:90:8b:9e:a0:17:b7:74:83:
         f2:31:be:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----