Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2cc47dd7a453a41f0f02a8ec47ef82d7c98e7b8e.roa
File:                     2cc47dd7a453a41f0f02a8ec47ef82d7c98e7b8e.roa (raw, json)
Hash identifier:          j5u8PNc1Jt0Sw8yJ488yDRpmrYMpqNM5tOpSGSeu7+Y=
Subject key identifier:   28:61:EA:A1:56:97:38:0E:23:D9:AA:EC:1F:A8:61:D7:D0:3C:9F:B9
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0BC6E6
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2cc47dd7a453a41f0f02a8ec47ef82d7c98e7b8e.roa
Signing time:             Fri 19 Aug 2022 05:10:39 +0000
ROA not before:           Fri 19 Aug 2022 03:00:00 +0000
ROA not after:            Sat 19 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771814 (0xbc6e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug 19 03:00:00 2022 GMT
            Not After : Aug 19 03:00:00 2023 GMT
        Subject: CN=2cc47dd7a453a41f0f02a8ec47ef82d7c98e7b8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ac:34:6b:9a:31:55:5a:05:4c:4e:06:09:c2:
                    49:7e:c4:e6:49:6a:00:61:85:a9:1e:ca:eb:19:6b:
                    3f:1d:94:6c:31:1b:81:4c:0f:60:82:2e:f7:ea:8f:
                    8a:f3:0e:8b:49:b8:e5:75:25:40:2a:c0:a6:df:d0:
                    3f:12:91:76:8b:57:67:1d:6e:0d:8b:d1:6b:7b:63:
                    c6:f1:95:57:fd:b7:16:51:41:20:15:a0:81:5f:cf:
                    32:49:ec:8b:45:23:93:fc:73:66:00:0c:65:51:2b:
                    ba:56:b2:29:39:95:03:ff:65:34:a0:0f:7e:6f:1a:
                    2c:ee:80:23:f5:41:d6:94:5a:58:c1:ef:35:63:bf:
                    cf:d0:c4:25:67:40:bb:14:a7:87:b4:fc:18:5d:88:
                    b1:d9:6e:69:e5:8e:c6:e8:cd:77:49:42:49:67:ab:
                    ec:7c:e3:0d:b6:d0:39:4a:7f:1b:bc:f5:97:38:bd:
                    74:cf:96:cf:2b:1b:09:49:fe:9f:2d:9c:1e:49:8e:
                    23:b6:fd:c8:f8:2a:b8:57:b8:21:1d:c7:a6:89:89:
                    b4:0b:fd:a3:70:f9:ef:7d:5e:f6:86:22:99:91:87:
                    d3:6d:fa:8e:b0:a9:2c:8f:29:7f:94:1a:85:c3:ee:
                    37:22:68:47:a3:b8:37:40:59:09:bb:77:77:dc:ed:
                    ee:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:61:EA:A1:56:97:38:0E:23:D9:AA:EC:1F:A8:61:D7:D0:3C:9F:B9
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2cc47dd7a453a41f0f02a8ec47ef82d7c98e7b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:f6:5c:ef:ef:63:1c:24:14:a3:05:ee:61:51:6d:18:e1:c2:
         6d:84:a9:6d:d5:76:fc:80:56:3b:0b:91:85:0b:a8:b7:61:db:
         af:1a:4d:66:6c:bd:ec:8d:88:f1:04:f1:9d:45:d2:08:33:b7:
         93:a9:fe:6e:c1:40:71:95:30:b7:c4:62:e8:41:81:28:bb:45:
         29:09:c8:7c:77:c6:89:b8:7f:df:2c:c3:7b:8d:cc:7d:97:54:
         a5:f4:70:d0:3e:5a:a5:1e:10:23:7b:cf:51:89:c5:da:83:61:
         2b:fc:27:db:89:ac:28:4d:cd:43:3b:6e:94:2a:cd:36:b6:b5:
         11:93:e0:6d:7b:0c:b7:3a:98:ab:99:9a:3f:2e:f1:ef:91:d2:
         14:5e:2d:23:49:b9:5f:af:75:94:58:36:72:c5:4d:86:4d:6c:
         68:36:b3:b2:5c:40:4a:81:f1:0e:ad:dc:fc:cd:a1:a4:20:1a:
         f3:91:fa:26:15:4c:5f:9f:cb:e8:89:82:01:9f:07:25:a9:88:
         74:98:3f:a3:59:5f:da:c5:29:56:6e:db:42:ec:d0:49:8e:fd:
         84:1a:0b:d2:2e:ac:59:32:ec:92:86:69:7e:35:9b:8d:d8:56:
         d4:df:ec:c9:c9:3e:a7:db:e2:db:4e:f2:e6:88:71:58:00:67:
         76:6b:c2:2e
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDC8bmMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwODE5
MDMwMDAwWhcNMjMwODE5MDMwMDAwWjAzMTEwLwYDVQQDEygyY2M0N2RkN2E0NTNh
NDFmMGYwMmE4ZWM0N2VmODJkN2M5OGU3YjhlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkqw0a5oxVVoFTE4GCcJJfsTmSWoAYYWpHsrrGWs/HZRsMRuB
TA9ggi736o+K8w6LSbjldSVAKsCm39A/EpF2i1dnHW4Ni9Fre2PG8ZVX/bcWUUEg
FaCBX88ySeyLRSOT/HNmAAxlUSu6VrIpOZUD/2U0oA9+bxos7oAj9UHWlFpYwe81
Y7/P0MQlZ0C7FKeHtPwYXYix2W5p5Y7G6M13SUJJZ6vsfOMNttA5Sn8bvPWXOL10
z5bPKxsJSf6fLZweSY4jtv3I+Cq4V7ghHcemiYm0C/2jcPnvfV72hiKZkYfTbfqO
sKksjyl/lBqFw+43ImhHo7g3QFkJu3d33O3u0QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFChh6qFWlzgOI9mq7B+oYdfQPJ+5MB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzJjYzQ3ZGQ3YTQ1M2E0MWYwZjAyYThlYzQ3ZWY4MmQ3Yzk4ZTdiOGUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEArPZc7+9jHCQU
owXuYVFtGOHCbYSpbdV2/IBWOwuRhQuot2HbrxpNZmy97I2I8QTxnUXSCDO3k6n+
bsFAcZUwt8Ri6EGBKLtFKQnIfHfGibh/3yzDe43MfZdUpfRw0D5apR4QI3vPUYnF
2oNhK/wn24msKE3NQztulCrNNra1EZPgbXsMtzqYq5maPy7x75HSFF4tI0m5X691
lFg2csVNhk1saDazslxASoHxDq3c/M2hpCAa85H6JhVMX5/L6ImCAZ8HJamIdJg/
o1lf2sUpVm7bQuzQSY79hBoL0i6sWTLskoZpfjWbjdhW1N/syck+p9vi207y5ohx
WABndmvCLg==
-----END CERTIFICATE-----