Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/049737d0724493cfd76e51c741fcac504a88f2dc.roa
File:                     049737d0724493cfd76e51c741fcac504a88f2dc.roa (raw, json)
Hash identifier:          MIdJ6F72f5ShACRWgZo9Dw9D4a0yHa1znY+chorkU54=
Subject key identifier:   EF:45:B5:F4:81:61:B2:C7:1D:B0:8C:D8:D8:F3:E6:ED:5E:B8:D6:59
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       08B337
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/049737d0724493cfd76e51c741fcac504a88f2dc.roa
Signing time:             Wed 08 Jun 2022 05:21:52 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Thu 08 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570167 (0x8b337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Jun  8 03:00:00 2023 GMT
        Subject: CN=049737d0724493cfd76e51c741fcac504a88f2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:69:33:c0:bf:a0:02:c9:a9:d7:5f:bf:1b:bb:
                    65:ac:68:b7:ea:87:84:08:98:e3:93:32:15:73:2a:
                    9e:f4:ef:16:ff:48:86:de:13:6c:e7:7c:36:c2:b5:
                    2e:76:34:e2:94:55:f8:8b:92:eb:b1:12:16:8e:b7:
                    21:0f:12:fd:16:ea:f5:c4:4b:62:d4:1a:12:31:49:
                    89:ed:1d:36:5c:4b:63:8b:6d:b5:14:35:ea:c3:3c:
                    01:a4:8c:1d:07:6f:f3:3d:43:79:93:5e:22:4f:59:
                    1f:be:c3:de:1e:40:56:32:c4:a5:a0:54:07:ea:6a:
                    13:17:c5:a9:d5:0c:30:56:8c:e8:d0:c5:77:f4:1f:
                    7f:52:78:3e:6b:1e:77:44:85:12:d2:24:84:fc:69:
                    4b:41:a7:6e:22:62:c6:31:89:75:6f:74:d1:b1:11:
                    68:65:59:56:ed:a8:ae:f3:a2:a8:8b:40:6f:90:86:
                    64:e4:0e:a9:ae:bc:ab:97:18:56:9b:5f:be:82:41:
                    96:3c:31:5d:46:d5:f9:44:89:5c:29:9e:ed:f8:33:
                    96:29:89:22:93:ef:d9:3c:79:e2:0a:e7:31:f3:94:
                    1c:83:55:0b:42:82:f3:d5:2b:83:81:3d:a6:0d:73:
                    d8:d6:06:0a:a0:06:e0:48:be:f5:b2:81:a4:a0:d7:
                    4e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:45:B5:F4:81:61:B2:C7:1D:B0:8C:D8:D8:F3:E6:ED:5E:B8:D6:59
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/049737d0724493cfd76e51c741fcac504a88f2dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:66:56:a1:e9:3c:6c:8d:cc:25:4e:78:f0:af:12:be:ac:19:
         26:8f:5b:92:1e:d6:1d:5e:7a:f2:e7:da:46:f8:2f:52:bb:6f:
         76:2f:ab:5d:15:48:2e:fe:f4:fb:5e:98:d9:15:68:06:e1:eb:
         62:df:03:a0:1c:7b:28:e3:49:14:6e:5d:3b:08:e7:85:75:a2:
         5b:bb:75:44:75:38:da:4e:a7:20:bc:3c:61:06:63:18:87:19:
         12:ba:f0:fc:ac:5d:6b:c7:2c:5e:ec:e7:bf:2c:b2:87:3c:92:
         b1:5d:80:97:f9:ad:69:db:aa:76:90:10:fb:4d:8c:be:fd:08:
         c2:57:e8:21:ce:28:e8:be:b3:c4:27:46:b4:47:34:12:83:49:
         33:81:89:32:d3:d8:f0:0a:12:d1:07:c3:a6:ae:7f:be:79:9c:
         62:63:30:44:84:37:95:ec:07:02:1f:9d:33:2d:c7:cd:63:b1:
         75:dc:22:89:1b:3b:5c:4c:bc:8e:a1:13:f0:c2:10:2e:98:03:
         ba:5d:5c:ed:f3:1f:92:72:48:fc:42:b0:8e:95:59:85:be:3f:
         5e:b3:ff:d4:44:e2:50:7f:d8:51:5b:5b:b3:16:ff:0f:32:cc:
         dd:a6:9c:0d:55:a3:22:aa:45:e9:d9:dd:53:39:49:a8:e5:38:
         9e:72:19:2a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCLM3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNjA4
MDMwMDAwWhcNMjMwNjA4MDMwMDAwWjAzMTEwLwYDVQQDEygwNDk3MzdkMDcyNDQ5
M2NmZDc2ZTUxYzc0MWZjYWM1MDRhODhmMmRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5WkzwL+gAsmp11+/G7tlrGi36oeECJjjkzIVcyqe9O8W/0iG
3hNs53w2wrUudjTilFX4i5LrsRIWjrchDxL9Fur1xEti1BoSMUmJ7R02XEtji221
FDXqwzwBpIwdB2/zPUN5k14iT1kfvsPeHkBWMsSloFQH6moTF8Wp1QwwVozo0MV3
9B9/Ung+ax53RIUS0iSE/GlLQaduImLGMYl1b3TRsRFoZVlW7aiu86Koi0BvkIZk
5A6prryrlxhWm1++gkGWPDFdRtX5RIlcKZ7t+DOWKYkik+/ZPHniCucx85Qcg1UL
QoLz1SuDgT2mDXPY1gYKoAbgSL71soGkoNdO+wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFO9FtfSBYbLHHbCM2Njz5u1euNZZMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzA0OTczN2QwNzI0NDkzY2ZkNzZlNTFjNzQxZmNhYzUwNGE4OGYyZGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAtmZWoek8bI3M
JU548K8SvqwZJo9bkh7WHV568ufaRvgvUrtvdi+rXRVILv70+16Y2RVoBuHrYt8D
oBx7KONJFG5dOwjnhXWiW7t1RHU42k6nILw8YQZjGIcZErrw/Kxda8csXuznvyyy
hzySsV2Al/mtaduqdpAQ+02Mvv0IwlfoIc4o6L6zxCdGtEc0EoNJM4GJMtPY8AoS
0QfDpq5/vnmcYmMwRIQ3lewHAh+dMy3HzWOxddwiiRs7XEy8jqET8MIQLpgDul1c
7fMfknJI/EKwjpVZhb4/XrP/1ETiUH/YUVtbsxb/DzLM3aacDVWjIqpF6dndUzlJ
qOU4nnIZKg==
-----END CERTIFICATE-----