Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ec6e9613aab51bec03d75d3c31f206c2aca347aa.roa
File:                     ec6e9613aab51bec03d75d3c31f206c2aca347aa.roa (raw, json)
Hash identifier:          nTulT9w8AKpycFddBZfmxTJEILbfd5Hf1gGkzPkhSTM=
Subject key identifier:   17:B3:70:71:2A:AD:8D:93:A3:4A:09:32:23:40:42:6D:FF:B8:63:8E
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       079DFE
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ec6e9613aab51bec03d75d3c31f206c2aca347aa.roa
Signing time:             Sat 14 May 2022 04:54:55 +0000
ROA not before:           Sat 14 May 2022 03:00:00 +0000
ROA not after:            Sun 14 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 499198 (0x79dfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 14 03:00:00 2022 GMT
            Not After : May 14 03:00:00 2023 GMT
        Subject: CN=ec6e9613aab51bec03d75d3c31f206c2aca347aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:97:17:5b:17:d6:ab:50:6c:40:86:0f:19:
                    c5:40:39:e9:01:7b:e9:9a:11:48:53:27:ed:04:81:
                    e7:2e:43:64:5d:db:e7:b2:51:77:94:dc:a5:34:62:
                    62:9f:68:04:6e:80:f8:4d:ec:bf:95:88:02:8b:4c:
                    ca:69:fe:3c:38:08:95:27:2c:99:44:a8:da:c8:87:
                    af:8b:83:4e:db:20:59:a8:52:59:bd:03:1b:b6:a9:
                    92:f0:e0:53:d1:59:8e:ec:c2:4d:e3:c1:a3:50:64:
                    e5:f6:4d:fe:bd:df:5a:ea:24:ae:55:02:b0:00:2b:
                    4b:4b:0e:2f:df:c5:4c:2f:e4:9e:86:c8:e4:24:cc:
                    6f:fb:39:be:2c:e1:4a:6d:1e:bc:92:8a:68:a1:82:
                    7d:8a:28:9e:e6:3b:8f:cd:b8:86:38:7e:b3:38:f6:
                    f7:22:2d:f5:ea:2d:87:d4:f4:e4:fc:53:62:ce:5b:
                    9e:0d:86:17:c6:e0:d0:ac:b6:e1:9c:31:ab:8f:5b:
                    dc:9c:2e:5d:5e:7a:08:b4:cb:4b:5a:3d:26:e7:19:
                    be:47:7b:ce:68:5e:0f:75:a4:f0:54:b0:0b:2b:ff:
                    1b:63:80:e3:79:31:95:1a:7c:2f:2b:1a:10:af:e0:
                    2c:29:13:76:f5:08:70:d2:9f:1f:dc:92:8f:05:94:
                    bf:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B3:70:71:2A:AD:8D:93:A3:4A:09:32:23:40:42:6D:FF:B8:63:8E
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ec6e9613aab51bec03d75d3c31f206c2aca347aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:5d:44:14:34:c0:c6:2a:25:25:02:82:2e:ed:7c:af:a5:
         1d:d9:a1:5f:3f:ac:1c:87:12:59:53:0b:17:cb:7d:13:4d:4b:
         ec:dd:2b:49:7c:1e:62:2a:f4:d5:91:64:4e:89:61:4d:cb:cd:
         be:3e:4f:db:ed:80:0b:fa:ea:45:8a:d4:fd:7e:de:05:2e:25:
         c4:69:72:15:a9:cd:e1:e4:3a:4a:a6:8f:88:25:7d:74:5a:9e:
         64:ef:a0:8d:9d:29:24:8f:97:0b:51:ae:76:0f:d6:c0:07:c3:
         52:83:40:9f:46:1d:e3:83:61:d0:72:d4:19:6f:a3:a2:dd:af:
         93:af:31:b5:09:bb:35:e2:6b:4a:9a:64:da:6b:7d:3c:81:b9:
         f7:32:a0:18:e0:c9:69:d5:41:5b:21:63:bd:a6:33:d1:00:2d:
         f4:15:ae:e6:87:ea:e4:b2:84:52:9d:9b:b4:5a:d9:e2:d3:7f:
         12:90:bb:46:3d:ca:bc:d9:92:8c:74:62:aa:b0:9d:34:fb:72:
         43:71:69:ce:05:2a:2b:d1:f8:ae:35:4d:7d:1d:22:fa:11:40:
         ba:aa:9e:1c:0d:48:f9:76:36:01:b5:27:bf:7d:5c:2c:27:f4:
         53:0a:00:8f:5d:bc:be:c5:ff:12:bf:20:1b:70:87:48:1f:fa:
         58:28:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----