Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/024f40e22c399133ac1f884d384e761047c14ae4.roa
File:                     024f40e22c399133ac1f884d384e761047c14ae4.roa (raw, json)
Hash identifier:          yRSzl3l5VEHGEaINt36hHY3TpUMH920EFmH+AUe5yL0=
Subject key identifier:   E7:F5:83:1C:4E:8C:F1:A1:22:1D:77:9C:2E:3F:1D:7E:21:FC:C4:44
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0668
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/024f40e22c399133ac1f884d384e761047c14ae4.roa
Signing time:             Fri 12 Nov 2021 05:23:16 +0000
ROA not before:           Fri 12 Nov 2021 03:00:00 +0000
ROA not after:            Sun 12 Nov 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1640 (0x668)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Nov 12 03:00:00 2021 GMT
            Not After : Nov 12 03:00:00 2023 GMT
        Subject: CN=024f40e22c399133ac1f884d384e761047c14ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ca:81:45:46:08:f6:eb:61:8d:6a:6e:2a:22:
                    6d:79:ca:a6:05:1e:9b:8f:21:6a:8b:3e:b7:5a:51:
                    a9:84:a4:c2:b7:98:90:d0:a7:6b:ac:bc:60:48:48:
                    58:33:1a:6f:7b:60:78:3f:03:24:a9:33:33:84:16:
                    57:4a:b0:1d:73:a3:01:4b:db:0d:2c:93:81:48:4a:
                    3e:5e:79:3a:a2:8e:10:a7:d4:53:6a:9c:af:8a:29:
                    14:06:b6:f1:2e:a4:9b:23:09:d1:09:ad:d6:20:cf:
                    45:16:7b:44:3f:2f:26:fa:89:ad:3a:5f:4a:c3:3b:
                    9e:5e:d0:8e:dd:a0:17:09:25:46:65:47:30:6c:27:
                    70:40:3a:e0:71:0c:26:9d:4f:4b:f6:6a:c6:61:80:
                    72:cc:f7:5e:62:53:e0:d0:d9:80:d7:c6:81:25:e1:
                    00:04:4b:15:d2:a2:8e:3c:d7:51:05:7d:36:88:6c:
                    48:99:1b:e9:6f:1d:6b:2c:58:c4:e1:7f:70:13:1f:
                    0a:c2:af:dc:cd:71:da:75:1d:7e:f4:86:94:5f:a8:
                    46:f5:e6:f3:4a:3e:f1:99:99:9f:6c:2f:fb:4f:e3:
                    b3:44:6d:da:19:e5:79:7a:7e:a0:a8:4a:b7:d5:e1:
                    46:bb:f9:31:4c:0f:ff:77:e4:8d:66:95:4d:db:df:
                    83:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F5:83:1C:4E:8C:F1:A1:22:1D:77:9C:2E:3F:1D:7E:21:FC:C4:44
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/024f40e22c399133ac1f884d384e761047c14ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:8c:35:b0:23:cd:06:61:bc:06:84:11:89:ea:10:93:ba:0a:
         e7:68:04:6d:44:c0:91:2f:b4:be:9a:df:7c:92:e5:79:19:eb:
         10:4c:8c:85:b4:a5:1d:5f:cc:dd:45:29:63:6e:6a:a9:9d:ad:
         43:b8:08:ee:39:f8:1e:f5:80:bc:89:74:05:a8:a9:45:58:35:
         7e:f8:b3:18:86:81:fa:7a:dd:56:ee:ef:98:fe:90:48:81:6d:
         50:10:2b:98:c4:3c:50:dd:45:55:df:33:29:d7:b5:60:4a:28:
         7f:26:17:99:16:6a:03:b8:28:56:14:dd:41:d9:c5:55:1b:14:
         d7:cc:c9:c1:85:14:00:3f:33:9e:7e:22:97:14:1a:4c:ed:1c:
         51:1b:1c:ec:13:58:a4:c7:dd:74:85:b2:52:6b:1d:7d:f5:41:
         dd:92:33:b3:81:4a:5f:5f:17:fc:43:86:99:b2:c0:c8:eb:95:
         6a:20:b3:63:c3:f1:a4:16:71:20:cf:ba:46:ab:db:28:ba:50:
         71:c8:a5:db:e9:d8:5a:80:89:3c:67:87:c9:6d:f5:94:c8:bf:
         ec:fd:b7:40:2e:d5:63:9b:69:1a:33:66:4c:1d:4c:3b:b7:63:
         81:0e:7c:a6:8f:e8:77:20:e6:61:bc:82:d6:35:df:87:d3:50:
         af:70:d5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----