Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d4f072b6ed35d370508aefd30ef7e58184842c43.roa
File:                     d4f072b6ed35d370508aefd30ef7e58184842c43.roa (raw, json)
Hash identifier:          2OSiewSErh0gPO4MAMTLxcI+BgB2VcTL9fpHuVf+Goc=
Subject key identifier:   04:8A:31:CF:AB:FA:10:4F:9B:CF:5A:73:26:80:BE:9B:BE:D4:55:08
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0DF9B2
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d4f072b6ed35d370508aefd30ef7e58184842c43.roa
Signing time:             Wed 05 Oct 2022 03:28:31 +0000
ROA not before:           Wed 05 Oct 2022 03:00:00 +0000
ROA not after:            Thu 05 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915890 (0xdf9b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct  5 03:00:00 2022 GMT
            Not After : Oct  5 03:00:00 2023 GMT
        Subject: CN=d4f072b6ed35d370508aefd30ef7e58184842c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:9d:f2:ff:74:3a:16:8c:84:12:bf:a5:f6:
                    13:65:14:d1:f7:55:68:d9:d5:ac:e9:e1:42:f3:92:
                    22:82:15:7f:a7:0c:56:a7:a8:2f:15:95:69:a7:ec:
                    c0:e9:69:1d:ae:a3:43:dd:16:d3:45:34:c3:82:13:
                    dc:b2:5d:6c:64:a5:52:5b:4b:25:00:51:c1:d9:04:
                    ee:3f:9b:91:aa:7e:3b:ee:90:99:90:39:c4:ab:0f:
                    e6:5b:6f:9c:79:3f:57:0a:df:3a:aa:aa:f2:cb:b3:
                    52:45:fe:9f:d3:15:9c:e5:9b:0a:39:b2:2e:f2:5a:
                    b6:19:ff:ca:b5:c1:1c:65:55:63:f0:ef:85:fa:97:
                    88:5d:ea:d2:7f:89:b6:01:e2:0a:2b:30:44:b3:9f:
                    d9:0a:ab:f8:1f:9f:68:e2:2a:04:84:ac:18:a6:50:
                    66:e7:b8:d4:dd:cd:ac:26:67:13:7a:0e:5f:c6:d0:
                    99:08:5d:51:2a:93:bd:fa:1c:15:af:b9:e9:1a:6d:
                    e2:0f:2a:ec:82:6a:75:a9:97:9d:85:4f:81:e7:40:
                    c7:9d:2e:71:52:1b:9c:9a:91:ad:f3:1c:0a:38:94:
                    3e:63:b8:95:29:c4:d0:48:e8:71:78:fe:b4:bc:fe:
                    a9:8e:18:33:4b:63:6a:59:97:98:d4:ae:59:44:5c:
                    81:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8A:31:CF:AB:FA:10:4F:9B:CF:5A:73:26:80:BE:9B:BE:D4:55:08
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d4f072b6ed35d370508aefd30ef7e58184842c43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:93:41:32:b7:56:9c:9f:36:26:80:62:0c:57:93:6e:4d:7f:
         ca:48:c0:63:68:74:e9:47:68:c3:f5:d3:19:29:30:89:fb:e5:
         34:59:e3:47:bd:6c:26:09:d3:1e:4b:ed:a0:24:92:12:69:3c:
         f2:d2:3e:ef:e0:9d:5f:29:32:c6:5c:c4:cb:4d:5d:65:30:8a:
         4d:6d:67:3a:af:5e:90:4e:c7:b1:02:59:a3:51:e4:80:d0:cb:
         97:16:36:18:5c:b7:cf:1a:66:99:7f:af:8a:6f:b3:67:08:57:
         8a:1f:a8:4d:85:a9:69:dc:f5:ff:ad:5e:bd:fe:4b:fe:e2:77:
         fb:e3:48:88:42:0b:0a:54:44:08:e2:5c:d9:4a:8f:65:30:98:
         20:18:9e:c6:08:c2:5e:1a:ce:ed:2e:3e:74:e6:37:ff:72:b9:
         9e:79:7a:ec:e5:d1:4a:53:e1:27:57:65:c0:99:53:33:0f:b0:
         fb:fd:56:ed:c3:36:aa:35:4b:47:8a:17:13:01:61:ce:cc:1a:
         69:cc:71:10:69:3c:57:51:f7:e8:19:68:dc:2e:b1:d0:e9:98:
         39:cb:49:55:90:26:4f:45:08:89:fc:27:35:9d:cc:cc:77:d2:
         46:b0:2f:65:9d:a4:95:a8:dc:79:3a:97:cc:51:76:6a:14:5c:
         b5:ba:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----