Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ccd226419bfaf1a5ea6d42611bfbc6370dbeb68b.roa
File:                     ccd226419bfaf1a5ea6d42611bfbc6370dbeb68b.roa (raw, json)
Hash identifier:          ohsz4bCdGcHcBq3/sU8CLKKfRfnkDTMKZe+RIayvLiY=
Subject key identifier:   6D:4E:7F:CD:81:78:BA:BE:5F:0A:BD:37:33:E1:2E:5D:94:18:AB:6D
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       032763
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ccd226419bfaf1a5ea6d42611bfbc6370dbeb68b.roa
Signing time:             Sun 06 Feb 2022 02:41:34 +0000
ROA not before:           Sun 06 Feb 2022 03:00:00 +0000
ROA not after:            Mon 06 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206691 (0x32763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb  6 03:00:00 2022 GMT
            Not After : Feb  6 03:00:00 2023 GMT
        Subject: CN=ccd226419bfaf1a5ea6d42611bfbc6370dbeb68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:1e:3a:14:f5:2b:5e:b7:3f:3f:44:a0:2a:57:
                    00:97:a5:7e:a3:53:aa:93:78:93:f2:7e:e3:30:b4:
                    54:75:d3:39:b7:a4:c8:60:eb:89:ff:64:40:59:57:
                    9c:10:28:f3:25:5b:f2:87:01:0b:05:fb:17:3c:e0:
                    c0:ce:b7:cf:e3:03:cb:2e:ea:fe:d4:07:bb:79:8c:
                    fe:33:c1:f6:d5:4d:84:fc:af:c4:8e:e8:12:33:f3:
                    02:45:77:7a:82:70:df:81:4b:3c:d0:20:21:2d:5b:
                    0e:5f:55:3a:4d:01:ee:d7:03:cc:f0:5b:14:ae:4b:
                    9d:90:3b:da:6c:c3:a2:be:10:a1:7f:d4:8e:c1:7d:
                    07:b5:90:1b:b7:4b:81:fb:f0:95:ab:16:32:26:e7:
                    a0:49:4e:dc:d8:d4:b0:41:95:97:97:89:fe:53:e8:
                    57:82:99:f4:4d:c7:8c:32:2f:98:25:b8:4d:82:47:
                    21:1e:9d:91:40:8a:18:ad:0e:7e:88:39:16:af:34:
                    ce:26:9b:b4:85:06:47:7f:38:8b:53:d6:7a:1a:ef:
                    0a:f2:5c:df:ce:50:0d:d6:9a:bd:64:ee:d7:61:46:
                    02:49:13:46:0f:bd:cd:78:19:f9:37:42:4c:a4:a5:
                    ea:74:09:fe:df:5d:63:07:d2:d0:17:82:57:8e:d6:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4E:7F:CD:81:78:BA:BE:5F:0A:BD:37:33:E1:2E:5D:94:18:AB:6D
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ccd226419bfaf1a5ea6d42611bfbc6370dbeb68b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:0c:94:fa:a2:6a:1d:c8:55:0e:d8:c0:67:e3:43:1c:bb:ff:
         56:53:a3:1c:4c:02:1e:a3:19:76:44:3d:53:54:2d:0a:eb:85:
         c9:73:f8:c4:83:73:93:8d:74:35:aa:40:87:03:78:84:9f:72:
         89:4c:e0:50:c7:9d:a9:00:f0:63:28:9b:98:c2:34:59:1d:20:
         f3:0e:7f:74:d9:31:78:c8:30:4b:d7:32:69:30:1d:46:f0:32:
         ff:73:ad:fa:92:cc:db:36:4d:42:ba:aa:32:e1:10:34:54:a4:
         7b:2d:b0:15:3c:ff:d3:f0:a7:d8:21:e3:bd:6c:5f:3d:bf:38:
         95:4e:b6:fe:22:7b:cc:bc:45:38:3b:40:66:f1:d2:ae:80:ac:
         10:95:9d:24:f6:ec:ef:1d:92:da:9b:a7:3c:ac:7f:dc:8b:e5:
         79:c1:70:24:26:38:9f:43:08:12:69:b8:85:74:dd:2a:e5:ff:
         13:2a:04:2d:8b:40:7f:35:ac:1b:e0:53:b0:94:b6:5e:b8:3b:
         6c:17:e7:46:70:63:24:2c:b0:2c:83:13:1d:bf:ce:6d:cf:81:
         69:85:7b:0d:c1:f0:a8:72:d9:40:35:63:1b:7b:df:6b:55:f8:
         96:58:32:97:79:76:8f:c0:47:8f:04:31:0c:a1:c1:63:58:16:
         b0:46:4b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----