Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/18e2d3611881393976b5ca6d7119cb1ac8cf3720.roa
File:                     18e2d3611881393976b5ca6d7119cb1ac8cf3720.roa (raw, json)
Hash identifier:          TDgGGPSyS0y0Y3bKYirQ6TxorhOAvhFmHLbYoD68pGY=
Subject key identifier:   D8:24:69:D6:89:A9:03:1E:46:75:AF:C0:6D:37:C6:01:6A:8A:9E:A9
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       08D0E6
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/18e2d3611881393976b5ca6d7119cb1ac8cf3720.roa
Signing time:             Sun 12 Jun 2022 00:28:02 +0000
ROA not before:           Sun 12 Jun 2022 03:00:00 +0000
ROA not after:            Mon 12 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 577766 (0x8d0e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 12 03:00:00 2022 GMT
            Not After : Jun 12 03:00:00 2023 GMT
        Subject: CN=18e2d3611881393976b5ca6d7119cb1ac8cf3720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dd:76:e4:4f:a1:70:4c:63:b8:92:fa:62:65:
                    9b:4d:ea:7e:cd:c2:2a:40:03:86:d0:31:9c:3d:81:
                    bd:af:93:12:46:9f:22:79:60:a3:23:23:04:16:df:
                    f3:89:7c:4d:a0:88:87:95:c3:38:46:f1:4e:a2:a4:
                    f9:25:e2:34:f0:50:d0:25:cc:1f:ad:3c:a9:38:8c:
                    59:a6:4c:6f:b0:7e:32:73:7b:22:c0:09:e2:c1:ba:
                    db:83:1c:ad:e0:eb:9e:1e:20:08:33:07:45:c5:b1:
                    7a:f8:4b:70:c2:18:32:86:98:27:26:13:46:3e:f4:
                    66:cb:61:a6:01:38:c9:ad:1c:b4:a5:ab:f3:33:38:
                    b9:7d:68:88:23:a7:2e:d2:97:72:5b:62:58:f5:30:
                    23:bf:8e:8a:38:88:66:ea:26:4c:7a:85:a4:2f:f4:
                    30:5e:15:da:6f:2a:00:b2:66:26:2c:b5:ca:a6:b6:
                    6c:97:de:9a:69:ca:53:21:4b:1e:e3:3c:25:ce:6a:
                    f5:97:ba:c1:3c:d5:8d:88:16:66:80:57:2f:5d:b4:
                    7b:bd:55:c6:69:ec:f8:c1:ff:30:aa:7a:2b:0a:6e:
                    f5:ee:84:28:d9:1c:0f:ab:9c:c8:d1:33:b2:eb:5d:
                    33:03:48:7f:04:12:18:0c:16:93:02:03:ff:8a:7c:
                    43:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:24:69:D6:89:A9:03:1E:46:75:AF:C0:6D:37:C6:01:6A:8A:9E:A9
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/18e2d3611881393976b5ca6d7119cb1ac8cf3720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:e3:33:28:af:10:0b:3c:c7:2d:4c:a4:2c:ce:77:2c:49:f5:
         67:02:5a:c9:0f:ca:29:34:26:58:c3:17:df:11:40:57:cb:17:
         b5:d2:9c:a1:5c:9d:c6:d1:01:f2:e4:09:01:24:62:f4:c8:e7:
         ef:ce:d5:49:e3:c6:9e:c5:ee:e6:27:61:58:89:a1:19:1e:97:
         c2:17:85:cf:de:4b:14:bc:a5:9c:f7:4b:d6:1c:39:b1:47:20:
         5c:c9:bb:18:f2:07:41:95:1a:6e:58:0f:81:28:d0:51:be:d9:
         3b:87:63:cb:2d:83:3c:b5:15:b6:1e:a0:5a:78:41:94:95:ec:
         30:55:dc:82:a7:2a:e5:ac:bd:53:27:b1:e4:2d:c4:d0:00:cc:
         f7:cb:5e:37:d0:73:20:b1:bc:4c:fc:16:3e:c8:30:68:e0:62:
         74:76:22:3f:ac:4d:ee:a2:af:5a:42:a1:31:aa:70:cf:e0:ab:
         78:c6:69:fe:c7:56:37:1c:fc:1c:94:26:3f:cb:31:0e:f0:dd:
         c8:25:6c:99:4a:88:75:b9:4f:a7:ca:cc:cd:ad:57:69:a7:40:
         cd:95:6c:99:cc:18:68:ec:c7:4a:06:f8:2b:75:87:fc:53:8c:
         ca:56:21:3e:5b:56:eb:b5:ce:bc:b7:17:b7:e9:7c:24:32:80:
         88:9e:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----