Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cdbfa381a2583975173f9bb29987dd56ee587cee.roa
File:                     cdbfa381a2583975173f9bb29987dd56ee587cee.roa (raw, json)
Hash identifier:          Z6wTsCRsF6wsJOhhgb0kwBMoWG16z4ZCJY6L5pTyyUU=
Subject key identifier:   B1:AA:61:D9:02:EE:D8:DC:59:07:22:AE:58:74:D3:E8:5C:A9:FD:03
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0CFD82
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cdbfa381a2583975173f9bb29987dd56ee587cee.roa
Signing time:             Wed 14 Sep 2022 05:01:02 +0000
ROA not before:           Wed 14 Sep 2022 03:00:00 +0000
ROA not after:            Thu 14 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 851330 (0xcfd82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep 14 03:00:00 2022 GMT
            Not After : Sep 14 03:00:00 2023 GMT
        Subject: CN=cdbfa381a2583975173f9bb29987dd56ee587cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:67:80:23:42:5a:7f:3e:04:e1:5d:6a:6a:8e:
                    a2:e2:28:f0:fa:9e:f5:07:92:37:ce:f3:fc:ab:94:
                    66:e4:1d:40:64:28:da:7c:ce:9f:11:25:f5:c8:31:
                    2b:75:d9:1f:31:31:00:64:20:a5:d5:68:f2:2b:7e:
                    56:40:53:1f:f9:f1:49:66:80:f4:9d:d7:f9:f1:c9:
                    4c:43:4d:3f:e7:ca:60:fb:75:e6:ba:4c:0d:b2:42:
                    8b:1e:e5:a7:2d:c3:0b:68:15:38:bb:07:8b:8d:1e:
                    13:ed:c3:3f:e2:ff:a2:0b:38:80:2d:20:ed:5f:23:
                    48:12:68:27:c7:44:16:aa:a6:fc:07:f3:7f:c1:a6:
                    44:fa:63:38:c1:89:1c:4a:de:76:c8:35:0f:53:04:
                    e6:db:d9:f4:76:6e:ba:28:2e:bf:e7:a9:63:48:37:
                    00:fd:8a:1a:f8:20:80:4b:59:6d:d1:19:81:35:79:
                    1c:ba:42:04:31:a1:ff:95:be:55:e0:12:25:7b:4c:
                    af:68:e1:35:87:3e:5a:45:44:b5:75:c9:4f:67:96:
                    3d:5e:02:ec:ee:8a:ca:4c:50:bd:c8:e0:f7:cc:d1:
                    93:81:13:29:02:2a:3f:05:97:55:46:39:85:87:6a:
                    dd:84:c5:09:d6:0d:ab:78:d3:f1:43:d6:89:b4:3e:
                    4e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:AA:61:D9:02:EE:D8:DC:59:07:22:AE:58:74:D3:E8:5C:A9:FD:03
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cdbfa381a2583975173f9bb29987dd56ee587cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:53:5b:b6:03:51:e8:d6:4d:b5:60:ed:c8:7a:8b:dc:1c:3b:
         3f:f4:b6:d6:c3:09:96:e1:9c:7f:e8:d0:88:8a:99:d8:d8:7f:
         87:b9:63:76:be:02:e1:dc:89:7f:8e:bd:a7:a3:a4:82:f7:cd:
         0c:cb:85:3e:0c:f7:04:5a:53:50:c1:cf:a3:df:1c:f6:d7:77:
         d3:5b:04:e4:52:df:ed:fc:f9:4b:81:fc:31:f1:9a:18:da:c9:
         a4:bf:99:67:27:e1:e0:69:3b:7c:34:31:28:27:c5:be:fd:2a:
         72:36:9d:e0:93:c7:22:a7:49:f8:56:a3:de:ed:51:38:0e:2f:
         40:01:ef:b1:17:b3:54:4e:99:40:a4:1d:06:5d:6a:51:7f:a0:
         40:db:a4:bb:de:97:02:4a:87:8b:56:d2:1e:4c:71:77:af:fb:
         e7:65:fa:4b:68:dc:f1:4b:66:3f:c8:8b:c0:bd:2f:7d:20:6c:
         ab:f3:4c:31:71:da:1e:29:69:13:62:61:c5:0e:28:07:d1:bf:
         5a:74:d4:11:88:67:5d:a3:44:62:86:21:07:ae:21:d8:86:01:
         05:2f:85:30:a5:ca:18:2e:7b:04:6f:6a:d0:63:1a:da:4a:f6:
         92:00:70:5e:e0:5e:9a:74:0e:02:a4:2f:87:65:da:94:e5:09:
         88:34:07:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----