Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dae680f4040ee4a4efe8b51d1b950db76eb4e517.roa
File:                     dae680f4040ee4a4efe8b51d1b950db76eb4e517.roa (raw, json)
Hash identifier:          OoZozCy0PprdbEs8ckgSeovVdpabW6Rk5xSO/ocZtc8=
Subject key identifier:   B1:D8:7E:DB:2B:C3:D8:3F:75:14:36:13:1E:9F:7F:89:65:C3:24:E0
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0612A4
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dae680f4040ee4a4efe8b51d1b950db76eb4e517.roa
Signing time:             Mon 11 Apr 2022 09:09:06 +0000
ROA not before:           Mon 11 Apr 2022 03:00:00 +0000
ROA not after:            Tue 11 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397988 (0x612a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr 11 03:00:00 2022 GMT
            Not After : Apr 11 03:00:00 2023 GMT
        Subject: CN=dae680f4040ee4a4efe8b51d1b950db76eb4e517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:aa:1f:92:5a:52:38:da:87:92:91:69:1d:
                    e3:78:42:bb:9c:45:e6:66:3b:22:18:c8:3e:f1:0f:
                    8a:cd:33:7f:fc:39:c1:ed:26:eb:b7:ff:ad:82:52:
                    89:16:ea:9b:c3:f1:e0:8c:8d:0f:0e:f3:d3:4b:51:
                    47:3e:8c:76:43:d2:fd:d0:91:f8:a7:fd:0e:01:55:
                    86:26:af:9e:5f:30:86:a5:a3:80:93:27:14:40:d9:
                    31:60:88:f2:4f:f5:dd:73:9c:b2:e4:22:f9:2f:d5:
                    38:4e:f5:e6:7f:ae:a5:e0:23:ef:b8:07:58:a3:5a:
                    db:e7:86:4b:88:55:0d:86:07:0d:b4:ab:6d:08:20:
                    7c:39:85:83:b6:22:eb:57:55:eb:f0:f6:03:32:80:
                    d6:ed:31:cb:98:05:56:21:4f:55:65:54:a5:e8:b9:
                    0d:98:f6:4a:66:58:91:2d:e9:9d:67:6e:25:7a:1f:
                    9a:8c:2e:9d:0f:8a:40:39:9b:6c:ed:7d:e9:60:82:
                    8d:91:40:de:fb:f0:51:b0:3e:c8:2f:9e:24:6b:1e:
                    6f:e7:2f:e1:f3:27:db:88:9a:ca:a7:42:4c:4e:38:
                    09:51:30:3b:c5:f3:58:e5:26:08:5f:bb:fa:5c:65:
                    00:32:d0:a5:d3:3d:70:bd:dc:bd:2e:d7:e7:92:69:
                    e4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D8:7E:DB:2B:C3:D8:3F:75:14:36:13:1E:9F:7F:89:65:C3:24:E0
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dae680f4040ee4a4efe8b51d1b950db76eb4e517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:e5:76:48:2e:85:85:46:66:05:21:32:b2:21:02:83:af:a7:
         2e:63:11:c3:c9:16:5e:8b:a0:54:60:6c:c6:f1:a4:d9:95:d9:
         89:44:b2:3b:8e:0d:ec:5e:2f:1e:71:2a:39:2b:f8:dd:13:3b:
         6e:34:2b:b3:fd:8d:9c:6d:a4:42:58:7e:cc:95:8c:d2:df:08:
         a4:c6:85:60:01:4b:14:01:8b:b2:ee:bc:dc:e4:b0:43:ae:cb:
         79:79:37:ba:61:1c:1d:62:74:70:3c:4d:e7:be:87:d2:8f:4b:
         0d:66:88:14:0f:88:cf:21:b2:0d:bc:fe:7e:5d:45:9a:41:20:
         8c:c1:fa:da:3e:28:8a:68:1b:b6:b9:23:70:df:5e:e7:1b:57:
         61:36:e4:70:88:34:07:f5:e6:ce:01:34:34:74:89:76:e4:96:
         aa:3c:e1:f7:6e:c8:50:5b:e6:a1:be:66:3f:8e:03:0c:86:b6:
         83:5e:26:82:cc:8d:79:9c:d7:61:68:69:56:9e:bb:25:b5:fd:
         d2:c9:b9:27:d8:5b:b3:7c:3c:0b:98:9c:df:a0:5b:7f:1a:d3:
         3e:fc:75:e7:86:6d:b4:55:5a:ad:98:75:39:6c:ee:70:a7:f9:
         bc:6d:14:bb:55:eb:ef:70:05:1c:47:43:3f:07:ac:63:29:67:
         2c:6c:c0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----