Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/fcdf8db6adb4fe3aad50bacc1e86e7cee3bdab07.roa
File:                     fcdf8db6adb4fe3aad50bacc1e86e7cee3bdab07.roa (raw, json)
Hash identifier:          FteOwZmaeaOLiUnHvnAflIx/6vbz3R86GzVQZb6t4p4=
Subject key identifier:   8B:FE:63:83:D5:AC:5A:49:74:4F:79:56:FD:E5:AC:0A:28:26:4C:7F
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0B16B4
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/fcdf8db6adb4fe3aad50bacc1e86e7cee3bdab07.roa
Signing time:             Thu 04 Aug 2022 02:45:56 +0000
ROA not before:           Thu 04 Aug 2022 03:00:00 +0000
ROA not after:            Fri 04 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 726708 (0xb16b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug  4 03:00:00 2022 GMT
            Not After : Aug  4 03:00:00 2023 GMT
        Subject: CN=fcdf8db6adb4fe3aad50bacc1e86e7cee3bdab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:2b:80:a0:b3:6c:f5:1c:87:1f:0e:59:89:
                    f0:07:00:5f:b8:45:5d:87:da:ca:97:86:11:ff:30:
                    b0:67:7a:67:6b:7d:ec:f2:c8:df:f1:d0:f2:9b:a1:
                    90:45:ff:6e:64:48:da:ec:9d:9a:3e:cf:71:63:99:
                    0f:96:ae:f6:5c:44:89:c4:8c:72:6e:a0:13:15:c5:
                    bd:d1:b9:e1:c3:61:22:c6:06:d0:47:b8:bb:c8:f7:
                    3b:79:64:15:05:85:12:19:4c:fb:62:48:19:4b:25:
                    3f:4a:d7:70:19:ff:2e:68:a6:02:af:0a:95:dc:6d:
                    df:42:cb:ff:35:46:f4:f9:81:29:14:c1:ec:e6:fa:
                    73:d5:21:ec:c9:08:11:b6:e8:aa:e2:f1:ac:c7:8e:
                    53:0d:c6:1a:66:db:99:e1:a1:bc:b4:37:b0:02:07:
                    3a:16:e7:a5:b6:eb:e3:cd:79:ab:b4:3e:dd:6d:b6:
                    e5:99:ff:7b:d7:4f:6e:0a:fa:4c:b5:20:a4:98:60:
                    27:c0:2d:b8:1f:1c:12:4d:29:7f:87:c6:0c:7d:15:
                    0b:4f:dc:6a:1f:3d:68:74:ce:af:8f:52:a2:9d:2c:
                    94:24:12:39:6b:d5:01:cc:f0:e1:27:f7:bf:4c:c6:
                    fe:ff:74:89:76:d0:40:dc:ec:a0:8e:e2:82:bf:1f:
                    9f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FE:63:83:D5:AC:5A:49:74:4F:79:56:FD:E5:AC:0A:28:26:4C:7F
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/fcdf8db6adb4fe3aad50bacc1e86e7cee3bdab07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:8a:86:91:16:87:b4:9c:6e:fd:62:50:4e:20:13:c5:d6:47:
         2c:3c:d6:ab:0f:9e:73:78:83:c9:87:1b:31:c4:4b:46:0b:96:
         86:ad:18:1d:fb:6d:64:06:38:1d:80:42:14:d4:53:e0:85:ac:
         b2:87:c4:75:64:87:0f:d5:25:b7:fc:c1:5e:bb:01:45:78:97:
         b7:9a:0b:65:9d:a9:cc:f9:88:da:04:47:f0:8e:5f:d5:ef:a6:
         0c:fa:a8:78:db:63:c5:c5:90:ed:0a:47:df:9b:e7:62:1d:83:
         17:5a:96:ff:93:eb:47:d5:a6:26:a7:27:8f:12:63:dd:f1:64:
         36:97:74:ca:d9:42:fc:00:3b:25:c8:82:13:17:a6:0c:92:33:
         df:6f:25:a5:22:24:e0:f2:e3:b3:d1:37:73:e4:f9:a4:1a:22:
         16:b8:69:63:3c:b3:32:97:1f:f1:65:19:d5:26:b0:d4:dd:d5:
         19:01:af:3d:8a:52:6c:0c:79:b7:ac:14:74:3a:56:37:c8:da:
         02:8a:73:55:93:be:9a:23:35:22:c1:49:89:0b:24:0f:07:ab:
         11:9c:89:4f:c4:08:63:81:ad:dd:66:be:ea:0c:93:53:88:79:
         78:f2:b0:4b:43:c5:28:14:55:de:e2:7c:e8:77:b1:9b:f5:08:
         da:e7:34:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----