Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d57eb6332297906b3287c1cd5556cf1589725fb0.roa
File:                     d57eb6332297906b3287c1cd5556cf1589725fb0.roa (raw, json)
Hash identifier:          XEqUHr7kGum8QXinlQnVBzI6mehwhpTd2hznH9DHkiM=
Subject key identifier:   C1:4C:82:71:C6:73:F9:CD:C5:7F:1E:01:F3:71:1C:50:7D:36:DD:21
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0401F7
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d57eb6332297906b3287c1cd5556cf1589725fb0.roa
Signing time:             Fri 25 Feb 2022 04:46:04 +0000
ROA not before:           Fri 25 Feb 2022 03:00:00 +0000
ROA not after:            Sat 25 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262647 (0x401f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 25 03:00:00 2022 GMT
            Not After : Feb 25 03:00:00 2023 GMT
        Subject: CN=d57eb6332297906b3287c1cd5556cf1589725fb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:71:74:32:5d:3b:c5:af:88:5e:0b:4b:26:85:
                    2e:60:1b:8a:ec:b0:39:f5:dd:74:d0:b9:f5:30:02:
                    41:bf:73:8f:78:77:9b:b5:9a:05:9e:1e:09:d9:21:
                    1e:88:7c:7e:8f:9b:e3:8e:b6:ca:49:b6:71:f3:87:
                    45:f9:53:ef:30:6d:2f:df:69:8a:c7:db:8f:c5:c2:
                    bb:ae:72:cd:7f:16:8a:4d:61:8a:3b:92:cd:b2:be:
                    2b:a4:56:98:34:47:fa:9a:78:96:62:99:a2:d6:1a:
                    65:16:53:6d:bd:81:43:55:47:92:4a:7b:77:fc:58:
                    8b:60:cd:86:0b:b0:c4:61:7b:12:20:d1:0a:fe:21:
                    1e:2f:c8:6f:26:10:d1:8b:36:a8:df:aa:58:dc:0c:
                    d0:7a:fc:0a:34:1f:55:b1:ab:66:ec:27:8d:ab:d6:
                    39:98:00:ce:77:5e:ae:ac:70:07:0c:06:fc:c8:54:
                    fa:f4:68:c8:5c:4e:d2:e7:75:9d:e2:45:76:ee:69:
                    05:44:f5:b0:28:00:a4:11:dd:8c:c2:33:7f:88:98:
                    25:f0:e8:b4:56:f2:dc:f2:fb:fa:b1:45:e0:a1:ed:
                    82:c0:1b:ab:06:e0:5a:05:4d:d8:e5:08:d5:75:4c:
                    45:43:b1:ae:bc:89:66:dd:a5:d0:77:c2:d1:da:75:
                    92:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4C:82:71:C6:73:F9:CD:C5:7F:1E:01:F3:71:1C:50:7D:36:DD:21
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d57eb6332297906b3287c1cd5556cf1589725fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:ed:a1:e1:3a:ea:1e:7f:5e:26:dc:91:fc:a7:87:db:90:7f:
         b7:fd:9b:ca:46:94:83:8a:54:e5:49:7b:4d:be:b7:7c:ed:21:
         f3:29:ac:94:4f:30:27:7f:70:2e:30:30:ab:dc:56:bc:ed:1e:
         14:92:3c:82:ff:85:d0:f6:b5:13:5e:7b:0a:5c:7e:54:5e:2b:
         48:98:a1:c3:b2:9f:c8:14:ed:5b:06:49:82:91:d9:d8:00:34:
         9c:9b:be:44:5b:32:89:03:a6:a8:f4:cc:c7:fd:a2:b3:fe:f7:
         ca:3a:78:69:3c:f7:04:5c:f0:74:3f:4b:6c:72:07:b1:63:f0:
         fe:5c:0f:f6:f7:26:7a:e6:49:fa:da:dc:76:3e:36:a6:34:c3:
         d0:e9:04:e5:3c:7c:a6:76:f0:7e:27:ea:cf:6f:e7:ba:4c:ce:
         88:1f:5b:bf:23:6f:79:de:71:c9:cb:96:0e:90:29:47:8c:07:
         9c:0e:3d:78:e3:71:5b:5b:88:4f:ba:a8:47:9f:b4:bf:5f:55:
         bd:e5:23:29:4c:b1:56:e4:de:2f:bc:28:de:01:af:35:12:b6:
         70:9c:f4:b7:f4:d2:6d:c8:9f:38:78:15:76:f5:7e:bc:b2:2f:
         7e:1c:7b:11:81:90:f8:22:af:87:60:32:32:09:41:f5:70:a1:
         7e:14:2c:dc
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBAH3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwMjI1
MDMwMDAwWhcNMjMwMjI1MDMwMDAwWjAzMTEwLwYDVQQDEyhkNTdlYjYzMzIyOTc5
MDZiMzI4N2MxY2Q1NTU2Y2YxNTg5NzI1ZmIwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnHF0Ml07xa+IXgtLJoUuYBuK7LA59d100Ln1MAJBv3OPeHeb
tZoFnh4J2SEeiHx+j5vjjrbKSbZx84dF+VPvMG0v32mKx9uPxcK7rnLNfxaKTWGK
O5LNsr4rpFaYNEf6mniWYpmi1hplFlNtvYFDVUeSSnt3/FiLYM2GC7DEYXsSINEK
/iEeL8hvJhDRizao36pY3AzQevwKNB9Vsatm7CeNq9Y5mADOd16urHAHDAb8yFT6
9GjIXE7S53Wd4kV27mkFRPWwKACkEd2MwjN/iJgl8Oi0VvLc8vv6sUXgoe2CwBur
BuBaBU3Y5QjVdUxFQ7GuvIlm3aXQd8LR2nWSpQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFMFMgnHGc/nNxX8eAfNxHFB9Nt0hMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjL2Q1N2ViNjMzMjI5NzkwNmIzMjg3YzFjZDU1NTZjZjE1ODk3MjVmYjAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAJe2h4TrqHn9e
JtyR/KeH25B/t/2bykaUg4pU5Ul7Tb63fO0h8ymslE8wJ39wLjAwq9xWvO0eFJI8
gv+F0Pa1E157Clx+VF4rSJihw7KfyBTtWwZJgpHZ2AA0nJu+RFsyiQOmqPTMx/2i
s/73yjp4aTz3BFzwdD9LbHIHsWPw/lwP9vcmeuZJ+trcdj42pjTD0OkE5Tx8pnbw
fifqz2/nukzOiB9bvyNved5xycuWDpApR4wHnA49eONxW1uIT7qoR5+0v19VveUj
KUyxVuTeL7wo3gGvNRK2cJz0t/TSbcifOHgVdvV+vLIvfhx7EYGQ+CKvh2AyMglB
9XChfhQs3A==
-----END CERTIFICATE-----