Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/250a39c6bfed469472bad3da937b14eee8b747ad.roa
File:                     250a39c6bfed469472bad3da937b14eee8b747ad.roa (raw, json)
Hash identifier:          AvwdsOF6rPhTHNNypSgctUQpW0gJdoR+U2QRl0bLRmc=
Subject key identifier:   B7:1C:58:B5:79:C7:AD:AD:B6:15:C3:5A:EB:12:A0:B7:A9:A7:B8:D3
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0CD8E4
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/250a39c6bfed469472bad3da937b14eee8b747ad.roa
Signing time:             Sun 11 Sep 2022 04:18:02 +0000
ROA not before:           Sun 11 Sep 2022 03:00:00 +0000
ROA not after:            Mon 11 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841956 (0xcd8e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep 11 03:00:00 2022 GMT
            Not After : Sep 11 03:00:00 2023 GMT
        Subject: CN=250a39c6bfed469472bad3da937b14eee8b747ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0d:26:97:e4:8c:dc:87:1a:1c:cc:df:fc:40:
                    d7:ad:09:65:14:87:82:6d:be:da:06:c4:6e:5b:7e:
                    ca:f0:62:c1:c8:28:5a:97:4c:38:0c:c9:7a:aa:b1:
                    37:a0:e1:10:f7:ee:63:19:1c:7e:6e:21:6a:ca:ff:
                    65:e6:e1:03:bc:bd:9a:30:2a:f0:a9:89:b1:d5:87:
                    6d:85:56:d6:88:aa:e6:75:4b:9d:f4:eb:b6:cc:5f:
                    d9:8e:1d:c2:82:bc:93:70:85:d2:bc:73:fe:21:18:
                    cd:c1:17:49:4e:68:52:d6:7f:84:80:23:37:dd:a8:
                    ff:7a:00:0c:97:be:82:93:d9:e8:3d:1d:4e:0d:34:
                    08:59:62:bd:ab:60:0d:9d:d9:53:42:0e:6a:ac:cc:
                    5d:f6:0e:91:4d:65:53:79:1e:6e:91:a5:18:bb:fa:
                    a7:fa:4a:62:a3:e9:ca:6b:ad:a3:f4:55:b7:a5:c5:
                    d6:ee:56:c7:be:bc:62:a2:da:9b:b7:59:44:f6:04:
                    33:43:68:37:dc:ff:0a:45:c5:0a:21:56:a3:d8:25:
                    ff:97:4b:e1:fd:09:1b:73:ee:ef:4a:24:1f:e0:6e:
                    7f:75:9a:d8:55:c5:7d:91:07:8e:88:84:1b:0b:93:
                    13:3a:78:7b:f3:92:43:e3:8f:6d:88:a8:53:bd:ab:
                    20:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1C:58:B5:79:C7:AD:AD:B6:15:C3:5A:EB:12:A0:B7:A9:A7:B8:D3
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/250a39c6bfed469472bad3da937b14eee8b747ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:d3:d5:d9:91:4d:dd:a0:c8:b3:1c:79:62:fd:fb:ee:30:70:
         5d:51:f2:16:2f:c3:2e:87:03:1e:30:81:f2:ae:f2:03:33:b9:
         bb:04:47:fb:af:34:4f:5b:8a:e5:45:f5:9e:8a:29:14:ec:3e:
         49:1c:c6:0d:01:fe:93:47:17:37:88:c4:fb:81:fd:04:25:f5:
         57:93:3c:97:8e:cc:7a:f6:41:61:f7:34:e4:46:cf:65:ec:7c:
         2f:ab:9f:c5:74:2f:7f:89:5c:48:79:40:fa:19:10:0d:0e:2c:
         57:0c:15:5d:44:93:dd:62:d3:6c:29:5e:52:58:d7:d8:21:da:
         c5:b0:c2:35:e4:1a:e1:df:ff:63:2c:14:f5:f9:1b:81:ad:2b:
         a8:46:5a:8e:7a:76:3a:35:46:7d:5d:d5:e9:b4:10:74:05:2e:
         21:3a:de:eb:7c:7d:7e:0f:7d:57:c2:4b:92:6d:e8:d3:09:04:
         f9:47:1b:4b:b2:fb:99:c0:29:bb:fd:15:a0:24:d8:ed:66:7a:
         b0:1e:92:94:9e:c8:09:77:fe:6d:3b:83:91:f1:fc:e5:51:35:
         56:36:82:a7:d0:3e:0f:c4:35:a5:cc:f8:9b:b3:46:1e:16:cd:
         7b:9b:28:74:11:1f:ee:dc:02:5a:cb:a3:38:a2:6e:7b:d3:56:
         0a:bd:5c:fd
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDNjkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwOTEx
MDMwMDAwWhcNMjMwOTExMDMwMDAwWjAzMTEwLwYDVQQDEygyNTBhMzljNmJmZWQ0
Njk0NzJiYWQzZGE5MzdiMTRlZWU4Yjc0N2FkMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtg0ml+SM3IcaHMzf/EDXrQllFIeCbb7aBsRuW37K8GLByCha
l0w4DMl6qrE3oOEQ9+5jGRx+biFqyv9l5uEDvL2aMCrwqYmx1YdthVbWiKrmdUud
9Ou2zF/Zjh3CgryTcIXSvHP+IRjNwRdJTmhS1n+EgCM33aj/egAMl76Ck9noPR1O
DTQIWWK9q2ANndlTQg5qrMxd9g6RTWVTeR5ukaUYu/qn+kpio+nKa62j9FW3pcXW
7lbHvrxiotqbt1lE9gQzQ2g33P8KRcUKIVaj2CX/l0vh/Qkbc+7vSiQf4G5/dZrY
VcV9kQeOiIQbC5MTOnh785JD449tiKhTvasgMQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFLccWLV5x62tthXDWusSoLepp7jTMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzI1MGEzOWM2YmZlZDQ2OTQ3MmJhZDNkYTkzN2IxNGVlZThiNzQ3YWQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEApNPV2ZFN3aDI
sxx5Yv377jBwXVHyFi/DLocDHjCB8q7yAzO5uwRH+680T1uK5UX1noopFOw+SRzG
DQH+k0cXN4jE+4H9BCX1V5M8l47MevZBYfc05EbPZex8L6ufxXQvf4lcSHlA+hkQ
DQ4sVwwVXUST3WLTbCleUljX2CHaxbDCNeQa4d//YywU9fkbga0rqEZajnp2OjVG
fV3V6bQQdAUuITre63x9fg99V8JLkm3o0wkE+UcbS7L7mcApu/0VoCTY7WZ6sB6S
lJ7ICXf+bTuDkfH85VE1VjaCp9A+D8Q1pcz4m7NGHhbNe5sodBEf7twCWsujOKJu
e9NWCr1c/Q==
-----END CERTIFICATE-----