Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1dd89bc5d36855c3d6c188d2557a67d76c61775c.roa
File:                     1dd89bc5d36855c3d6c188d2557a67d76c61775c.roa (raw, json)
Hash identifier:          cqDxdkhYmaxtgdZlOpimf8TK/BLSgWyNKdFrX55q4DY=
Subject key identifier:   C7:DB:2F:BC:02:76:3E:CF:9B:9F:27:50:74:31:A7:25:43:03:F6:D2
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       03D0C3
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1dd89bc5d36855c3d6c188d2557a67d76c61775c.roa
Signing time:             Mon 21 Feb 2022 01:36:51 +0000
ROA not before:           Mon 21 Feb 2022 03:00:00 +0000
ROA not after:            Tue 21 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250051 (0x3d0c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 21 03:00:00 2022 GMT
            Not After : Feb 21 03:00:00 2023 GMT
        Subject: CN=1dd89bc5d36855c3d6c188d2557a67d76c61775c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e2:e5:3b:bd:07:47:5a:f2:60:08:5a:e0:1b:
                    41:b7:ee:1c:a1:80:d1:0e:39:5e:00:b4:02:c1:18:
                    d7:c6:64:f5:e5:5c:a5:3d:fd:35:73:95:68:62:d4:
                    e3:66:2a:2b:b2:5c:26:a9:80:ce:a7:46:38:0a:04:
                    8b:e6:39:53:18:9b:0e:87:fb:25:30:01:6d:b8:ca:
                    d6:cf:d9:e9:c6:8c:7c:ce:1d:6f:d5:38:a0:35:27:
                    f3:15:7e:5b:8c:f9:db:8e:ae:89:9a:b4:56:aa:8b:
                    8f:09:9a:f0:1b:8e:25:03:eb:62:01:7b:47:26:66:
                    6a:fb:8d:02:97:c1:bd:ed:bf:be:e9:44:cc:47:ac:
                    d7:79:b0:e8:34:17:5e:6d:15:5b:87:b5:94:40:bb:
                    93:ca:4d:ab:2f:b5:5a:9c:56:be:8a:63:a6:04:7e:
                    f3:fc:08:5a:6f:0a:4d:5a:a4:63:eb:75:28:58:39:
                    69:ef:6b:5d:f8:88:f9:d3:fe:c2:33:1a:b8:56:a9:
                    2d:ab:10:23:a7:7e:eb:64:ec:f8:0a:f4:a3:e6:e6:
                    11:f5:de:38:9d:f9:cc:d4:bf:2f:29:88:07:95:f7:
                    5d:e3:01:c2:d4:21:c2:60:a3:d4:52:28:a8:13:6d:
                    b5:3a:af:ca:02:2c:7a:8b:a4:6b:a2:73:0f:1a:04:
                    bc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:DB:2F:BC:02:76:3E:CF:9B:9F:27:50:74:31:A7:25:43:03:F6:D2
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/1dd89bc5d36855c3d6c188d2557a67d76c61775c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:5c:45:8d:55:bd:16:9d:a0:ab:5d:b7:8c:11:28:49:3a:0c:
         4e:16:ae:d1:cc:8f:39:2e:99:4d:16:70:0f:9e:3f:bb:c6:6f:
         48:05:3c:46:d7:b6:66:fe:1c:e6:3c:48:5d:a5:6f:e5:c0:58:
         2d:8b:56:35:52:be:51:c7:d9:2f:ba:58:0b:dd:d0:dc:3b:64:
         8d:a0:43:6c:d2:be:32:50:4e:2e:88:7a:dd:cb:cb:cd:e8:d1:
         9e:7a:a8:c6:6e:a2:35:0e:ad:40:e6:e5:73:13:c2:63:2b:f6:
         d6:3f:f6:4b:62:e9:ad:34:98:2b:25:02:58:1f:be:35:06:e6:
         1f:71:d7:bc:14:d9:89:91:b8:b2:81:98:2e:30:d7:cc:fb:ee:
         06:d2:2d:47:c9:50:96:12:45:19:97:3e:3e:56:96:f1:45:47:
         1a:e9:7c:57:89:6f:07:c3:27:ae:2d:c5:a1:36:5a:ac:a9:c8:
         48:48:3f:bc:da:87:0f:c8:ac:16:ce:4e:85:cd:30:56:80:3f:
         bc:5a:97:f9:17:29:ec:3a:19:aa:b8:76:6d:03:a2:32:83:86:
         fd:b3:c3:0b:d7:65:7a:1b:56:b8:2f:d8:c9:6c:0e:87:67:47:
         7a:a7:bc:a7:4f:f1:69:d4:c1:8e:d2:0c:14:a4:23:61:ed:43:
         da:a1:15:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----