Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c3e009bb4af556a1ab9cf2852e4cc23ffb6f791d.roa
File:                     c3e009bb4af556a1ab9cf2852e4cc23ffb6f791d.roa (raw, json)
Hash identifier:          Fg2MkxBmf7hLXo9/rjFKN0qVqlt/dlGyOcA5mNyvo70=
Subject key identifier:   9F:66:77:B3:85:2F:37:20:C0:10:70:B7:2C:D0:C6:D1:99:DA:0B:23
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       03629E
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c3e009bb4af556a1ab9cf2852e4cc23ffb6f791d.roa
Signing time:             Sat 12 Feb 2022 02:59:49 +0000
ROA not before:           Sat 12 Feb 2022 03:00:00 +0000
ROA not after:            Sun 12 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221854 (0x3629e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 12 03:00:00 2022 GMT
            Not After : Feb 12 03:00:00 2023 GMT
        Subject: CN=c3e009bb4af556a1ab9cf2852e4cc23ffb6f791d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:6d:c8:61:0d:96:74:66:94:00:be:f2:4f:
                    d9:7c:ba:ef:aa:03:ab:27:bb:6b:b1:56:74:45:38:
                    8c:26:2a:2c:18:2e:14:16:63:f6:44:bb:5f:50:b3:
                    ea:51:87:1f:57:3d:7b:07:8d:88:66:40:91:2f:68:
                    0a:b2:31:62:65:19:f4:d2:0b:f3:f0:8f:b0:99:ba:
                    b0:6a:ba:96:d5:7c:28:5a:96:27:e3:00:83:e3:03:
                    54:2e:a9:ca:42:51:31:4f:13:4f:b2:58:d7:4b:3a:
                    a9:ae:74:ec:44:08:27:67:bd:60:30:af:2f:c2:1f:
                    91:21:e4:74:62:94:1c:5d:9c:04:cf:2a:6e:9e:f9:
                    bd:58:ec:a9:ed:82:46:b9:54:bb:0b:fe:fe:cd:73:
                    e7:38:ee:75:07:57:02:f7:23:75:1a:7d:32:26:c2:
                    26:c7:8c:34:11:92:d4:d0:90:f2:1b:e4:d4:eb:31:
                    96:b4:56:35:48:85:81:d5:69:b5:c9:bb:5e:24:b7:
                    5e:e1:0a:69:95:72:1b:9a:90:f8:e9:e5:5e:4a:3c:
                    80:77:73:63:cc:e6:b7:c7:9c:fb:4a:93:97:82:d9:
                    b1:58:dc:76:04:a0:8d:93:7c:39:7e:7c:09:ed:1e:
                    d5:f2:bd:82:d6:0a:97:27:69:a3:ba:27:41:5d:c9:
                    5a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:66:77:B3:85:2F:37:20:C0:10:70:B7:2C:D0:C6:D1:99:DA:0B:23
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c3e009bb4af556a1ab9cf2852e4cc23ffb6f791d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:f2:d8:38:55:f5:a9:d4:7c:f5:b1:4c:b3:57:e7:dd:d7:07:
         83:9b:a3:4a:6f:fa:6a:85:97:16:6e:01:d3:b4:3c:44:71:88:
         19:43:11:e8:e2:6a:dc:e4:6d:55:b8:5e:3f:93:0b:1c:5d:3f:
         7d:d5:4d:0c:33:68:83:d2:fc:bc:16:42:ce:01:5c:05:20:26:
         96:f4:df:97:e2:0b:2a:13:7c:d7:87:94:81:15:ab:ae:0e:5f:
         22:a2:cd:58:fe:b6:23:e4:68:2a:16:a9:bc:0c:52:d0:b0:4b:
         e1:0c:bd:de:70:ff:14:62:e9:1a:b1:6d:4c:84:3e:32:e7:9f:
         f3:15:ae:2d:bc:19:ef:71:3e:9c:be:ef:2a:67:5b:9b:46:54:
         8d:e5:7f:8d:e4:55:59:be:3a:19:58:27:69:05:45:54:3d:0c:
         91:b9:7e:30:92:3b:af:c5:3b:f2:6f:6f:60:b3:e5:35:23:20:
         0a:06:60:9a:61:9a:7e:af:49:b3:bb:dd:9e:52:9b:98:77:dc:
         36:60:89:9c:9f:65:d2:3a:77:10:34:74:4d:5d:70:50:af:67:
         c4:70:d2:68:0b:38:9f:90:ec:87:18:4b:95:3b:3d:ce:76:d1:
         7f:40:83:b6:d6:e1:55:3f:c4:12:c0:24:07:41:2d:48:65:98:
         eb:bf:8e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----