Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d3a996ca694dbf91307e739c74f87651196040df.roa
File:                     d3a996ca694dbf91307e739c74f87651196040df.roa (raw, json)
Hash identifier:          MQduPrxp1iXKa/kfLCHUmXd3NImxbd80m3/VpUACTo8=
Subject key identifier:   32:FA:79:40:D0:0B:DE:70:2F:7E:DC:59:C4:8F:FE:A2:2E:AC:21:9A
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       084499
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d3a996ca694dbf91307e739c74f87651196040df.roa
Signing time:             Mon 30 May 2022 01:59:56 +0000
ROA not before:           Mon 30 May 2022 03:00:00 +0000
ROA not after:            Tue 30 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541849 (0x84499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 30 03:00:00 2022 GMT
            Not After : May 30 03:00:00 2023 GMT
        Subject: CN=d3a996ca694dbf91307e739c74f87651196040df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d1:63:8d:42:c0:af:53:72:69:dc:cd:a3:e2:
                    2a:e0:cb:68:ea:ec:04:c2:36:d0:2a:d9:63:dd:4a:
                    66:62:30:82:b8:b4:4f:c5:bf:5e:af:7c:aa:08:b5:
                    26:cd:f7:72:36:d6:f1:a1:94:82:74:53:55:7e:a5:
                    4d:b7:e4:10:d5:14:09:57:a3:6a:42:01:c8:a8:3c:
                    15:c6:2d:96:6e:d9:3b:c8:2a:a8:c2:4d:6b:93:73:
                    5c:52:63:03:35:ec:87:3c:0b:6f:a1:ba:e8:4b:39:
                    ee:89:3f:ef:9d:2a:48:b7:dc:0f:2b:f5:3b:8b:0f:
                    a0:bf:8c:f2:7a:f4:00:7d:df:81:9b:c2:15:98:77:
                    04:ac:bb:99:a6:5a:16:22:dc:7e:a3:16:b9:91:22:
                    ea:31:01:c3:40:26:b6:7b:85:3e:bf:0a:9a:65:89:
                    14:7c:49:17:28:14:11:51:f9:9a:0f:8c:5c:f3:ed:
                    eb:b2:47:08:d2:89:f7:b6:eb:f6:ba:6d:ab:99:22:
                    c5:a2:ba:f2:33:aa:75:83:c9:18:d6:d2:bf:69:fc:
                    2b:59:b6:93:06:16:44:94:1a:c9:3c:19:ee:28:20:
                    2a:ef:f3:a8:1b:fb:d2:92:a8:67:99:f3:16:87:d0:
                    32:7c:4a:68:e9:43:71:4b:85:a2:c5:f1:2c:0a:0b:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FA:79:40:D0:0B:DE:70:2F:7E:DC:59:C4:8F:FE:A2:2E:AC:21:9A
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d3a996ca694dbf91307e739c74f87651196040df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:9b:68:9a:7d:94:eb:40:2c:4c:12:d6:15:4b:51:ad:e7:a8:
         62:b1:26:24:a2:43:4c:49:bb:67:14:6a:30:d2:fa:80:ca:cd:
         03:8b:a1:b9:f9:9a:76:06:a8:96:b0:51:99:96:3b:e4:51:21:
         b5:e3:85:52:d0:5c:45:ed:27:74:69:e2:3e:c7:4a:11:e3:a1:
         ff:83:83:40:78:a9:ec:da:d2:91:e3:f2:81:c3:10:c5:b3:18:
         22:22:21:ee:8b:36:37:05:8e:2b:47:9e:e6:46:57:2f:8f:4e:
         5b:99:46:7a:2f:d1:de:b9:0f:63:91:d2:69:59:98:ef:ac:d5:
         76:f2:24:de:ff:0d:69:d5:64:d2:cd:1b:16:8b:0f:4c:fb:d2:
         39:04:78:ed:1a:e4:78:5d:7c:63:d9:58:af:29:74:50:67:83:
         80:84:58:c8:2c:78:74:90:9a:71:10:fd:0c:9a:f4:2b:7f:7e:
         91:b6:2c:2a:cb:b9:7e:f1:d9:de:33:6f:17:92:f4:20:da:6c:
         1a:28:9e:4f:c8:88:94:b3:41:35:b7:dd:90:ba:65:80:88:cb:
         c1:cf:75:71:b0:0b:e1:09:f7:ec:4a:33:b0:de:44:b5:50:fc:
         72:e8:c8:d9:ba:dc:56:92:0c:ea:f2:ea:11:ba:4a:47:78:d8:
         0d:74:51:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----