Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/275662f0a20687d5937cd578e44573acf52c90fc.roa
File:                     275662f0a20687d5937cd578e44573acf52c90fc.roa (raw, json)
Hash identifier:          ErzAccL0sh/OKzWf9eyAzmK3JA1PMsITEmwqx9ugA4Y=
Subject key identifier:   B4:E7:3D:CC:E0:22:6A:5E:A0:4F:C8:7E:8B:D3:98:93:12:18:B3:8A
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0B6396
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/275662f0a20687d5937cd578e44573acf52c90fc.roa
Signing time:             Thu 11 Aug 2022 01:05:20 +0000
ROA not before:           Thu 11 Aug 2022 03:00:00 +0000
ROA not after:            Fri 11 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 746390 (0xb6396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug 11 03:00:00 2022 GMT
            Not After : Aug 11 03:00:00 2023 GMT
        Subject: CN=275662f0a20687d5937cd578e44573acf52c90fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:16:c8:79:58:3a:0a:52:f1:7c:5e:ff:08:
                    7c:be:70:63:84:b7:25:6c:9b:99:31:73:ec:36:64:
                    3a:db:8f:95:3f:ee:8f:db:8f:d1:3c:bd:b1:b9:38:
                    40:83:ac:30:5a:4f:b5:d0:c3:91:c3:9c:d7:91:e8:
                    4e:54:6a:9e:07:0f:d4:52:26:c6:56:2c:3d:15:67:
                    c3:c8:0d:c8:f5:b9:4e:31:e8:4d:c7:29:7d:71:ba:
                    70:6f:21:55:70:63:b9:fd:be:b7:50:15:1d:15:b6:
                    f7:3e:39:76:21:fd:fb:57:c5:e4:01:7c:6d:3e:fe:
                    22:72:05:e6:18:67:34:df:94:d2:13:0b:19:5c:88:
                    06:35:a4:28:27:7a:a9:f6:5e:8c:1d:3e:8a:a2:ff:
                    e2:1b:89:c6:ef:7e:62:b8:87:55:dc:89:f8:a5:12:
                    be:5d:26:8b:78:a3:09:a5:64:8c:b6:c1:27:cb:2c:
                    09:fb:51:75:19:bc:fd:db:bc:ea:80:8b:f1:b7:a6:
                    48:49:8c:27:9a:8f:34:0b:f0:8d:d1:23:45:c3:c0:
                    37:c1:c3:51:70:f3:b6:39:75:91:6f:e7:2c:c2:c8:
                    11:05:37:c4:20:cf:32:d8:7b:06:c2:95:5e:f3:ad:
                    b4:65:c2:90:1d:2a:cf:60:77:7c:94:f4:7e:c6:eb:
                    86:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E7:3D:CC:E0:22:6A:5E:A0:4F:C8:7E:8B:D3:98:93:12:18:B3:8A
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/275662f0a20687d5937cd578e44573acf52c90fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:50:ba:af:26:59:02:87:5e:0d:45:14:ba:1e:bf:af:df:80:
         6d:08:b0:f6:cc:8a:7e:75:98:20:7d:0b:0e:39:6f:01:26:d9:
         0e:66:74:0f:aa:b0:4c:bc:65:4f:80:d9:36:ab:e5:d9:c1:9e:
         c4:2f:f5:85:58:ac:37:fe:6d:b2:6a:7b:87:97:8b:3f:e1:6d:
         b4:c2:91:e6:46:4d:98:35:43:39:c1:fa:f7:8f:5f:31:ec:47:
         f6:15:b4:3d:c4:34:7c:18:0e:e4:15:24:30:cd:30:b4:13:55:
         9a:ba:c5:9b:46:64:ac:ee:73:88:10:e4:23:e7:d3:0d:d6:66:
         99:96:5a:83:e1:3f:d8:0b:d2:32:bf:57:a3:c5:37:f0:09:18:
         23:cc:9c:10:65:ff:1e:48:02:ef:6d:58:e7:4e:2a:2a:80:fb:
         bc:9a:d3:02:3e:fa:9d:bb:b4:a4:e9:69:5c:0f:09:ae:f1:6c:
         35:92:8b:73:e5:bd:0c:c0:fa:c6:e7:3a:c0:d6:c1:ad:3d:3c:
         80:16:c1:0d:6e:e4:90:07:e9:8d:84:cc:9c:c8:df:5c:3e:ef:
         59:85:02:c1:e4:65:da:1e:9c:f5:63:36:0f:5c:25:e9:8a:1e:
         02:2d:bd:1d:77:d0:70:6f:11:fb:1d:ee:10:10:ee:a0:95:98:
         e3:71:f4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----