Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/da7966322c8037a69b9c886084df4301c94064db.roa
File:                     da7966322c8037a69b9c886084df4301c94064db.roa (raw, json)
Hash identifier:          PHXiZIVIOsrFSJXy/XZnc79kuOMCMPp6dq5JMI1jLBo=
Subject key identifier:   0D:5D:88:5A:C2:1D:70:B6:72:81:50:FB:56:58:96:13:11:28:8E:F7
Certificate issuer:       /CN=15c457b9e4c4fb2caeebe5d784653caec339f556
Certificate serial:       D91D
Authority key identifier: 09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/da7966322c8037a69b9c886084df4301c94064db.roa
Signing time:             Fri 28 Jan 2022 21:29:28 +0000
ROA not before:           Fri 28 Jan 2022 03:00:00 +0000
ROA not after:            Sun 28 Jan 2024 03:00:00 +0000
asID:                     3549
IP address blocks:        2801:1b:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55581 (0xd91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c457b9e4c4fb2caeebe5d784653caec339f556
        Validity
            Not Before: Jan 28 03:00:00 2022 GMT
            Not After : Jan 28 03:00:00 2024 GMT
        Subject: CN=da7966322c8037a69b9c886084df4301c94064db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d7:13:b2:60:3f:75:6d:c1:68:a0:b7:11:f1:
                    4b:1f:cb:6e:49:42:a6:4f:9b:5c:09:b6:b1:b0:de:
                    98:9a:54:58:91:b9:de:f3:c0:6e:cd:22:2d:88:e2:
                    b5:0e:64:57:91:a0:5c:3e:52:52:86:27:3e:67:58:
                    91:d8:6f:ab:5c:42:7c:4d:33:ea:33:a7:5e:5c:d1:
                    58:96:70:fa:5a:60:9c:66:ea:7b:24:6d:f8:84:aa:
                    a3:73:86:1b:aa:d5:0c:cb:83:ce:6c:40:f1:5e:83:
                    bc:70:53:3c:a8:f8:43:88:5d:e0:57:a5:39:89:16:
                    eb:c4:ea:5e:95:89:43:77:31:97:df:92:e3:48:da:
                    db:84:e4:76:35:b9:5e:e4:b8:fc:b7:e0:f7:8b:6e:
                    c4:b1:b2:2e:7e:f4:67:f5:a9:12:8e:1b:ed:f5:58:
                    97:58:d7:48:e7:3b:1e:cf:a9:ad:a4:11:57:1d:57:
                    8c:21:b1:d1:a6:94:9e:6f:7c:69:49:48:9e:fd:c3:
                    53:51:35:a7:75:cc:14:ba:0a:36:32:ee:ec:42:a7:
                    b1:a4:76:65:da:1e:97:df:60:29:42:c1:6c:89:26:
                    0e:4a:c3:47:0b:f3:41:9c:40:32:c0:9a:1f:e5:11:
                    66:30:f0:cc:44:b0:44:a5:4a:d8:0f:77:71:bb:ed:
                    92:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5D:88:5A:C2:1D:70:B6:72:81:50:FB:56:58:96:13:11:28:8E:F7
            X509v3 Authority Key Identifier:
                keyid:09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/da7966322c8037a69b9c886084df4301c94064db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:11:8d:cf:c5:48:67:c5:05:bc:6e:bc:3f:e5:ae:09:f2:e2:
         86:84:d1:9b:b0:c8:8f:88:55:c4:6e:b8:c0:b0:a5:d3:18:ad:
         fb:0a:ef:c2:8b:0d:40:53:12:23:65:12:75:59:c2:d1:5c:29:
         3f:c0:66:5b:85:90:78:32:af:7f:f9:fd:91:b3:7d:db:43:07:
         ed:67:17:ac:18:6e:8c:29:1f:f4:7e:bc:2c:c9:b1:39:f2:40:
         c3:45:80:3e:27:df:71:9c:7b:dc:cd:0e:b1:69:21:c0:e3:ca:
         6e:51:ee:31:69:74:81:44:80:97:b3:b5:6a:b7:f1:d1:74:0e:
         05:ce:41:f1:75:69:aa:02:c2:b6:8e:69:4f:37:1b:1f:3f:33:
         a8:ca:3c:da:80:fe:c3:80:09:b8:63:0d:b3:c9:df:37:b4:56:
         37:ec:7a:72:a0:b3:72:ca:3b:0e:1c:e5:2f:f0:2f:e8:7e:08:
         13:9e:ed:f2:b9:47:a9:82:dc:75:9c:33:b0:33:ae:48:92:df:
         d8:6f:c7:14:4b:4f:ef:80:2d:18:82:5c:f8:6e:7f:c7:c7:83:
         8b:16:1a:00:38:04:b5:3e:d9:6c:5b:fc:e7:ed:06:f3:4e:dc:
         3a:89:9f:77:59:63:75:c6:7e:66:12:46:9f:17:33:91:f7:cc:
         a5:c9:f2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----