Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1995cfe8dd2eac6060ba36ab98e3d554accac373.roa
File:                     1995cfe8dd2eac6060ba36ab98e3d554accac373.roa (raw, json)
Hash identifier:          1SDlgUn9Ug4VzjFyZp4IyXzDrsNVpb6IpXtG0hI8UZ0=
Subject key identifier:   62:7D:F4:C1:7E:06:C8:41:AA:49:8D:ED:20:86:62:A6:7D:7E:DA:B1
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       03B9CD
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1995cfe8dd2eac6060ba36ab98e3d554accac373.roa
Signing time:             Sun 20 Feb 2022 02:49:21 +0000
ROA not before:           Sun 20 Feb 2022 03:00:00 +0000
ROA not after:            Mon 20 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244173 (0x3b9cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 20 03:00:00 2022 GMT
            Not After : Feb 20 03:00:00 2023 GMT
        Subject: CN=1995cfe8dd2eac6060ba36ab98e3d554accac373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fd:bd:dc:10:a3:3f:88:bc:70:28:05:f0:22:
                    d5:f7:34:fa:6c:be:c8:3d:98:77:ab:0b:72:0f:ca:
                    2b:dc:80:19:33:98:d2:eb:05:ff:df:2a:78:fb:ff:
                    f8:56:3e:11:b6:e8:61:d2:de:8c:2c:a7:ea:ce:3a:
                    92:10:40:cb:77:cc:07:e1:7b:a0:a6:57:a2:e7:e9:
                    8f:96:89:ac:b1:7e:72:6a:80:65:57:31:53:de:a3:
                    b7:9f:31:72:e8:62:cd:bf:af:eb:36:23:8b:55:f4:
                    4c:e9:8c:4d:58:b7:f7:48:44:fa:68:bd:6f:9a:20:
                    d6:ad:3c:94:45:7f:51:bf:05:f5:9b:69:4f:ee:59:
                    92:1a:0c:3b:55:06:ea:1a:0f:e8:a9:09:1e:4b:75:
                    10:7e:a5:f8:30:84:7b:6c:47:f3:f3:cc:d1:e1:bd:
                    30:20:f4:2b:ff:1c:1f:44:96:e9:2a:80:68:cf:ef:
                    c8:4d:9f:49:16:65:94:4f:ac:9e:cf:2f:f9:45:8f:
                    ad:fc:30:bd:6e:0e:90:6e:e1:0b:81:83:f9:8b:72:
                    a6:8f:6e:43:da:63:1e:a7:4d:a3:02:59:db:29:ae:
                    2a:c0:79:2b:72:5a:9f:19:74:31:19:ec:8b:7b:82:
                    03:bf:81:49:fe:8c:2b:07:2c:ce:8c:a1:13:ed:d9:
                    aa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7D:F4:C1:7E:06:C8:41:AA:49:8D:ED:20:86:62:A6:7D:7E:DA:B1
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1995cfe8dd2eac6060ba36ab98e3d554accac373.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:99:cb:2e:6b:d9:35:57:f7:39:b0:57:21:92:ba:f8:16:3f:
         8b:93:d2:9a:e3:06:97:0f:06:71:43:33:e2:89:e7:1c:68:79:
         10:2a:f7:34:27:c0:a0:fe:4f:57:55:6d:cc:de:43:43:c0:8e:
         2f:10:a2:d6:02:64:98:47:09:2f:15:41:ea:6c:45:b0:cc:55:
         b8:46:33:a4:12:4c:68:34:c2:71:e5:0b:71:a2:be:a3:b0:9f:
         eb:42:c9:1b:61:ac:3f:e8:b9:88:b0:84:ad:a1:ef:13:c0:a6:
         21:7e:e2:7d:22:b6:3c:16:70:02:ca:9b:a1:8b:a6:c4:a3:ce:
         d6:eb:7d:5f:22:fe:01:dd:11:71:d6:3e:97:e0:e6:4c:14:15:
         4b:d0:8e:1b:e0:f5:b2:86:ba:46:33:ca:1e:c3:b7:be:3b:9a:
         60:f9:8b:d5:a1:f0:97:86:ad:7c:38:db:5a:c8:d6:b5:10:25:
         d8:1d:6f:9b:36:7b:09:14:88:85:67:03:6c:99:8d:0d:b8:60:
         ca:df:c0:14:1a:a3:0a:43:0b:f5:4b:62:f4:9e:0c:81:41:8f:
         57:6c:f9:5c:cb:99:48:c1:9d:55:0a:f9:43:d4:42:33:4d:b7:
         33:1c:09:3d:07:38:a0:4a:b4:3c:1a:34:c8:1a:a0:be:58:6e:
         59:ab:d5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----