Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/aa8cf69b74608d08c0faa912f4324ec9d8b790a8.roa
File:                     aa8cf69b74608d08c0faa912f4324ec9d8b790a8.roa (raw, json)
Hash identifier:          /Nz2Ltm9cFaA8pmPY+HKGcQj6w79rhYC+TLsWfHHvpQ=
Subject key identifier:   8C:E1:BD:E3:1B:C0:32:D6:20:41:1C:CD:E5:E2:57:71:EB:ED:AF:A7
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0A4456
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/aa8cf69b74608d08c0faa912f4324ec9d8b790a8.roa
Signing time:             Fri 15 Jul 2022 04:23:52 +0000
ROA not before:           Fri 15 Jul 2022 03:00:00 +0000
ROA not after:            Sat 15 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672854 (0xa4456)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 15 03:00:00 2022 GMT
            Not After : Jul 15 03:00:00 2023 GMT
        Subject: CN=aa8cf69b74608d08c0faa912f4324ec9d8b790a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:07:30:fe:bb:51:6f:c9:05:21:ce:37:08:
                    5e:1c:1d:8e:ef:39:d8:04:b4:66:2e:a9:c2:20:6f:
                    27:80:2d:6d:a3:c4:6a:12:64:f2:54:70:32:7f:b7:
                    dc:3a:18:28:75:09:0a:8e:c2:62:f5:95:34:c7:e3:
                    cd:02:05:16:32:eb:a3:66:c8:92:e5:4a:1f:b6:3d:
                    e9:45:ec:ad:98:39:0c:b0:4f:cd:5c:9e:02:93:0f:
                    66:eb:7b:fe:d3:2f:b0:39:ea:f7:e5:fb:70:12:bd:
                    26:4c:c9:34:2b:9d:4d:01:88:5a:28:47:8b:0d:7a:
                    42:99:c4:39:01:e1:20:c1:2b:e6:e0:98:f5:6d:bd:
                    e0:32:da:9e:4f:e4:e8:1a:cc:16:f6:d7:2d:71:97:
                    98:08:fd:be:41:17:e6:f6:4a:f8:c3:99:ca:18:14:
                    ab:91:33:90:06:dd:70:6f:49:29:70:b7:b7:93:bc:
                    2e:9c:04:35:f9:a8:39:0f:43:6b:a2:e1:e5:27:06:
                    49:ae:67:db:5e:93:3c:1b:3c:f7:02:ef:13:2b:85:
                    4c:75:13:96:3a:bc:47:a3:7e:01:e9:01:aa:85:f2:
                    54:4f:13:cc:89:b1:64:07:e0:58:a3:2d:53:ab:1f:
                    17:75:52:ee:56:6c:60:fa:25:fc:9c:db:8e:55:a8:
                    76:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:E1:BD:E3:1B:C0:32:D6:20:41:1C:CD:E5:E2:57:71:EB:ED:AF:A7
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/aa8cf69b74608d08c0faa912f4324ec9d8b790a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:00:f8:1f:b6:2e:33:e1:07:d3:6c:a3:6f:23:51:f9:3d:d5:
         64:f9:5d:8a:41:db:71:f1:f8:2c:dd:f1:d1:d7:2d:b3:4c:2b:
         ba:3b:9e:37:8c:50:19:68:4e:bb:01:5c:d1:0e:2b:6e:49:7b:
         e3:a7:16:0e:92:8f:de:a3:39:fb:b8:f1:88:08:01:49:5d:14:
         9e:d1:6f:e0:d0:0f:2a:9f:ef:ec:6d:e4:39:05:af:85:42:33:
         b4:42:a9:8a:53:63:86:9b:78:cc:d3:17:47:13:a8:34:bd:bf:
         3d:99:ed:87:4f:de:79:ee:a0:e1:dc:5e:07:22:f7:81:a8:79:
         f0:a7:6f:2f:2c:1e:04:98:ba:fd:1e:d9:0a:db:59:06:70:d1:
         a7:a6:ab:7b:70:40:7a:11:b3:a9:d7:f3:04:fa:4f:da:42:5f:
         d7:d6:8c:1c:ef:f1:a8:b1:58:d9:1b:59:23:6e:6a:28:36:6c:
         c3:bc:1e:f6:4b:0a:74:b7:fb:9b:2a:d7:c7:55:9c:eb:e2:e1:
         4c:bf:41:17:71:a1:ea:30:9e:c2:21:44:c1:39:49:cc:ee:1d:
         e9:70:e9:2b:bd:5b:a1:37:44:5e:18:5a:47:44:4d:e8:e6:1d:
         dd:b8:1b:1c:97:24:f4:61:73:5a:53:27:cb:26:2e:24:f7:d1:
         80:1d:b6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----