Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/aa47666bc4a86b5d98bd88af215c7d9dc3780ba7.roa
File:                     aa47666bc4a86b5d98bd88af215c7d9dc3780ba7.roa (raw, json)
Hash identifier:          xCFEM+Q1byBZAtHNDmxMmnp9sD6L3QPgbsKMoYEOBRc=
Subject key identifier:   44:30:4A:D7:34:FA:31:59:8A:A3:50:80:2D:6A:54:65:B7:17:A1:9D
Certificate issuer:       /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial:       012858
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/aa47666bc4a86b5d98bd88af215c7d9dc3780ba7.roa
Signing time:             Tue 16 Nov 2021 19:11:29 +0000
ROA not before:           Tue 16 Nov 2021 03:00:00 +0000
ROA not after:            Mon 15 Jan 2024 03:00:00 +0000
asID:                     22822
IP address blocks:        2801:114::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75864 (0x12858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
        Validity
            Not Before: Nov 16 03:00:00 2021 GMT
            Not After : Jan 15 03:00:00 2024 GMT
        Subject: CN=aa47666bc4a86b5d98bd88af215c7d9dc3780ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f5:c8:b6:d1:e7:a9:7c:ac:f4:cb:a2:7f:45:
                    5d:fe:be:67:e6:9a:4e:09:43:c8:66:4c:af:19:32:
                    ff:b3:ca:f9:89:37:07:4e:c2:d1:bc:eb:30:16:9d:
                    fc:41:08:c0:c3:97:28:3d:22:de:23:55:c7:88:e6:
                    30:29:57:9d:e6:00:31:86:00:d4:e1:50:8a:68:0f:
                    34:a9:e6:b5:80:17:b9:82:af:97:84:e4:94:83:51:
                    86:06:63:f3:d6:2d:df:9b:47:f1:d2:83:f1:cd:7c:
                    8f:b8:24:ac:7f:43:89:35:7e:9e:33:8b:e6:b7:7b:
                    55:d9:63:e6:8a:ac:a6:4e:be:87:b0:92:38:38:57:
                    3b:c7:fb:09:a3:7d:2b:ae:36:83:a9:fe:02:a5:1b:
                    7e:a7:db:eb:73:45:55:4f:48:5a:05:a9:fb:90:e6:
                    a9:58:df:9e:8c:4b:a8:0b:5e:f4:17:97:15:77:23:
                    d6:5f:88:3a:63:9c:b3:04:74:4c:48:88:b3:96:65:
                    3b:81:80:f6:13:7d:67:9c:62:60:e9:0a:a7:90:24:
                    89:86:d5:cb:a3:48:04:81:90:7d:59:e6:71:d7:c5:
                    74:b4:ba:46:70:ff:45:6f:5a:13:85:d7:d0:1e:fa:
                    f2:ff:72:f4:23:fa:cc:01:e9:c6:3e:6a:3b:6c:c6:
                    17:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:30:4A:D7:34:FA:31:59:8A:A3:50:80:2D:6A:54:65:B7:17:A1:9D
            X509v3 Authority Key Identifier:
                keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/aa47666bc4a86b5d98bd88af215c7d9dc3780ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:114::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:4c:83:12:32:b5:ff:b8:38:6d:14:aa:1b:e3:8a:22:9d:31:
         32:6a:a9:9c:39:63:e3:49:39:23:fb:76:bc:96:1e:f1:1a:0d:
         2c:1f:ce:f5:4f:ee:85:5d:65:bc:43:1b:f2:89:4e:f5:38:9b:
         12:15:49:87:45:a1:59:30:b0:97:4f:50:89:db:bd:17:02:bb:
         73:11:4e:5c:4e:0c:4a:f4:f4:3f:d2:f4:1c:1f:7a:f4:5a:9a:
         96:d9:af:cd:b1:b3:73:05:cd:07:9a:6f:1a:2b:73:45:27:3b:
         43:e0:f9:e8:d1:cf:69:46:dc:e1:a3:0e:cd:d1:88:38:73:1c:
         14:a4:85:96:e2:73:65:0f:67:5a:9c:2d:f0:7a:7d:e0:83:a2:
         51:21:bf:c5:a3:12:7a:f9:d8:b0:83:e8:e8:db:5b:40:01:1f:
         be:06:cd:67:9e:18:b2:9c:28:98:05:7e:02:6d:4e:71:8a:94:
         94:00:0a:bc:ed:9e:6e:d3:fd:cb:84:0c:67:ea:c7:25:79:0c:
         f3:5c:c3:23:1d:43:08:50:b4:4e:b0:61:1e:66:4f:a2:d0:56:
         ba:49:e6:b6:bc:1c:39:f0:5b:f6:85:86:ee:14:ce:4d:ee:d0:
         77:90:35:a4:2e:da:65:af:c7:17:ff:70:3d:3d:e0:e9:13:bd:
         f2:45:26:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----