Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a7aaf4b05a2906d9eaa70373ca9bbafdefc91d21.roa
File:                     a7aaf4b05a2906d9eaa70373ca9bbafdefc91d21.roa (raw, json)
Hash identifier:          U9O68Clnqw9W7tk59KGlkx0kfSguhcJu7RRb/nPe5Lc=
Subject key identifier:   9D:25:59:CB:0B:EB:5B:48:06:42:6A:99:FC:13:8B:0C:1E:DD:84:EB
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0C2324
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a7aaf4b05a2906d9eaa70373ca9bbafdefc91d21.roa
Signing time:             Sat 27 Aug 2022 02:56:38 +0000
ROA not before:           Sat 27 Aug 2022 03:00:00 +0000
ROA not after:            Sun 27 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795428 (0xc2324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug 27 03:00:00 2022 GMT
            Not After : Aug 27 03:00:00 2023 GMT
        Subject: CN=a7aaf4b05a2906d9eaa70373ca9bbafdefc91d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:c3:15:d4:e9:ac:b5:63:c8:b9:40:a7:79:
                    3f:5d:c2:30:29:8d:7c:50:8b:12:8f:64:dd:3c:c5:
                    b0:23:10:05:d1:6c:fe:e0:ca:79:3a:e8:23:4f:10:
                    e1:2f:bd:e2:c7:6a:1f:58:71:9c:aa:3b:0a:45:e4:
                    3c:ed:0c:18:6d:c9:82:fe:17:29:b7:15:65:ac:48:
                    77:a7:ae:33:5c:ff:4b:aa:65:d9:6a:38:6d:c5:71:
                    d1:03:3c:13:0b:13:cf:a5:cc:98:41:d0:3d:e3:93:
                    18:93:3d:92:ab:f5:15:43:be:d5:67:37:ac:81:97:
                    85:24:b4:1d:2b:a6:a0:7e:07:b3:5d:a2:be:f9:bb:
                    98:12:54:99:9d:01:a4:bc:7e:fd:f6:b1:0c:36:8c:
                    28:f5:de:2b:4f:59:dd:89:8e:c5:f2:b6:65:9c:34:
                    da:60:8b:80:68:13:f5:e0:ca:c2:99:ee:3e:3f:12:
                    c1:a1:41:db:b8:1f:b2:a9:60:0f:81:23:eb:24:11:
                    10:40:30:b6:bf:d1:43:29:b5:e8:79:08:a5:00:8e:
                    90:ae:e7:ff:41:62:ea:ac:b3:fc:1e:73:0e:bb:4f:
                    3c:27:05:23:6f:2d:07:4b:5b:eb:5e:d9:55:dc:5c:
                    f7:4b:54:66:02:97:09:1e:e7:11:9e:e4:a2:da:08:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:25:59:CB:0B:EB:5B:48:06:42:6A:99:FC:13:8B:0C:1E:DD:84:EB
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a7aaf4b05a2906d9eaa70373ca9bbafdefc91d21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:2d:dc:ce:23:70:35:e9:20:55:0e:dc:b7:7c:f2:fe:a7:43:
         a4:02:0b:46:f8:c5:84:c8:de:09:e2:07:96:8d:71:2e:6c:45:
         4c:38:40:54:3f:8f:89:d3:64:4e:f4:97:16:cf:ab:ff:ab:8e:
         45:dd:26:bc:0c:d8:e0:86:ce:55:ba:94:4d:c9:f6:47:2e:f1:
         0a:7e:4b:ee:98:32:f8:50:48:f3:69:13:f4:48:8b:75:fe:2d:
         7e:58:b3:fb:2d:e7:f2:cb:06:58:ed:04:74:2c:e0:0a:79:46:
         13:3d:81:bd:58:13:25:9d:7d:01:98:96:7b:a8:d4:ae:dc:6a:
         ff:6a:68:89:5a:f1:1e:eb:d3:1b:46:47:01:e6:b3:a9:a5:8f:
         eb:83:bf:bc:61:23:5b:36:34:47:75:56:2b:54:85:bf:62:0a:
         1b:c4:07:db:2b:89:81:20:75:40:fe:82:0f:38:a2:05:7e:4e:
         39:fe:74:11:0f:9a:72:d9:9e:b3:a1:c3:11:3d:10:d4:c9:6c:
         a2:55:dd:07:3f:cb:06:79:7b:38:6e:ad:9f:c7:4f:5c:75:83:
         bb:be:9a:f2:47:7d:8c:60:f3:35:5f:99:c9:1f:07:50:c7:26:
         f1:cb:b2:fb:2d:dc:72:53:71:07:75:d4:4e:7e:5a:d7:08:50:
         77:62:93:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----