Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/21a725db78e284a2d73283d36c4947c38f35e333.roa
File:                     21a725db78e284a2d73283d36c4947c38f35e333.roa (raw, json)
Hash identifier:          NpoK0ys3jcXItwUcT4UHPjeAAOPJkp8DRzFlBtYUD1U=
Subject key identifier:   F9:29:C1:45:E0:91:95:C7:60:B5:B5:69:C7:12:E0:47:8A:8B:84:62
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0CCA05
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/21a725db78e284a2d73283d36c4947c38f35e333.roa
Signing time:             Sat 10 Sep 2022 01:58:48 +0000
ROA not before:           Sat 10 Sep 2022 03:00:00 +0000
ROA not after:            Sun 10 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838149 (0xcca05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep 10 03:00:00 2022 GMT
            Not After : Sep 10 03:00:00 2023 GMT
        Subject: CN=21a725db78e284a2d73283d36c4947c38f35e333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:48:ef:17:8a:55:a1:78:fd:1d:d4:1a:53:ec:
                    4b:8f:d0:42:3e:e8:8a:74:5a:32:d6:59:d8:bc:6f:
                    f5:79:dc:d5:e3:93:8c:be:82:93:c4:1d:f7:e1:b6:
                    af:b7:b2:f9:fd:8f:bd:c8:86:f0:f7:9b:f0:a2:87:
                    e3:0a:ae:0a:de:bf:04:5a:29:bc:24:df:4a:5e:d2:
                    1c:57:a4:86:4b:3f:8c:3c:c6:9c:21:5e:b9:4b:66:
                    b7:f0:d1:a4:9f:c1:d3:58:4c:70:95:56:dd:40:c5:
                    40:ce:9d:3c:f6:ac:d2:1e:20:43:76:7c:5d:05:2e:
                    ed:32:da:dc:74:36:57:f0:1c:be:c5:56:7d:af:d9:
                    b7:6a:e1:af:0a:b8:55:a8:33:d9:d0:b3:82:b9:bb:
                    51:34:a2:26:65:76:ba:68:4f:fd:19:4f:36:37:0c:
                    76:fe:88:ba:0f:a9:21:42:9f:bc:b8:f0:c5:c5:51:
                    bd:01:8a:fa:33:53:9b:ca:c0:85:90:20:68:f4:12:
                    9d:b4:23:6b:5c:3e:b0:69:19:c1:fc:6b:84:06:de:
                    74:35:58:9d:d4:54:10:e0:64:45:bc:10:81:68:50:
                    88:b5:c2:31:52:e8:94:42:9c:6e:59:20:3f:75:d9:
                    b5:0c:32:86:8a:cf:08:f7:05:ff:03:ea:2e:fb:d5:
                    16:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:29:C1:45:E0:91:95:C7:60:B5:B5:69:C7:12:E0:47:8A:8B:84:62
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/21a725db78e284a2d73283d36c4947c38f35e333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:18:b7:48:5b:3f:77:66:08:1a:ff:06:42:2e:1f:85:be:31:
         75:37:12:53:2a:70:79:a1:af:42:c0:c3:5e:a2:18:7d:cf:06:
         46:a5:13:42:6b:c1:61:99:8a:b0:9d:a7:2c:1e:3a:e5:d9:ab:
         e2:88:c9:98:1f:ac:dd:86:18:bc:39:3e:54:5f:2b:af:d2:bc:
         bc:f1:8e:9d:a6:98:72:21:4e:73:94:29:f7:16:cf:32:0a:9a:
         9c:fb:5b:12:6b:46:ac:b4:3d:16:18:3d:89:36:cf:95:27:26:
         b6:cd:30:92:15:ed:78:31:34:93:4a:11:ce:19:2e:a6:83:28:
         16:ab:0c:b7:9a:1c:cc:1a:20:91:07:f4:62:bf:1e:4f:4c:69:
         c0:82:25:b8:21:67:8c:ec:a5:51:a9:5d:a3:36:82:a2:95:91:
         5b:c6:06:67:97:e3:b5:25:04:8c:14:65:f9:cd:87:18:ae:e3:
         ca:31:15:3c:c7:fc:5a:1b:53:47:44:a4:38:03:c9:d2:90:e1:
         8a:c2:fc:73:df:fc:4a:38:ac:33:36:63:0a:e6:66:ab:e5:10:
         74:a9:47:e4:fc:e5:8b:a0:43:fc:37:54:9c:67:72:45:ff:96:
         4b:39:d2:14:84:05:da:32:4a:c3:44:2c:24:91:f3:57:13:bb:
         36:a2:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----