Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1922f89794b361492149389d9923bc3ce2c35eb3.roa
File:                     1922f89794b361492149389d9923bc3ce2c35eb3.roa (raw, json)
Hash identifier:          sax03XDoeNnhWveXz/jUoLcwO6igH1rVsYaYMrk6VyQ=
Subject key identifier:   AF:AC:61:B6:9D:31:E0:DD:26:C9:E1:B8:7B:FF:56:CF:68:89:9C:EE
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0AA9A0
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1922f89794b361492149389d9923bc3ce2c35eb3.roa
Signing time:             Mon 25 Jul 2022 03:50:08 +0000
ROA not before:           Mon 25 Jul 2022 03:00:00 +0000
ROA not after:            Tue 25 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698784 (0xaa9a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 25 03:00:00 2022 GMT
            Not After : Jul 25 03:00:00 2023 GMT
        Subject: CN=1922f89794b361492149389d9923bc3ce2c35eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:23:26:71:de:54:d6:8b:21:9d:a6:cc:a7:11:
                    9f:1c:58:af:59:28:b2:e3:1f:6b:7c:fd:b8:e1:16:
                    ef:8c:bc:9d:d1:62:b7:55:88:9a:b9:c0:b7:11:ac:
                    9e:58:5b:42:14:8a:b9:d7:bd:a2:7c:26:5f:7c:79:
                    0c:dc:6a:d3:c2:a5:5c:78:9b:d9:25:db:b4:ff:07:
                    c3:d3:4d:d7:a2:d7:fd:d8:07:47:04:89:48:dd:df:
                    4c:02:5f:1f:29:cc:65:43:49:1f:8e:3e:34:74:88:
                    8a:df:6f:77:81:77:2b:a3:71:28:d6:45:b1:46:8c:
                    2f:04:74:95:06:8d:0a:0f:2a:76:13:3d:b9:ad:1b:
                    f1:37:d3:d9:ce:1e:9f:8c:ff:67:df:3d:79:ae:e8:
                    28:bf:cc:39:1c:15:9a:cf:0e:53:c7:69:bc:79:06:
                    7d:ba:1f:40:f1:e8:4b:6a:44:9f:a5:d6:8c:c9:59:
                    ee:6b:ba:55:2f:7c:9e:72:e2:a2:87:19:de:82:4d:
                    b4:cf:ce:0e:c5:c7:b7:13:f9:35:43:1a:81:dc:34:
                    94:f3:e7:e8:75:24:ea:b4:c3:a1:82:a7:0f:dd:de:
                    dd:1d:79:c6:f0:da:26:e9:05:2e:23:ac:9d:c7:e4:
                    9c:8d:31:ee:65:a6:75:42:33:62:de:3c:a3:45:97:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AC:61:B6:9D:31:E0:DD:26:C9:E1:B8:7B:FF:56:CF:68:89:9C:EE
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1922f89794b361492149389d9923bc3ce2c35eb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:e0:a6:a1:56:f1:46:da:83:ca:37:a7:fc:85:08:49:01:5b:
         d3:c8:4a:91:23:dd:34:f6:35:a9:6e:d5:20:10:8c:5d:82:a6:
         de:c0:cf:8f:a1:1b:20:3f:28:d4:12:7e:92:fd:ef:19:37:30:
         d0:21:af:21:ae:6b:38:16:bf:4e:29:ec:d1:35:cc:cb:ae:ac:
         4a:c7:ed:ef:6b:b4:6e:a7:5c:bb:90:46:23:5e:d5:cc:dd:d1:
         70:a3:3a:81:d4:32:6e:0e:d9:4e:34:1d:a3:3e:3a:f4:ee:25:
         56:2d:cc:7b:4d:a1:96:43:53:b8:5f:c4:e4:a1:00:93:81:91:
         4d:8f:be:86:15:db:eb:a8:2b:b8:0b:41:9f:e2:58:dc:57:ac:
         98:99:9a:ac:7b:cc:b5:76:f5:17:28:96:43:1c:a8:fb:b6:df:
         cb:03:ca:65:5d:9e:1d:a9:8b:75:75:f3:12:a5:87:14:c5:22:
         4d:40:8c:82:54:d5:d3:39:8a:75:42:c7:99:a7:7d:38:42:90:
         b9:ac:d2:2f:6f:16:bb:27:ee:26:46:f6:c2:55:f0:7f:fc:de:
         64:30:27:c5:d3:53:fb:94:e7:7c:5f:26:04:ed:03:2e:f6:a7:
         a1:60:d0:cd:06:ae:29:c6:25:9f:32:c8:3a:b9:38:80:d6:4e:
         0f:29:7a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----