Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d87e97a31055d7f5a51bde7fa7891d1e1aaab0cd.roa
File:                     d87e97a31055d7f5a51bde7fa7891d1e1aaab0cd.roa (raw, json)
Hash identifier:          8oxntskrnPK/OIs5XH2lMO9LF9VS2dyJEcLSDPJ/nf0=
Subject key identifier:   18:99:76:3B:7A:3F:37:CF:BD:75:38:7D:28:9F:20:B6:01:86:CB:2C
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0AE598
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d87e97a31055d7f5a51bde7fa7891d1e1aaab0cd.roa
Signing time:             Sat 30 Jul 2022 00:12:24 +0000
ROA not before:           Sat 30 Jul 2022 03:00:00 +0000
ROA not after:            Sun 30 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 714136 (0xae598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 30 03:00:00 2022 GMT
            Not After : Jul 30 03:00:00 2023 GMT
        Subject: CN=d87e97a31055d7f5a51bde7fa7891d1e1aaab0cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a2:f0:d7:28:5c:61:41:3f:ee:ae:4d:a4:1e:
                    4a:6e:2a:22:3f:ea:3c:a0:10:c5:94:31:c8:3c:c9:
                    ed:84:10:ab:07:e8:d5:6c:9d:e0:b5:17:74:98:83:
                    92:7f:f4:a1:b1:2d:db:29:90:15:d0:17:99:74:e6:
                    1e:13:23:5b:fc:4c:f8:3f:7a:af:57:c3:7f:16:71:
                    03:dd:f8:71:07:aa:b6:90:07:af:fe:30:c8:dd:19:
                    01:03:97:ce:cf:c7:35:ae:a3:9e:e4:a1:e9:bc:2f:
                    0f:c8:1e:e1:81:87:33:45:3e:ce:79:15:1e:13:e3:
                    97:59:ee:16:8d:f0:c6:33:ba:96:dd:7a:76:d1:8e:
                    3f:d5:04:e1:61:da:ef:2d:9d:86:c5:68:50:53:94:
                    fb:d2:65:bd:c5:a2:e6:af:ed:57:53:94:e2:d6:63:
                    77:68:67:20:fe:20:cf:32:44:2c:28:d8:cb:27:b2:
                    b2:18:a9:b2:d7:ac:51:16:7a:cf:47:08:06:dd:e0:
                    99:ec:3b:7e:a1:42:d7:44:9c:43:1d:32:b4:3f:f3:
                    54:06:e0:9d:a9:aa:bf:f8:42:97:af:70:e9:ca:64:
                    10:59:2e:4c:1c:2e:41:62:b3:d1:7c:df:40:d0:ca:
                    67:82:c1:23:9f:19:76:72:c9:73:65:23:67:da:0a:
                    8b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:99:76:3B:7A:3F:37:CF:BD:75:38:7D:28:9F:20:B6:01:86:CB:2C
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d87e97a31055d7f5a51bde7fa7891d1e1aaab0cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:15:7c:1b:20:3c:c4:87:3a:4b:80:97:b4:12:18:00:5f:b1:
         11:cb:10:77:9c:02:de:75:e8:c4:9c:46:aa:80:2a:07:d4:92:
         63:fa:73:4b:11:c3:ac:86:86:c7:83:0d:5c:eb:48:30:cf:13:
         a2:b0:cb:99:8b:14:7f:bb:24:6f:2c:e3:87:f9:8f:aa:67:53:
         ed:7f:bc:15:34:1b:a5:cf:90:13:92:cc:de:d0:21:31:2b:72:
         99:c7:f0:c0:e5:25:4f:5d:2a:c0:b0:10:df:74:10:4d:d1:51:
         92:0c:b2:be:fa:95:9d:07:0c:a6:22:80:7e:a2:9d:fd:d6:96:
         1d:21:eb:e1:91:0c:8b:77:1e:2b:25:2c:70:2f:0c:cf:45:ae:
         2b:20:7b:36:3c:f6:f2:bc:70:5a:6e:02:81:c8:b2:17:93:aa:
         4b:1f:e4:23:6e:63:c0:ac:b7:1c:43:3d:93:14:cb:f8:89:2b:
         3f:51:5d:1e:32:91:9a:99:ee:66:51:1f:4c:e2:1f:01:ed:77:
         e2:65:a4:a9:ae:f7:02:91:a1:4e:ff:1b:ad:56:ae:22:de:75:
         b8:a7:d2:ad:70:c5:12:1f:7c:ea:69:b0:ae:11:57:0a:9a:7d:
         a8:3b:ed:31:c6:56:a7:c3:da:2d:c2:fa:83:b0:19:52:d4:18:
         dd:df:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----