Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1319c8f86e1db49adf3dba7768d13fa42abda006.roa
File:                     1319c8f86e1db49adf3dba7768d13fa42abda006.roa (raw, json)
Hash identifier:          4TtqOv974ft6Brf54Xr7pZQxp6VoSZcaVrVbUn+p4x4=
Subject key identifier:   EF:89:F3:EE:AC:28:17:5A:A4:F7:E4:B0:24:63:EC:63:2A:B4:E4:B8
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       080919
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1319c8f86e1db49adf3dba7768d13fa42abda006.roa
Signing time:             Tue 24 May 2022 02:50:45 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Wed 24 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526617 (0x80919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2023 GMT
        Subject: CN=1319c8f86e1db49adf3dba7768d13fa42abda006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:95:7b:c7:1c:ac:93:80:dc:45:fa:93:58:5e:
                    00:d8:73:7e:46:b1:15:d1:ab:f7:f3:19:9b:84:98:
                    c9:fe:a6:1e:ca:88:e7:93:51:35:0e:54:5d:8d:e0:
                    d9:19:dd:46:39:45:c4:18:ce:85:df:93:21:aa:80:
                    53:a8:4e:3c:27:f3:61:69:17:7b:d5:92:24:3d:a3:
                    72:38:94:07:c9:81:be:21:85:a6:85:d5:52:e1:15:
                    ec:72:fa:f5:24:a0:f4:d2:d0:a5:a7:eb:5b:5f:7f:
                    93:54:1e:e2:24:34:46:3f:b2:a9:b3:ac:7f:4f:d5:
                    72:76:d9:5a:ad:c1:2c:e6:2d:d5:4f:1d:56:51:15:
                    6e:bf:7f:3f:26:28:ac:35:33:df:7a:2a:25:e7:8e:
                    4e:06:9b:47:14:c0:a1:fd:92:c4:ae:fc:67:da:93:
                    21:6e:ff:66:09:9d:9e:18:cd:3b:9f:da:28:a4:6a:
                    bf:2f:00:10:24:85:75:71:bd:1a:1d:82:78:29:e4:
                    04:1c:2b:4f:58:09:ad:e0:4c:2c:ef:fa:f8:d5:5c:
                    8e:8a:90:68:f9:ea:34:db:11:ff:bd:04:ed:4e:04:
                    a5:8f:36:13:e7:39:43:45:79:07:b3:98:50:c7:31:
                    27:7c:87:92:a2:09:a3:3a:8f:58:43:05:ff:25:ff:
                    a3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:89:F3:EE:AC:28:17:5A:A4:F7:E4:B0:24:63:EC:63:2A:B4:E4:B8
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1319c8f86e1db49adf3dba7768d13fa42abda006.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:f3:eb:21:e6:35:d7:03:e5:44:54:fb:ea:a7:e6:f0:f3:47:
         a4:cf:74:0f:b2:b7:f2:d6:09:32:59:cb:6c:ed:66:55:80:56:
         19:7b:f0:33:93:24:4d:ef:1a:4b:66:9e:f4:7d:f0:86:a8:2e:
         b8:c6:8a:05:58:37:80:e9:5f:63:7c:9a:1f:6f:81:97:f7:7c:
         29:8e:23:b8:c7:37:fe:5a:a3:11:ed:6e:89:e0:85:bf:f6:9a:
         a4:56:e3:e5:f7:d1:65:12:47:19:f6:3d:32:bc:21:b4:b4:05:
         7d:73:e5:36:1c:70:08:1f:aa:13:76:ad:84:b7:1f:ac:c6:a1:
         2f:53:1b:20:0d:68:14:55:72:25:71:22:d6:54:49:b2:e4:e4:
         e7:15:ed:d3:19:29:e0:a8:c2:0d:8c:55:37:9b:dd:f8:a9:b0:
         c7:a0:18:f9:d9:6a:1d:aa:e7:d3:b2:c2:42:45:fa:68:8d:5e:
         79:62:97:39:47:23:aa:9d:5e:93:e4:95:36:80:87:dd:df:ac:
         d3:12:56:4e:ba:cb:71:20:ef:d3:35:2a:cc:3c:b9:eb:0e:5a:
         52:c2:de:f9:c2:4c:87:e9:41:69:18:b9:60:d7:49:00:2b:4b:
         08:86:db:44:03:a4:74:eb:c2:d6:61:b1:45:79:80:97:7e:08:
         e1:3d:7f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----