Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1dbe29fe84eb799d8d9996f9513babbbf7493245.roa
File:                     1dbe29fe84eb799d8d9996f9513babbbf7493245.roa (raw, json)
Hash identifier:          Jk8oOYVyJGafaas0Ne+5vt4Ce1O/sWBGxD/Pwtll98Y=
Subject key identifier:   78:E2:E6:21:8E:F9:42:EE:63:A9:0E:34:EE:24:8D:DB:98:69:03:4B
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       07197C
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1dbe29fe84eb799d8d9996f9513babbbf7493245.roa
Signing time:             Wed 04 May 2022 00:06:10 +0000
ROA not before:           Wed 04 May 2022 03:00:00 +0000
ROA not after:            Thu 04 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465276 (0x7197c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May  4 03:00:00 2022 GMT
            Not After : May  4 03:00:00 2023 GMT
        Subject: CN=1dbe29fe84eb799d8d9996f9513babbbf7493245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:62:73:7b:88:2b:a4:84:0b:81:e5:e8:b7:
                    3b:ae:f8:54:c1:1b:b1:ba:df:68:60:78:3f:f0:34:
                    ca:fd:9e:92:0e:31:b4:66:0a:c7:eb:ef:03:94:e1:
                    77:c0:e3:b2:db:1d:aa:0b:78:9a:25:51:22:e6:b5:
                    e1:0c:4d:fc:9c:bc:f0:43:b1:54:84:ca:61:0d:c2:
                    96:06:cb:bd:fd:75:8b:1e:88:1a:16:a7:88:b8:3e:
                    d6:cb:65:5d:6a:ab:a2:84:ca:03:e0:07:e6:fd:56:
                    d4:49:b7:83:86:19:ff:d4:ba:f9:9b:4c:7f:b3:ae:
                    ed:cc:33:bd:32:78:1f:9f:b7:09:3e:2a:b1:c8:d6:
                    8a:9d:df:0e:36:91:d1:49:2c:d1:1f:34:73:0e:80:
                    5a:af:54:19:f4:51:cd:5c:6b:f9:10:cf:ec:08:93:
                    34:4c:c4:70:bb:26:68:61:76:f7:28:ba:aa:2b:b2:
                    b9:04:b8:9f:db:b9:eb:ec:0c:ca:26:a8:68:0c:7d:
                    03:f8:41:4f:01:ea:3e:a0:37:54:eb:33:d6:fd:ab:
                    32:8e:cc:f4:a0:70:eb:53:b8:80:c9:d1:21:09:dd:
                    4c:3c:68:96:01:db:ec:6d:0f:1a:99:7a:7f:74:59:
                    ef:10:ad:40:d1:95:28:31:47:bf:ab:0f:de:f8:3f:
                    ff:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E2:E6:21:8E:F9:42:EE:63:A9:0E:34:EE:24:8D:DB:98:69:03:4B
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1dbe29fe84eb799d8d9996f9513babbbf7493245.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:5e:bf:10:79:ab:38:88:76:43:ce:a8:87:d6:de:bc:5b:
         88:8b:32:e6:bd:02:3a:bb:b6:24:9b:f2:3e:1e:9e:d4:37:84:
         52:11:7f:c8:bd:d4:f0:fb:ec:60:bc:da:14:ca:46:df:4d:a8:
         e7:ae:0d:60:25:ef:0d:d5:44:46:cb:58:21:ee:af:9d:16:ba:
         51:ae:80:e3:b7:3b:28:73:7b:23:a5:84:16:7f:64:41:fe:ed:
         8b:9d:88:d7:35:65:b8:69:74:c3:31:61:03:76:78:3f:21:75:
         d0:cf:42:ca:e3:aa:e8:59:4e:8a:68:8a:18:39:e0:27:94:f4:
         60:1d:6e:7c:d8:1c:9c:b6:ce:4e:b0:f3:18:0e:22:96:f7:db:
         65:07:98:13:6e:0a:22:9e:3f:5f:2b:5e:a6:24:25:61:79:41:
         f1:e3:b8:13:b7:98:d8:e7:8f:3c:f9:f1:1a:67:bc:af:db:04:
         d5:a9:f0:d9:24:f2:0b:ff:5f:e4:d9:53:8e:c2:72:5a:1b:33:
         e1:e6:11:90:7b:9c:0b:39:94:b5:57:5b:70:4d:65:6e:ec:d0:
         6a:8b:26:b8:a4:4d:f2:a7:01:7b:30:8f:b4:b7:dc:0e:c2:b3:
         fe:10:b8:5a:21:76:86:9d:68:ca:87:49:45:18:14:05:3a:50:
         5d:2d:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----