Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0a0946a3b6380d46cd2f861329c1133419174da4.roa
File:                     0a0946a3b6380d46cd2f861329c1133419174da4.roa (raw, json)
Hash identifier:          C/icB3/sC1ODt9COjFhSrn2n3pQsz1IOTa4oej64pOY=
Subject key identifier:   D5:B9:49:29:A6:AD:C7:32:2D:FA:4E:C2:A9:6F:DE:81:DA:62:96:1E
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       07CF0A
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0a0946a3b6380d46cd2f861329c1133419174da4.roa
Signing time:             Wed 18 May 2022 04:31:02 +0000
ROA not before:           Wed 18 May 2022 03:00:00 +0000
ROA not after:            Thu 18 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 511754 (0x7cf0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 18 03:00:00 2022 GMT
            Not After : May 18 03:00:00 2023 GMT
        Subject: CN=0a0946a3b6380d46cd2f861329c1133419174da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:49:87:29:22:aa:e8:47:26:25:07:0d:40:39:
                    09:92:53:73:41:07:b8:ce:d7:f4:f3:2d:cb:1c:18:
                    ae:31:3a:00:fe:30:25:8c:ca:9c:e9:4a:15:ca:5a:
                    22:2b:1e:d4:db:86:9a:d1:65:39:bb:0f:1a:21:80:
                    1a:6d:ce:4b:4f:49:cf:57:1d:74:37:4e:d6:02:1e:
                    94:5d:18:3f:a9:0b:9f:d9:9a:e0:0e:ee:8b:c6:3d:
                    31:2b:6d:2a:aa:6c:fa:f8:fb:9f:fd:25:7e:9e:95:
                    91:20:f4:2f:38:a9:ac:0f:ee:91:01:c5:d2:99:d6:
                    cf:47:a9:b5:19:a0:43:2b:aa:27:08:7a:e2:f0:70:
                    39:9c:8d:19:3f:85:43:07:43:21:30:20:3c:87:12:
                    c3:ff:ce:14:ad:d0:70:f7:04:ae:48:30:f4:38:cd:
                    68:45:dc:84:86:6a:d5:03:f4:74:b0:af:54:0b:3c:
                    54:82:2f:cf:ee:22:84:44:bf:64:a9:a8:03:1f:7b:
                    45:8d:e8:dd:d7:50:4b:1e:18:35:10:74:4f:64:d7:
                    22:01:2e:0c:bd:a9:17:d4:3d:45:cf:c4:f0:c9:69:
                    99:ca:64:e6:91:51:5d:e7:39:ee:d7:f7:01:bc:3b:
                    e7:35:df:b0:2f:d3:fd:c0:a9:28:56:fd:3d:8d:5b:
                    c3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B9:49:29:A6:AD:C7:32:2D:FA:4E:C2:A9:6F:DE:81:DA:62:96:1E
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0a0946a3b6380d46cd2f861329c1133419174da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:c1:be:46:d1:43:df:52:f1:e4:1b:49:27:42:61:d6:ba:77:
         65:92:4f:80:cb:ec:3e:51:49:50:78:fd:21:f8:6f:92:42:62:
         bf:74:b0:8d:0a:3b:0d:e5:92:94:b4:a0:a1:23:78:a4:7f:43:
         bd:2b:1c:0c:75:6f:fb:b0:4c:db:d1:8c:7b:be:e1:5d:85:2f:
         61:20:f7:c7:64:8b:96:cc:2f:4e:76:ee:fb:47:1e:0a:90:a3:
         24:43:c1:fd:0d:22:30:39:3a:3e:d7:d1:68:bc:76:d6:78:75:
         04:6a:3d:56:d1:92:3a:3d:1c:1b:bc:c6:67:e3:7f:f0:b0:12:
         7e:05:b6:38:53:b1:8d:20:92:6a:ab:a7:94:db:96:dc:b0:6c:
         7a:e4:67:03:6a:2d:b4:45:48:18:47:de:5f:10:3e:3c:85:6d:
         c3:2f:c4:65:84:6b:68:e6:55:e0:a5:20:b3:bb:ca:cd:37:28:
         68:35:9e:f5:4d:a4:f4:d8:81:a8:34:76:36:34:f7:c2:9f:76:
         78:a6:2a:be:54:ad:7a:7b:01:b7:8b:43:9d:71:06:43:2c:2d:
         ba:42:7e:d3:c2:25:24:d2:45:b5:ae:cf:c4:76:fd:90:e4:7d:
         15:a5:44:bd:79:6b:83:a1:09:ca:75:45:80:10:aa:cb:f9:85:
         21:dd:20:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----