Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0dc11d489f3e35ebcd46becfb8af25eb2c7da664.roa
File:                     0dc11d489f3e35ebcd46becfb8af25eb2c7da664.roa (raw, json)
Hash identifier:          2KzS+fHsQHSW1MP/SVtCNCXxMlJonRVYIn1/ErxwzNs=
Subject key identifier:   FD:32:AF:66:3E:F9:2C:3A:E3:34:23:0E:E2:B6:CB:2C:55:1B:AE:CD
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       07DECD
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0dc11d489f3e35ebcd46becfb8af25eb2c7da664.roa
Signing time:             Fri 20 May 2022 00:52:41 +0000
ROA not before:           Fri 20 May 2022 03:00:00 +0000
ROA not after:            Sat 20 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515789 (0x7decd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 20 03:00:00 2022 GMT
            Not After : May 20 03:00:00 2023 GMT
        Subject: CN=0dc11d489f3e35ebcd46becfb8af25eb2c7da664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e3:60:63:75:ff:cc:f2:dc:b9:d6:c0:5b:d3:
                    50:e7:dd:fe:28:02:24:7f:a0:2b:8a:8e:ca:15:9c:
                    bc:e2:89:16:d9:05:ff:11:ad:7a:68:d3:c6:04:86:
                    e3:6a:f5:80:48:32:c2:a1:2a:f7:58:e5:e7:96:f5:
                    64:7d:3c:73:82:24:61:9c:1a:c9:3e:3b:5d:c5:f8:
                    18:be:ce:99:38:89:e0:4b:e0:69:39:e6:b9:ef:56:
                    27:25:b8:77:bb:87:95:c7:9e:a7:14:6d:ea:3e:8d:
                    35:26:da:9f:90:25:fe:6e:3a:81:14:09:fe:e3:ee:
                    9a:53:6c:fc:e9:50:ed:7f:4c:e4:0b:4a:17:5c:b9:
                    7c:dc:14:fe:53:09:aa:25:32:5d:65:66:60:0e:66:
                    32:69:35:46:d2:02:c8:b2:aa:a8:81:5e:17:25:e5:
                    0c:ff:ce:69:8f:34:5a:eb:9d:75:e8:9a:aa:6a:9e:
                    01:82:19:6e:7b:0f:73:73:74:4b:09:fc:c6:0f:46:
                    d6:63:19:65:c7:bd:41:42:c4:89:e7:65:a3:b4:a2:
                    9c:67:b2:75:fd:66:4e:c0:a0:10:84:42:09:65:32:
                    c6:5b:11:93:e7:74:0f:46:3b:e6:9c:e8:77:3e:f4:
                    11:cc:1b:07:95:7c:46:7f:99:38:ec:50:8b:95:f6:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:32:AF:66:3E:F9:2C:3A:E3:34:23:0E:E2:B6:CB:2C:55:1B:AE:CD
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/0dc11d489f3e35ebcd46becfb8af25eb2c7da664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:7a:67:0d:f3:d5:9e:d8:c5:f1:42:de:ad:ea:5e:bf:76:fb:
         2d:5e:d9:d2:8d:13:c9:8f:a0:0d:39:50:cc:c0:72:a7:f5:c4:
         73:17:7e:21:36:96:55:4a:31:ad:b1:7b:a8:18:01:2c:0a:4f:
         fe:31:fa:ae:25:10:4b:6d:cf:ef:6a:31:e6:44:c5:6c:bc:9a:
         6a:c4:d3:0c:fb:f4:a8:92:8b:39:15:7e:c8:b8:ee:82:06:fd:
         64:e6:93:72:97:24:c3:e8:a1:2a:69:e7:2b:a8:69:c2:76:cb:
         8c:a6:9f:eb:50:d9:dd:de:f3:4c:de:51:a7:45:da:bd:a9:cb:
         fe:72:6e:b3:19:6d:5b:4c:a6:75:11:76:cc:ef:5f:15:c2:22:
         b1:86:db:51:cb:b4:54:4f:90:73:cb:e6:07:81:9f:c5:b0:a7:
         0f:23:3f:e1:a6:b7:55:ee:51:ed:70:f2:26:c7:44:6f:28:89:
         02:bd:87:0e:42:70:d3:f7:7d:27:e6:f9:89:a8:44:fd:e6:d3:
         9c:e2:30:29:10:c0:d7:12:10:68:8f:e9:eb:7e:e9:9c:a3:b4:
         75:a6:6a:2d:fe:54:51:2d:83:5c:b8:d7:8d:41:b9:57:8d:db:
         c2:ba:24:84:b2:a1:4e:d6:05:45:d4:19:f3:3e:f6:f5:37:53:
         c5:fa:cc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----