Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2b01098d91da4bf3fb6f0f0aca4e0a73fc456de8.roa
File:                     2b01098d91da4bf3fb6f0f0aca4e0a73fc456de8.roa (raw, json)
Hash identifier:          PMNqFzfh7Cwu4t0Ds2cmc/tDdAoi/7wcp5S0bKnWeYo=
Subject key identifier:   15:0E:B1:38:E6:71:A7:1E:E1:DC:CC:40:B6:13:B5:B8:B1:60:6B:F0
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0D5608
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2b01098d91da4bf3fb6f0f0aca4e0a73fc456de8.roa
Signing time:             Wed 21 Sep 2022 02:31:55 +0000
ROA not before:           Wed 21 Sep 2022 03:00:00 +0000
ROA not after:            Thu 21 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873992 (0xd5608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep 21 03:00:00 2022 GMT
            Not After : Sep 21 03:00:00 2023 GMT
        Subject: CN=2b01098d91da4bf3fb6f0f0aca4e0a73fc456de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b3:41:e6:0a:68:fa:fd:f4:07:06:6c:17:33:
                    bb:b8:98:a0:be:46:ed:67:73:38:02:d6:58:9d:17:
                    29:8b:7f:35:1a:32:9b:77:86:5a:c9:2a:7b:c0:b1:
                    e4:ca:1d:a7:97:a4:6f:28:0f:14:da:04:32:14:50:
                    cc:a5:61:97:24:ea:1d:d2:fb:a8:10:e8:97:6f:0e:
                    27:96:ac:61:51:1c:16:32:51:18:f4:ff:72:9e:f8:
                    d8:68:ba:f9:08:dd:e6:4f:44:e6:16:b3:24:97:2f:
                    b0:ba:fc:c6:6e:b2:f3:03:87:00:2d:fc:09:83:d3:
                    32:2e:92:32:bc:73:61:8f:28:26:ea:df:ea:3d:a6:
                    7d:83:7b:5b:5f:13:3c:23:b2:ca:11:de:88:ec:a2:
                    e2:43:7c:dc:20:3e:23:e6:0c:f2:b4:f6:bb:de:56:
                    5a:6d:4f:3e:18:8d:59:7b:aa:b6:c9:83:f5:33:e1:
                    71:7a:f8:90:24:ed:24:3a:ad:55:74:68:e4:e8:89:
                    69:e9:1a:f8:9a:f8:9a:91:7e:0c:55:16:f6:04:b1:
                    6d:ac:2c:c5:fb:5e:f4:18:11:e6:e1:1e:97:24:9b:
                    1b:8e:37:62:29:51:2d:a4:67:6a:36:08:58:89:9a:
                    1a:81:7d:67:6b:d5:6f:41:ec:94:98:2d:27:40:52:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0E:B1:38:E6:71:A7:1E:E1:DC:CC:40:B6:13:B5:B8:B1:60:6B:F0
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2b01098d91da4bf3fb6f0f0aca4e0a73fc456de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:8f:96:e4:10:6d:6a:4a:95:fa:b0:1b:02:21:a8:e8:be:d8:
         51:cf:bb:d9:c2:39:66:44:fd:96:50:72:74:94:78:b4:67:98:
         b3:01:28:98:86:5a:7b:b2:cc:50:d5:01:45:a3:a1:44:b1:0c:
         92:56:0c:50:1d:38:70:e9:aa:fa:7f:ec:10:d6:36:5d:7a:11:
         55:4e:9a:cc:53:1a:cc:69:08:a9:33:4c:ea:1e:de:26:d9:7f:
         08:62:06:69:5e:32:ff:ab:4e:07:a0:5b:db:8f:74:13:c2:bf:
         88:9b:f3:d3:c6:7e:b0:58:4c:1d:54:bb:c1:a7:2a:b3:85:29:
         38:db:94:ab:69:d8:02:6c:09:58:89:04:38:bf:04:c4:89:04:
         a4:0d:a1:36:f3:29:66:df:a6:ff:ea:6d:51:88:a3:99:5e:10:
         8a:e2:41:27:28:b7:8b:72:19:7c:12:68:ff:aa:12:5a:27:f3:
         08:6f:f6:c3:b4:4a:a9:28:b0:ce:6c:a4:ab:12:70:4c:95:12:
         65:a4:b8:06:18:12:9b:ba:d0:c2:5f:d9:c2:5a:e8:fa:e1:c3:
         f2:95:5a:08:23:7f:f4:13:c7:0f:03:d5:b0:f6:9c:0a:e1:dc:
         92:4f:e3:50:6a:06:92:32:93:b7:5c:7e:3b:2e:ec:f1:54:27:
         87:77:55:65
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDVYIMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwOTIx
MDMwMDAwWhcNMjMwOTIxMDMwMDAwWjAzMTEwLwYDVQQDEygyYjAxMDk4ZDkxZGE0
YmYzZmI2ZjBmMGFjYTRlMGE3M2ZjNDU2ZGU4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqrNB5gpo+v30BwZsFzO7uJigvkbtZ3M4AtZYnRcpi381GjKb
d4ZaySp7wLHkyh2nl6RvKA8U2gQyFFDMpWGXJOod0vuoEOiXbw4nlqxhURwWMlEY
9P9ynvjYaLr5CN3mT0TmFrMkly+wuvzGbrLzA4cALfwJg9MyLpIyvHNhjygm6t/q
PaZ9g3tbXxM8I7LKEd6I7KLiQ3zcID4j5gzytPa73lZabU8+GI1Ze6q2yYP1M+Fx
eviQJO0kOq1VdGjk6Ilp6Rr4mviakX4MVRb2BLFtrCzF+170GBHm4R6XJJsbjjdi
KVEtpGdqNghYiZoagX1na9VvQeyUmC0nQFLyLwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFBUOsTjmcace4dzMQLYTtbixYGvwMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzJiMDEwOThkOTFkYTRiZjNmYjZmMGYwYWNhNGUwYTczZmM0NTZkZTgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAbI+W5BBtakqV
+rAbAiGo6L7YUc+72cI5ZkT9llBydJR4tGeYswEomIZae7LMUNUBRaOhRLEMklYM
UB04cOmq+n/sENY2XXoRVU6azFMazGkIqTNM6h7eJtl/CGIGaV4y/6tOB6Bb2490
E8K/iJvz08Z+sFhMHVS7wacqs4UpONuUq2nYAmwJWIkEOL8ExIkEpA2hNvMpZt+m
/+ptUYijmV4QiuJBJyi3i3IZfBJo/6oSWifzCG/2w7RKqSiwzmykqxJwTJUSZaS4
BhgSm7rQwl/Zwlro+uHD8pVaCCN/9BPHDwPVsPacCuHckk/jUGoGkjKTt1x+Oy7s
8VQnh3dVZQ==
-----END CERTIFICATE-----