Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/af93f0506ba770f4415eb51d9a91c583e1e1c460.roa
File:                     af93f0506ba770f4415eb51d9a91c583e1e1c460.roa (raw, json)
Hash identifier:          2k3Ex5whQr9IVL4NdT02L0POIrtAXB0JfEv2upo4jCM=
Subject key identifier:   29:07:63:CE:15:A5:55:C0:6D:3F:B6:BA:09:4D:06:33:C1:7E:5F:4B
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0E6ADB
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/af93f0506ba770f4415eb51d9a91c583e1e1c460.roa
Signing time:             Sat 15 Oct 2022 00:06:42 +0000
ROA not before:           Fri 14 Oct 2022 03:00:00 +0000
ROA not after:            Sun 15 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944859 (0xe6adb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 14 03:00:00 2022 GMT
            Not After : Oct 15 03:00:00 2023 GMT
        Subject: CN=af93f0506ba770f4415eb51d9a91c583e1e1c460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b7:1f:5d:ef:20:ee:7e:0f:ed:c5:df:2f:36:
                    0d:51:5f:a2:28:cb:99:07:95:a4:52:66:a4:b4:1a:
                    fb:bd:0c:d3:42:70:8f:e3:fb:d3:3e:f6:a4:ce:a5:
                    78:bf:62:0d:d3:fd:2b:e8:cc:b3:6e:53:7f:bc:08:
                    f8:8f:fb:32:6b:ef:bf:9d:50:20:37:0a:24:4c:b5:
                    a4:b7:9d:34:05:fa:70:4f:df:23:b1:a9:f8:44:3c:
                    ec:2a:bb:14:d9:52:a4:0b:92:53:c8:34:71:9d:e9:
                    aa:ae:53:a2:95:8b:5c:00:a9:c7:9b:f6:89:9d:f3:
                    3e:04:fa:c9:33:d2:74:0e:66:f2:85:4f:fe:a5:ee:
                    fe:06:61:85:12:17:87:f5:41:58:c3:e9:e5:c7:b8:
                    7f:05:63:e8:b4:b6:5a:1a:67:81:f4:e2:8f:01:c3:
                    2f:e2:15:0a:66:bd:43:95:71:ad:93:95:ba:ac:13:
                    aa:7b:fc:89:26:11:ae:49:49:c4:38:4e:52:38:30:
                    ea:8b:c6:a4:90:dc:0e:60:28:d9:89:ba:a3:d9:23:
                    1f:53:02:c6:ad:b2:d0:73:0a:ab:50:b1:b4:23:3b:
                    0d:13:b6:ed:ca:77:a4:52:58:8c:ec:7a:e2:b5:d9:
                    6f:cf:62:b0:18:30:5a:d9:a2:ff:1f:e3:49:df:f0:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:07:63:CE:15:A5:55:C0:6D:3F:B6:BA:09:4D:06:33:C1:7E:5F:4B
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/af93f0506ba770f4415eb51d9a91c583e1e1c460.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:7c:c3:89:16:8f:34:99:ac:7b:12:e8:fd:0f:2d:fc:87:1e:
         9b:dd:9e:f0:78:87:ce:21:e4:26:be:32:69:e6:ba:41:66:98:
         6b:20:54:0b:d2:e3:f8:0a:57:df:53:1f:9e:f1:a8:52:18:22:
         e8:78:30:db:e7:66:59:5e:a3:27:3b:6b:ee:70:1e:5d:2b:7f:
         39:33:73:0f:21:3e:e4:c9:10:b6:70:b3:54:eb:fa:8c:0f:9b:
         9f:e2:cc:7f:cd:4e:99:1a:99:24:29:27:4d:9b:2c:79:e8:7c:
         2e:ba:2c:99:5f:ac:c8:66:57:8a:9a:e6:19:76:4d:ab:50:30:
         dd:f5:52:39:be:e1:b5:b5:3c:a2:62:dc:7b:c3:eb:97:a2:2e:
         be:df:f8:56:32:bf:5a:e7:66:58:05:74:14:22:e3:d3:00:de:
         06:3d:87:46:af:51:26:61:70:f1:45:73:04:7c:47:ae:6d:68:
         40:5d:c8:00:86:ee:c1:8e:63:92:7f:8a:a7:10:8c:02:89:6a:
         03:a4:33:9b:5e:c8:c9:ac:56:24:0f:24:24:3a:0b:b5:8f:aa:
         44:fa:6b:84:24:bf:11:22:02:04:29:2f:01:a2:3a:31:4c:2a:
         09:55:b0:66:88:34:fd:89:23:e2:06:26:bb:70:fb:21:ef:6d:
         0d:a4:84:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----