Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9bb8ca628a4bb9c53732de54cc9f56a9ebdff817.roa
File:                     9bb8ca628a4bb9c53732de54cc9f56a9ebdff817.roa (raw, json)
Hash identifier:          FuJauyEN15MrkJJUhn1jDPpAB94VW7gHfqSDySm36G4=
Subject key identifier:   B9:43:1E:D4:71:03:F9:6F:2D:E4:8F:19:1B:C4:35:54:97:ED:6E:CA
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0B8A2E
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9bb8ca628a4bb9c53732de54cc9f56a9ebdff817.roa
Signing time:             Sun 14 Aug 2022 01:16:05 +0000
ROA not before:           Sun 14 Aug 2022 03:00:00 +0000
ROA not after:            Mon 14 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756270 (0xb8a2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug 14 03:00:00 2022 GMT
            Not After : Aug 14 03:00:00 2023 GMT
        Subject: CN=9bb8ca628a4bb9c53732de54cc9f56a9ebdff817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:75:89:52:54:41:56:da:84:d6:e0:05:00:
                    dd:89:cd:4e:dc:a6:75:f3:bf:00:28:0c:ff:05:76:
                    99:46:03:b4:41:4b:1c:bc:1b:30:22:94:8a:fb:fc:
                    39:f6:ed:fc:38:7f:e6:40:c2:ee:6e:85:bc:e8:62:
                    93:91:16:e9:8f:e6:30:f9:bb:f7:5c:a7:4f:60:a0:
                    14:72:ab:36:e0:18:59:e3:fb:b9:5f:7e:1c:15:b9:
                    0f:43:6d:ee:32:12:b0:ce:90:dd:70:81:d3:da:65:
                    4a:e5:51:3c:50:50:86:36:2e:c8:db:89:cf:f8:98:
                    9a:7d:c3:41:b0:9e:59:9d:ec:d4:d0:ce:71:7b:b6:
                    a3:0e:76:46:4c:48:6a:39:8b:31:e7:30:ff:bb:c4:
                    80:b8:07:1d:3d:19:ca:3c:10:23:3a:45:ae:8e:7c:
                    c3:6f:18:ab:42:db:c6:d9:f9:19:64:82:55:f0:cc:
                    fa:de:b9:bf:cb:e7:ef:3a:00:1d:81:4f:39:0d:7e:
                    7e:3d:00:3b:15:05:8f:be:b6:20:52:74:b5:56:57:
                    6d:15:58:f4:dd:7c:08:26:17:13:63:a6:0b:3c:dc:
                    3c:25:46:c2:e6:4c:57:92:4a:76:ca:16:e6:8b:aa:
                    2b:8c:92:5e:29:db:63:b3:8f:16:20:af:a1:a3:31:
                    b7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:43:1E:D4:71:03:F9:6F:2D:E4:8F:19:1B:C4:35:54:97:ED:6E:CA
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9bb8ca628a4bb9c53732de54cc9f56a9ebdff817.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:d8:ec:bf:ae:78:49:ba:af:c5:8e:5d:d3:4a:b0:b9:1f:
         fc:cc:f4:5d:37:65:74:ff:55:e6:23:b7:8f:97:b6:74:68:4b:
         c7:a1:23:ea:8c:3f:70:e9:89:43:fa:9b:c0:8a:e7:c6:c6:ab:
         00:dd:68:a0:f2:2c:8a:b1:81:9c:37:4d:ba:ca:89:68:06:90:
         46:cd:5a:1b:17:da:35:96:f7:37:6c:d5:ff:eb:84:7f:3f:81:
         07:8d:1f:0b:42:80:d1:df:9c:71:7b:fb:3c:d8:0f:27:62:79:
         2c:6e:99:6c:70:86:4c:7c:6c:7f:48:d4:b1:09:1c:2e:1f:6a:
         46:91:d9:d4:ac:a3:ee:6e:43:67:90:2a:3f:00:4b:8a:12:23:
         30:66:6f:c9:fe:f7:33:bf:40:2b:9b:22:4d:86:75:76:d2:d7:
         df:54:1a:b9:2e:df:7b:53:3f:99:33:d6:a9:73:17:26:05:44:
         62:1b:ff:10:78:c4:7c:10:69:fa:5b:84:2b:7e:36:6d:70:90:
         5e:e4:c3:ee:f7:47:1d:e2:d7:df:47:02:45:8b:ba:fe:72:71:
         69:8d:9c:31:3b:b4:89:25:c0:33:fb:90:1f:72:bd:76:d3:dc:
         98:8e:20:ba:10:ae:db:5a:0c:bf:8e:0b:d5:f0:83:c3:3c:63:
         51:84:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----