Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2a4d9a426038e07133c62c6832aca721e78e7da3.roa
File:                     2a4d9a426038e07133c62c6832aca721e78e7da3.roa (raw, json)
Hash identifier:          EjS9ZH0jEiQ3Y8QBdidsCfjmZWD7GCFtHmI6Nexa9Sg=
Subject key identifier:   2D:94:03:5B:DF:A2:6A:1F:8E:59:75:2C:34:CC:82:7D:8F:22:DE:60
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0E8992
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2a4d9a426038e07133c62c6832aca721e78e7da3.roa
Signing time:             Mon 17 Oct 2022 00:26:12 +0000
ROA not before:           Sun 16 Oct 2022 03:00:00 +0000
ROA not after:            Tue 17 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952722 (0xe8992)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 16 03:00:00 2022 GMT
            Not After : Oct 17 03:00:00 2023 GMT
        Subject: CN=2a4d9a426038e07133c62c6832aca721e78e7da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:d6:36:a1:d7:ac:d6:16:ae:f5:4a:e5:91:
                    01:f9:60:d6:de:2d:d6:66:5f:1a:51:7e:19:66:96:
                    58:f7:8e:40:20:cf:33:34:2f:82:05:75:85:51:b3:
                    47:81:ee:9b:4c:6f:4b:92:18:f6:44:de:29:c5:cf:
                    ae:db:5d:5a:36:df:f4:f3:67:a0:1a:5f:86:b1:07:
                    2a:e1:b5:c4:ba:c4:2e:02:e0:f7:4c:2e:9a:b6:05:
                    b9:5e:68:ea:b6:6f:0c:70:70:09:8e:1e:8a:52:84:
                    16:5f:c7:ae:e5:c3:df:cc:c4:97:dc:ba:b5:2f:71:
                    7b:fa:2a:43:4f:8c:e3:cb:0e:77:be:21:fb:c6:b8:
                    3b:f0:bf:21:4d:3c:e2:69:c6:09:4f:51:7e:88:2f:
                    ef:5c:e7:fd:3b:f5:f9:cf:fd:cb:51:c6:3d:cf:6f:
                    3d:f9:6b:53:1d:48:15:0e:b7:81:23:89:0f:b2:1d:
                    44:b2:5d:00:b3:d8:e1:d4:e3:e6:ac:0d:bf:d0:1f:
                    af:35:41:0c:ce:a5:11:48:72:6b:08:ae:d6:1f:f6:
                    4e:a3:0f:01:45:d2:28:c7:01:bf:f0:0e:02:a7:d4:
                    21:38:ef:b8:f6:76:22:d0:12:f5:38:b8:24:ba:32:
                    8c:f8:db:28:4e:86:b6:9d:67:b9:6a:61:b5:20:94:
                    5f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:94:03:5B:DF:A2:6A:1F:8E:59:75:2C:34:CC:82:7D:8F:22:DE:60
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2a4d9a426038e07133c62c6832aca721e78e7da3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         17:d0:cd:af:ea:e6:76:e2:ec:43:87:42:ff:21:ec:c9:4b:88:
         35:e2:94:c7:f0:5f:1c:35:92:a2:67:e3:5b:32:d8:5b:f0:dd:
         70:9f:3b:c2:ce:58:be:82:45:e1:ac:02:88:10:4e:e1:15:6e:
         a4:25:2d:76:f6:c5:f2:f1:74:0a:d2:7a:8b:11:e9:b4:a7:9d:
         19:21:40:e5:8b:e5:75:fa:8a:36:5d:df:63:98:e0:4c:a2:34:
         1f:45:35:be:49:80:8f:09:58:5b:ed:9f:ea:31:3b:d8:23:2b:
         6a:25:aa:83:75:fc:69:ce:21:b2:26:3c:bd:4a:38:c8:32:a8:
         5b:e3:5a:bc:bb:32:a9:4d:a6:f4:3e:66:5a:e2:0d:92:1c:24:
         3a:b0:f8:e9:62:ec:63:16:a3:3e:29:5b:14:f0:7a:ae:88:eb:
         93:a1:11:4e:33:25:cf:71:e0:69:c2:37:e5:ea:1e:a8:5b:2a:
         37:2c:0c:e6:e1:0f:af:46:f7:fa:67:0a:1e:4c:f6:b7:bf:78:
         44:75:62:30:c2:a2:5c:c2:cb:a8:64:07:b8:cd:8e:2f:f2:04:
         13:c4:91:e5:2d:ad:9a:27:ae:ad:32:13:fb:3b:97:96:40:b9:
         92:ff:d1:4b:dc:7c:58:73:8e:bb:87:d3:e2:7e:a4:91:5b:5f:
         6b:e3:09:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----