Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/250eb1c7928255ef40c5b280b6f17d310a33ccb6.roa
File:                     250eb1c7928255ef40c5b280b6f17d310a33ccb6.roa (raw, json)
Hash identifier:          +r5ebLFJ4+a1kliML6PkKCNGdRukEQvljb5HdSgdvPE=
Subject key identifier:   D8:64:2B:85:DC:37:55:00:4E:30:12:A5:37:D9:41:4A:0C:BD:FB:79
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       032BE0
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/250eb1c7928255ef40c5b280b6f17d310a33ccb6.roa
Signing time:             Mon 07 Feb 2022 03:41:47 +0000
ROA not before:           Mon 07 Feb 2022 03:00:00 +0000
ROA not after:            Tue 07 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207840 (0x32be0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb  7 03:00:00 2022 GMT
            Not After : Feb  7 03:00:00 2023 GMT
        Subject: CN=250eb1c7928255ef40c5b280b6f17d310a33ccb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:99:14:97:94:6f:27:c4:1b:83:7e:8e:44:b7:
                    ac:33:82:3c:b6:ae:a4:cb:08:4a:ce:e9:b4:c6:7f:
                    02:47:e9:d2:d5:d4:17:a5:93:32:c5:16:c2:52:d7:
                    2e:79:3d:0f:25:d5:63:dc:f8:82:82:ee:1e:f4:3c:
                    0d:1b:32:39:70:bf:62:3f:1d:0d:dd:db:3c:f5:3c:
                    05:09:60:21:fd:c3:84:28:42:13:80:22:9a:cf:c5:
                    6a:2d:7b:98:43:d8:1b:a1:2d:04:76:80:41:c2:39:
                    68:66:82:d7:63:51:af:0c:bb:d5:4f:13:f2:60:c3:
                    b9:25:40:da:6d:55:21:d1:c2:d6:df:fa:f9:44:e7:
                    8b:07:2d:69:60:88:aa:f1:5c:35:27:94:fc:6c:ef:
                    11:3f:af:4f:72:0d:23:25:b1:e5:cb:1b:15:2d:c0:
                    78:89:22:cd:b7:83:c7:79:fb:f1:36:8d:77:ed:a7:
                    a1:0f:a7:eb:38:23:be:0f:da:09:32:2f:db:6f:30:
                    89:00:37:f8:b3:76:2e:68:36:3b:be:2a:92:cf:0d:
                    4b:d9:39:b5:27:aa:54:34:19:de:76:2f:af:09:9c:
                    6f:00:98:09:e7:39:16:6f:7e:61:8c:09:77:12:41:
                    cc:8a:f1:81:c1:e2:38:6c:57:e5:d2:7b:65:f6:4c:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:64:2B:85:DC:37:55:00:4E:30:12:A5:37:D9:41:4A:0C:BD:FB:79
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/250eb1c7928255ef40c5b280b6f17d310a33ccb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:d8:42:ed:e0:38:25:36:c3:90:6c:ea:16:51:ca:9f:33:58:
         9d:d8:f7:9e:35:a0:50:17:11:15:69:80:14:53:b3:9a:fa:08:
         93:c7:60:70:af:97:08:5b:c6:db:e0:a3:e0:d4:24:63:de:fa:
         77:bb:ab:60:bb:53:79:a2:c0:74:b0:1a:a8:7e:ec:eb:83:3d:
         42:53:94:75:bf:6d:ac:ba:68:4c:1d:76:ab:59:d4:69:90:ab:
         ff:a3:dd:5e:fb:b4:cf:31:a4:06:a8:f4:bf:39:18:4d:d5:31:
         ed:b9:e3:24:79:a0:73:88:bc:04:ca:ba:38:35:3b:6c:a7:06:
         73:71:2e:11:e0:68:5f:57:b2:0d:07:99:c1:5e:79:ae:28:67:
         73:e7:f9:90:0c:92:9a:de:1a:42:5c:7b:cd:21:24:d7:4d:2f:
         d1:70:0f:c5:c9:14:5b:b6:10:91:5a:50:5d:de:05:11:7e:b2:
         53:70:0e:42:55:61:0b:af:41:1b:b3:5e:f3:0c:f3:aa:1d:ed:
         1f:e5:84:f1:9e:76:5e:b3:a2:79:8f:99:ec:9a:6f:54:3e:f0:
         e7:0c:d0:3d:aa:98:b2:4f:c1:a5:f4:2e:4f:82:f5:4d:c1:87:
         72:f8:37:cf:5e:ef:1a:82:16:39:b2:50:cb:e6:2c:8d:d0:52:
         15:6c:61:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----