Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/15e6b9158b2474bf3af79c886f2e78240a7d7592.roa
File:                     15e6b9158b2474bf3af79c886f2e78240a7d7592.roa (raw, json)
Hash identifier:          G+REkEtclBr4wX8P8HBh2mVZMq2OJOzzwmApCR/tocw=
Subject key identifier:   50:B7:88:E0:13:8D:06:53:15:7D:A7:76:75:97:2A:27:8D:7C:4A:CA
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0ED7FC
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/15e6b9158b2474bf3af79c886f2e78240a7d7592.roa
Signing time:             Mon 24 Oct 2022 00:00:30 +0000
ROA not before:           Sun 23 Oct 2022 03:00:00 +0000
ROA not after:            Tue 24 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972796 (0xed7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 23 03:00:00 2022 GMT
            Not After : Oct 24 03:00:00 2023 GMT
        Subject: CN=15e6b9158b2474bf3af79c886f2e78240a7d7592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2f:d0:e4:67:8a:61:56:eb:5a:a1:7b:3c:c9:
                    36:a7:d5:b1:03:25:f4:dc:85:10:26:df:0d:81:29:
                    0b:bb:c1:a8:1d:79:14:f6:8c:64:a7:05:1a:ec:17:
                    a4:06:ef:ce:e3:41:97:d0:cd:ac:36:3f:1c:50:9f:
                    b0:b5:4d:db:3d:c3:cc:ed:ad:cb:78:18:6d:84:47:
                    4f:71:3d:6a:00:01:d5:24:6b:55:13:7a:95:e9:fb:
                    91:f7:f8:ee:85:ac:79:2b:08:33:b1:9c:f6:bd:58:
                    94:35:a7:e0:85:fb:7b:02:40:05:dd:26:86:17:4c:
                    20:b4:e5:17:9f:2e:9f:38:e2:93:08:d1:4b:34:15:
                    21:47:96:90:14:8d:83:d2:f6:80:48:8d:6d:83:7b:
                    e1:08:90:96:9d:1d:f9:3b:24:e6:e7:18:be:7c:14:
                    83:4e:c4:4c:12:0a:3f:5a:62:fd:1f:2e:08:b9:ac:
                    62:83:79:07:69:60:83:8b:4a:7c:47:91:33:b6:3b:
                    7a:a5:eb:56:65:9d:dc:8b:e3:90:15:72:c3:fa:fd:
                    db:a3:91:98:79:8c:32:c0:d4:4b:c0:80:f7:c0:e4:
                    00:21:b5:e7:b0:34:10:16:7f:d3:be:24:60:07:eb:
                    9a:d2:68:a5:fb:0b:2f:cf:9f:8f:7d:ab:01:d1:db:
                    50:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B7:88:E0:13:8D:06:53:15:7D:A7:76:75:97:2A:27:8D:7C:4A:CA
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/15e6b9158b2474bf3af79c886f2e78240a7d7592.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:39:ab:34:2f:c5:22:b3:c8:9e:80:84:4a:0d:c9:07:54:65:
         22:b1:08:2e:8a:1c:c6:4e:31:ce:e9:82:5f:f1:15:19:2e:dd:
         4e:e1:7b:ad:f4:39:78:ed:ff:dc:9e:5e:8e:6c:ec:fc:1e:d2:
         af:56:01:f9:2a:ac:c0:1a:fa:85:b8:9d:3f:95:3f:33:e1:3e:
         d3:71:93:98:80:72:83:c7:8d:fa:b3:a3:ce:d3:82:09:e3:ac:
         58:66:39:2f:f1:dd:b0:d0:2c:11:ef:42:c6:09:7d:49:f3:7f:
         a8:ae:19:0c:ff:85:a2:89:03:9d:d6:3e:f7:91:ca:99:8f:60:
         ef:b3:c2:f1:1b:bb:cd:d7:e0:d9:c3:06:33:eb:1f:d8:c2:41:
         43:23:66:a9:80:03:93:f9:29:fd:04:45:f1:2f:ef:5a:10:c5:
         21:26:f4:f2:13:da:bd:4b:28:3c:1f:1d:9d:0b:af:27:6b:ab:
         43:b8:3f:36:f5:c7:6b:70:b1:f4:a1:41:3c:34:cc:73:c1:44:
         90:42:41:b5:a5:5b:78:28:d9:96:2e:1e:d9:a4:cf:a6:04:84:
         f4:1a:20:8a:20:83:96:83:47:2c:56:8e:27:91:0d:03:0f:a3:
         bc:00:47:c3:8d:b0:91:a3:ba:fe:d6:87:16:22:3d:55:bc:75:
         ef:39:79:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----