Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/02bfc6c3e7856dc4bb8d52b9850c2195f95c05ae.roa
File:                     02bfc6c3e7856dc4bb8d52b9850c2195f95c05ae.roa (raw, json)
Hash identifier:          I84WnHb61CLu+BXxJACsKKOg6VEViG2RAnvKNjltBKo=
Subject key identifier:   D7:CE:0C:C1:C7:82:3D:0C:65:BF:39:9A:41:0E:4C:D8:6E:8E:38:F5
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0BF300
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/02bfc6c3e7856dc4bb8d52b9850c2195f95c05ae.roa
Signing time:             Mon 22 Aug 2022 05:09:03 +0000
ROA not before:           Mon 22 Aug 2022 03:00:00 +0000
ROA not after:            Tue 22 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783104 (0xbf300)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug 22 03:00:00 2022 GMT
            Not After : Aug 22 03:00:00 2023 GMT
        Subject: CN=02bfc6c3e7856dc4bb8d52b9850c2195f95c05ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2b:58:b1:09:64:02:29:c6:f7:e0:88:b1:bb:
                    0b:44:89:50:20:43:19:af:f1:52:dd:18:3f:11:f4:
                    b2:e6:1e:1c:c6:93:4e:5c:92:14:0a:cc:1e:b7:3a:
                    ce:27:c4:79:5e:ed:e3:74:d3:ab:99:8c:6d:6c:c8:
                    be:b9:b5:18:b8:f8:7b:db:2d:9f:83:2d:52:54:74:
                    52:95:4e:1b:3c:cf:bd:e1:1c:30:76:7a:d5:08:1a:
                    fb:44:7b:3e:3e:b8:b2:45:4f:a7:7a:fc:07:ce:1a:
                    6d:06:d8:ff:d2:8b:a1:0a:4d:1a:34:ad:05:c7:0e:
                    ef:03:20:21:9b:e4:f0:a2:99:88:e7:6f:d8:d9:11:
                    ab:c5:cc:29:b4:8c:a2:9c:76:75:4f:dc:a3:2c:21:
                    20:ea:c4:b0:4f:2c:92:f1:97:a7:1a:07:d4:48:3c:
                    0f:71:7f:48:45:65:c3:ad:41:c7:a6:80:74:63:d1:
                    a3:8b:80:a8:51:a3:1e:d4:00:79:fc:65:32:6b:15:
                    6e:8f:5a:1c:2b:68:74:d7:aa:07:df:e8:9a:75:a2:
                    ef:ef:62:00:07:7a:25:14:11:ca:b1:54:29:87:47:
                    c8:1e:0d:a2:2f:ce:3b:06:80:f7:4d:b2:7f:65:b6:
                    2d:80:ef:51:6f:22:bc:aa:2c:0a:4f:73:52:3b:66:
                    e2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CE:0C:C1:C7:82:3D:0C:65:BF:39:9A:41:0E:4C:D8:6E:8E:38:F5
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/02bfc6c3e7856dc4bb8d52b9850c2195f95c05ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:76:7f:5a:8b:eb:52:b0:51:48:52:1e:74:b8:cd:29:d9:2a:
         d4:0d:9d:e0:0a:5c:e9:53:80:29:3b:d3:65:80:86:d1:12:a7:
         b4:da:c6:e5:8f:26:43:38:ed:9c:be:11:09:8f:fd:55:9e:3a:
         d3:f2:07:07:2b:8c:e8:1b:ee:4f:c1:21:3d:4c:d7:b7:42:71:
         da:6f:81:ac:87:15:2f:ee:24:b6:6e:5b:d0:72:ff:53:3f:6b:
         88:40:41:2f:02:0f:e3:58:e7:14:59:18:ed:cb:72:40:45:dd:
         21:02:ec:f4:ac:04:83:63:8a:30:e4:54:b4:c9:9e:33:23:7c:
         38:8e:85:a0:19:b8:82:2e:0c:a6:6d:7c:fd:32:4c:46:11:1b:
         91:2d:af:cb:8c:79:25:a1:a8:51:b1:fc:ed:34:4b:06:bb:5c:
         f8:7c:06:ce:68:23:fc:6f:0a:30:f3:18:9b:33:4f:4d:f8:20:
         5a:79:03:17:29:3a:cd:d5:c6:1a:04:f8:d5:21:36:ca:07:40:
         87:54:36:7b:42:cf:c2:62:77:fc:64:34:83:6f:05:17:95:36:
         af:cc:f2:f1:cc:96:7f:71:88:22:a4:a7:c1:c4:16:eb:2f:7d:
         ce:a2:7d:50:24:9d:d6:06:19:90:9b:6a:8e:49:07:24:84:80:
         e5:81:27:dd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDC/MAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwODIy
MDMwMDAwWhcNMjMwODIyMDMwMDAwWjAzMTEwLwYDVQQDEygwMmJmYzZjM2U3ODU2
ZGM0YmI4ZDUyYjk4NTBjMjE5NWY5NWMwNWFlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgStYsQlkAinG9+CIsbsLRIlQIEMZr/FS3Rg/EfSy5h4cxpNO
XJIUCswetzrOJ8R5Xu3jdNOrmYxtbMi+ubUYuPh72y2fgy1SVHRSlU4bPM+94Rww
dnrVCBr7RHs+PriyRU+nevwHzhptBtj/0ouhCk0aNK0Fxw7vAyAhm+TwopmI52/Y
2RGrxcwptIyinHZ1T9yjLCEg6sSwTyyS8ZenGgfUSDwPcX9IRWXDrUHHpoB0Y9Gj
i4CoUaMe1AB5/GUyaxVuj1ocK2h016oH3+iadaLv72IAB3olFBHKsVQph0fIHg2i
L847BoD3TbJ/ZbYtgO9RbyK8qiwKT3NSO2bidwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFNfODMHHgj0MZb85mkEOTNhujjj1MB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzAyYmZjNmMzZTc4NTZkYzRiYjhkNTJiOTg1MGMyMTk1Zjk1YzA1YWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAlHZ/WovrUrBR
SFIedLjNKdkq1A2d4Apc6VOAKTvTZYCG0RKntNrG5Y8mQzjtnL4RCY/9VZ460/IH
ByuM6BvuT8EhPUzXt0Jx2m+BrIcVL+4ktm5b0HL/Uz9riEBBLwIP41jnFFkY7cty
QEXdIQLs9KwEg2OKMORUtMmeMyN8OI6FoBm4gi4Mpm18/TJMRhEbkS2vy4x5JaGo
UbH87TRLBrtc+HwGzmgj/G8KMPMYmzNPTfggWnkDFyk6zdXGGgT41SE2ygdAh1Q2
e0LPwmJ3/GQ0g28FF5U2r8zy8cyWf3GIIqSnwcQW6y99zqJ9UCSd1gYZkJtqjkkH
JISA5YEn3Q==
-----END CERTIFICATE-----