Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c1e70f1731c5a528841ac3d3f3f09db71af403a2.roa
File:                     c1e70f1731c5a528841ac3d3f3f09db71af403a2.roa (raw, json)
Hash identifier:          nfgYwOKmZjs59kQ0fyBCqS60jUnXewsFYQbiwcF3LlQ=
Subject key identifier:   7A:37:CA:07:BC:5C:40:68:06:1E:CC:F1:86:99:08:96:FB:2A:80:AD
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       037D54
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c1e70f1731c5a528841ac3d3f3f09db71af403a2.roa
Signing time:             Mon 14 Feb 2022 04:04:06 +0000
ROA not before:           Mon 14 Feb 2022 03:00:00 +0000
ROA not after:            Tue 14 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228692 (0x37d54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 14 03:00:00 2022 GMT
            Not After : Feb 14 03:00:00 2023 GMT
        Subject: CN=c1e70f1731c5a528841ac3d3f3f09db71af403a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ba:10:19:93:2e:cf:1f:cd:ef:6c:95:43:19:
                    6e:fa:f7:30:7c:15:b4:84:b8:53:dd:c4:da:2e:57:
                    9c:63:17:c0:04:e5:c0:79:f4:72:68:40:81:3e:67:
                    d7:9b:ab:95:8d:08:bb:68:13:c1:af:8a:33:2c:24:
                    cb:0d:bc:32:87:aa:16:4d:e7:bc:0f:d2:26:33:ab:
                    54:6c:39:21:47:34:7f:10:70:a1:d7:bb:cc:9b:79:
                    87:55:18:79:56:95:2e:52:c3:b8:63:c2:8e:94:42:
                    11:0b:74:bd:fa:42:35:31:3b:0e:fe:89:65:3a:1c:
                    cc:e1:94:a5:cf:3b:58:67:94:a0:91:68:d9:70:01:
                    54:20:0c:b6:88:90:cf:c5:6f:19:11:fb:9e:9d:74:
                    30:18:bb:32:60:6d:d0:ea:05:5b:8b:23:e0:41:63:
                    47:18:aa:c5:d0:d6:15:b2:c1:98:44:f8:00:9c:0e:
                    ee:77:51:bf:17:4f:6d:a8:89:49:0b:63:85:2c:5e:
                    56:bd:5c:da:b6:8a:e6:06:8a:59:75:3b:49:09:8c:
                    aa:8b:bb:7e:f7:18:35:df:49:2a:47:c8:78:ba:82:
                    2b:70:22:60:33:ee:96:43:d6:9c:d0:2f:f9:7b:15:
                    d6:6f:73:2b:dd:56:f0:61:40:31:6c:f8:25:b7:00:
                    c4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:37:CA:07:BC:5C:40:68:06:1E:CC:F1:86:99:08:96:FB:2A:80:AD
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c1e70f1731c5a528841ac3d3f3f09db71af403a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:78:1e:e0:41:c9:99:d7:13:25:2b:2b:8f:b4:0b:dc:d3:f9:
         5d:ed:85:d5:c4:99:3d:59:78:38:58:6e:e0:96:ae:51:c1:ff:
         02:46:5e:1f:f1:3f:d1:b9:73:88:a5:87:6e:20:f2:bd:60:a8:
         0c:90:8e:69:79:d3:8b:7c:88:b2:78:71:f3:1c:c7:38:ee:47:
         d8:5f:43:ff:a0:2e:ce:a9:9e:8c:19:c9:b1:48:68:21:f3:0d:
         92:6e:59:4a:16:77:ba:80:56:30:15:6d:7d:0c:a8:e6:cf:7b:
         01:42:93:ae:a3:45:1d:08:ac:7b:54:c8:5b:29:81:3c:e2:b2:
         60:2e:66:45:a1:4f:8c:50:5e:43:aa:77:4a:f2:46:3e:71:f7:
         80:db:13:d0:4a:e3:75:f3:a4:d2:43:41:55:a4:c8:19:7c:92:
         b8:f8:33:d2:bf:ef:96:a8:59:a2:ba:b2:4d:7f:9a:b3:01:12:
         86:a1:1a:84:74:95:36:7c:16:36:16:20:2c:79:18:01:91:3a:
         3b:2c:23:d7:2a:8f:8b:5c:4b:b9:a6:88:32:66:f0:65:a1:4f:
         bb:06:bf:a6:56:01:f7:93:a2:e3:e8:21:67:15:99:b2:c4:dc:
         0a:b0:d3:92:9b:d8:71:62:ee:63:17:bd:7a:7e:3a:e7:f3:8d:
         7f:2b:bc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----