Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0725973052851a38a57520d67e664332f21e71f8.roa
File:                     0725973052851a38a57520d67e664332f21e71f8.roa (raw, json)
Hash identifier:          TsrKYNLwgfaUJu8RIs+mQ8Hsxp6BZa0xaSPbuHgV3u0=
Subject key identifier:   96:28:51:D3:AD:3F:66:65:21:FC:36:D5:AB:0A:24:C6:A6:B3:8E:68
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       083D9C
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0725973052851a38a57520d67e664332f21e71f8.roa
Signing time:             Sun 29 May 2022 00:43:27 +0000
ROA not before:           Sun 29 May 2022 03:00:00 +0000
ROA not after:            Mon 29 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 540060 (0x83d9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 29 03:00:00 2022 GMT
            Not After : May 29 03:00:00 2023 GMT
        Subject: CN=0725973052851a38a57520d67e664332f21e71f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:47:84:8d:14:71:ef:70:4c:15:66:a8:d5:75:
                    43:34:e7:21:d1:7b:21:4e:63:83:c6:96:5e:43:ec:
                    58:e6:11:32:5e:a1:50:bc:fc:d5:1c:71:e6:91:dd:
                    9d:69:7c:9f:8a:71:6a:1c:c7:7c:34:25:3a:8d:ca:
                    d2:b3:98:5f:02:9a:88:1b:b5:dd:b9:dc:72:81:66:
                    f3:0a:1e:24:d3:9d:38:9a:61:53:93:0e:e8:83:4f:
                    23:18:7d:10:24:2b:4b:65:96:53:38:bc:b3:95:ce:
                    51:86:7d:08:1f:c1:a5:c9:ed:64:3e:0f:73:cf:30:
                    49:4d:73:d4:39:4d:68:18:81:c4:88:65:6c:67:35:
                    c7:e3:37:26:ab:6a:14:c2:05:ad:a1:bb:f9:80:bd:
                    e9:91:ac:79:79:94:ab:90:1c:7f:6b:d0:de:d4:86:
                    08:c7:dd:99:bf:3a:13:f5:63:79:6f:b9:e4:fe:a0:
                    5d:7d:8d:15:c0:50:ff:ab:2c:57:86:49:96:17:5f:
                    ef:c3:e7:14:81:8c:49:ec:35:53:6f:ac:00:fb:1a:
                    5c:19:f0:19:13:51:91:99:df:84:90:2b:5e:39:ab:
                    9f:49:51:11:19:4c:ec:4d:74:82:a8:ca:c4:a3:28:
                    80:3f:d7:40:8b:d5:d5:ac:41:ce:f1:fe:25:ff:4b:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:28:51:D3:AD:3F:66:65:21:FC:36:D5:AB:0A:24:C6:A6:B3:8E:68
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0725973052851a38a57520d67e664332f21e71f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:91:64:0e:df:5f:65:19:c8:86:09:db:83:05:02:c8:74:83:
         01:10:bf:c5:6a:e1:f9:67:80:55:78:4b:b7:a5:89:e0:da:02:
         1f:6e:c2:69:59:6b:ef:a0:78:8e:3c:87:b5:93:29:5c:ac:d1:
         0d:d1:1e:f5:d3:16:b8:84:51:25:83:05:fd:39:19:b4:28:1b:
         3d:25:74:22:d1:8a:ef:82:78:7e:8c:26:6f:34:70:d0:c7:2d:
         2e:84:e8:f9:08:a1:40:64:53:11:8e:13:ac:68:1e:25:f6:02:
         67:14:3b:5e:15:8a:14:f0:5f:cc:6b:28:83:ec:71:81:41:61:
         63:f7:28:c3:a1:26:0c:a0:b5:a1:24:c9:e2:18:0e:26:6e:cc:
         dc:7d:2e:3c:ac:89:32:06:8a:5c:18:2e:f0:ca:44:c8:7b:40:
         29:8f:fa:c4:3c:04:9d:3e:ce:cb:69:2e:4d:20:54:1b:8f:16:
         59:8e:78:0e:e1:db:58:b5:26:67:fd:d9:6d:70:df:0b:0d:38:
         28:5a:86:0b:cb:bd:dc:6b:4e:83:da:08:b2:e7:ea:e1:19:e9:
         ab:46:f7:3b:b6:8a:46:e9:38:77:6f:48:86:1f:fd:d2:b0:eb:
         b9:5f:4d:92:49:4f:24:df:f9:25:e9:74:3f:4d:8d:0b:1f:4d:
         ad:fb:5c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----