Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/fcdd0fe1b94a473c388b876280147e120d115058.roa
File:                     fcdd0fe1b94a473c388b876280147e120d115058.roa (raw, json)
Hash identifier:          FD2UeU+V6gtQHz03YzJZAjNEfNSIwQZ9qKOISCY38fk=
Subject key identifier:   5A:15:90:31:ED:C5:4B:CE:8E:11:FF:C6:2A:8E:14:AB:BD:A1:7D:21
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0F12D8
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/fcdd0fe1b94a473c388b876280147e120d115058.roa
Signing time:             Sat 29 Oct 2022 00:35:48 +0000
ROA not before:           Fri 28 Oct 2022 03:00:00 +0000
ROA not after:            Sun 29 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987864 (0xf12d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 28 03:00:00 2022 GMT
            Not After : Oct 29 03:00:00 2023 GMT
        Subject: CN=fcdd0fe1b94a473c388b876280147e120d115058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:71:dc:9e:fd:b7:0e:f1:0d:94:ba:f6:3c:10:
                    f9:9e:2b:2b:ab:ac:c4:b0:49:4b:20:22:69:40:a8:
                    fd:b4:17:e1:67:b1:38:99:e8:0d:d2:f1:eb:ad:56:
                    a0:9f:7b:2d:80:11:0a:a9:8d:16:37:77:21:c1:24:
                    fc:df:1b:7a:e7:76:85:da:0c:9f:98:ba:b5:7e:ea:
                    e6:7c:37:12:d4:d1:ac:0c:52:d9:3b:1c:c4:06:08:
                    88:7d:41:d3:1a:56:b0:d6:c5:22:ec:8a:14:b5:b7:
                    91:fb:ce:1f:fa:2c:7c:10:8f:f8:62:59:cb:9f:a9:
                    ce:2a:b7:fe:0b:d5:50:cc:c0:55:fd:a0:be:45:f1:
                    ee:bd:d1:d4:94:51:84:36:be:1d:b6:b3:3a:6b:2c:
                    bf:7e:ba:3a:e1:60:c0:8e:18:f1:93:ca:2b:5b:b9:
                    6f:7c:c1:3f:f2:4f:f9:21:8a:34:82:12:36:cd:9c:
                    0a:60:0e:b5:a8:28:cc:d1:8d:78:f0:40:ec:06:f6:
                    ed:1c:c2:4a:c3:f9:c8:f0:98:7a:da:94:83:8a:11:
                    d0:a8:b3:ba:d5:9e:29:3d:3f:b7:0d:33:77:03:d9:
                    1e:86:d6:52:11:32:fa:b0:aa:fd:a9:97:49:6c:ff:
                    36:be:2f:08:c4:49:a3:2c:9b:f2:c1:f3:fd:db:5b:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:15:90:31:ED:C5:4B:CE:8E:11:FF:C6:2A:8E:14:AB:BD:A1:7D:21
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/fcdd0fe1b94a473c388b876280147e120d115058.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:8c:6d:4c:bc:a3:17:3a:d6:08:7e:17:86:3c:4e:bc:c1:da:
         70:35:62:41:b5:8c:9f:b5:d5:88:60:04:e9:62:61:8d:c0:ba:
         4e:65:85:79:64:3b:46:d1:73:94:c0:91:b8:ba:4d:46:8d:8b:
         a0:ee:8f:aa:ce:25:e2:2b:b2:d8:ff:0a:64:6d:b0:24:67:ba:
         e3:85:17:cd:73:0e:eb:5d:80:8c:60:27:50:ff:b0:3c:90:aa:
         bd:fc:b2:a0:b9:88:d8:fb:05:89:22:38:0b:20:2c:37:a2:8b:
         2e:6f:c8:f7:5c:c7:e0:c6:4c:72:e0:5f:bd:4c:53:ea:d4:bd:
         b1:bb:b8:35:30:bc:19:77:73:77:93:c8:a4:ff:89:b8:37:cc:
         e5:b4:14:a2:05:c6:62:cf:a4:f5:04:00:34:bb:28:fd:e7:12:
         55:19:29:66:e2:30:38:93:11:8d:20:5d:55:c9:a8:6a:70:f1:
         ac:59:a3:04:77:da:34:a6:cc:87:fa:2d:c1:bd:6c:03:95:21:
         50:21:11:52:f6:1e:3c:c1:42:ed:e9:4d:b7:2f:a7:03:4b:de:
         7d:4b:1a:4a:69:0d:f1:c6:2d:33:dd:5d:96:d2:30:ed:22:34:
         c1:e7:f1:5d:f7:3a:85:38:64:74:3d:34:70:f9:60:ef:79:ab:
         3d:41:e2:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----