Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2d01504a3df9ed2753557ae80917adc1ca568cc5.roa
File:                     2d01504a3df9ed2753557ae80917adc1ca568cc5.roa (raw, json)
Hash identifier:          2w++Lw1fk+xK/7tCcPLgH2djXP89dricUbZ/BH9e+C0=
Subject key identifier:   0E:A0:45:11:FB:DA:51:53:4C:47:1D:3C:F3:4F:3B:17:71:47:72:1A
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       081F04
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2d01504a3df9ed2753557ae80917adc1ca568cc5.roa
Signing time:             Thu 26 May 2022 02:25:21 +0000
ROA not before:           Thu 26 May 2022 03:00:00 +0000
ROA not after:            Fri 26 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 532228 (0x81f04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 26 03:00:00 2022 GMT
            Not After : May 26 03:00:00 2023 GMT
        Subject: CN=2d01504a3df9ed2753557ae80917adc1ca568cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6a:e7:0a:99:18:c5:cb:84:c3:dc:4b:4f:3f:
                    99:ed:74:e4:44:de:84:39:4d:65:2b:17:bd:e2:80:
                    c3:9c:51:3a:1e:27:85:2f:0a:b3:81:b5:de:f1:e6:
                    24:e4:89:ce:57:0d:28:fe:0e:aa:d7:de:d1:ef:99:
                    ed:95:65:e1:8f:cf:63:bd:4a:71:50:e3:5b:12:35:
                    0b:bf:d2:b0:93:a6:34:c7:e1:40:f3:59:5a:42:29:
                    37:03:0b:a9:c2:7c:46:1d:cf:33:d7:1e:bb:3e:35:
                    0b:e4:c0:aa:2b:ac:14:bd:3b:cd:79:94:f8:86:f7:
                    6f:0d:4b:2f:eb:fc:29:4f:ab:e5:75:65:00:2c:50:
                    68:b1:43:9c:7a:c5:65:c6:54:b9:70:93:54:c4:98:
                    90:e1:16:91:31:10:d9:e6:7a:e7:bc:c5:f0:c5:17:
                    52:cc:47:93:d5:0d:d6:b9:0c:7c:ac:28:70:43:10:
                    23:06:2e:f2:b7:49:0c:1e:82:59:80:75:89:0d:b3:
                    00:59:58:9f:c5:52:56:f0:9a:07:bc:b3:e8:53:04:
                    4f:3a:22:21:3c:ba:2b:55:b7:25:cd:f2:9c:d0:46:
                    db:3a:91:52:c3:2c:44:21:ef:4b:12:11:6d:35:c2:
                    f1:da:0c:b4:ac:42:b2:2d:29:ba:25:6a:68:8e:ff:
                    00:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A0:45:11:FB:DA:51:53:4C:47:1D:3C:F3:4F:3B:17:71:47:72:1A
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/2d01504a3df9ed2753557ae80917adc1ca568cc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:a2:ca:3a:bd:ad:04:c0:e2:37:40:e5:f3:ba:ad:7a:46:
         c8:6d:32:24:b3:9f:be:97:7c:9a:0c:48:9b:89:ba:bc:b2:1b:
         e4:f4:13:3f:63:33:38:d0:c7:1f:0f:8e:19:cd:3a:48:e9:c6:
         8c:f4:c3:6f:57:95:c9:db:f8:32:f4:fe:de:f8:30:8e:64:13:
         c3:ed:3a:dc:2a:b5:fd:36:5e:b2:e1:ea:9a:9e:f2:ff:32:38:
         8c:24:82:5e:a3:5b:0d:55:cb:e8:94:cb:dc:44:69:4d:d3:21:
         3b:28:c0:41:e6:b0:12:2c:14:6e:b0:22:8e:9a:89:07:f9:43:
         c9:15:07:1a:f8:51:a3:ce:17:eb:3c:d7:bd:49:e8:e5:09:51:
         3c:56:32:1d:3d:d4:c0:5f:6d:bb:60:be:68:d1:2e:1c:7a:b6:
         42:81:03:ba:ad:c4:05:c1:a3:cb:d0:81:79:ed:d0:03:83:c0:
         4a:cd:6e:da:71:68:f6:77:61:2d:90:da:13:32:a0:16:35:a1:
         4b:a6:79:c0:83:6d:ec:2e:e7:9b:c4:27:c5:77:98:73:7a:01:
         60:1e:9f:c3:3a:62:fa:f1:ac:4e:82:0a:7a:37:3d:20:0e:f1:
         61:45:86:9e:fe:ea:73:e5:6f:e5:bf:56:7a:2f:8c:8d:dc:c1:
         f3:ef:08:17
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCB8EMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNTI2
MDMwMDAwWhcNMjMwNTI2MDMwMDAwWjAzMTEwLwYDVQQDEygyZDAxNTA0YTNkZjll
ZDI3NTM1NTdhZTgwOTE3YWRjMWNhNTY4Y2M1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAx2rnCpkYxcuEw9xLTz+Z7XTkRN6EOU1lKxe94oDDnFE6HieF
LwqzgbXe8eYk5InOVw0o/g6q197R75ntlWXhj89jvUpxUONbEjULv9Kwk6Y0x+FA
81laQik3AwupwnxGHc8z1x67PjUL5MCqK6wUvTvNeZT4hvdvDUsv6/wpT6vldWUA
LFBosUOcesVlxlS5cJNUxJiQ4RaRMRDZ5nrnvMXwxRdSzEeT1Q3WuQx8rChwQxAj
Bi7yt0kMHoJZgHWJDbMAWVifxVJW8JoHvLPoUwRPOiIhPLorVbclzfKc0EbbOpFS
wyxEIe9LEhFtNcLx2gy0rEKyLSm6JWpojv8AtQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFA6gRRH72lFTTEcdPPNPOxdxR3IaMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzJkMDE1MDRhM2RmOWVkMjc1MzU1N2FlODA5MTdhZGMxY2E1NjhjYzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAU/uiyjq9rQTA
4jdA5fO6rXpGyG0yJLOfvpd8mgxIm4m6vLIb5PQTP2MzONDHHw+OGc06SOnGjPTD
b1eVydv4MvT+3vgwjmQTw+063Cq1/TZesuHqmp7y/zI4jCSCXqNbDVXL6JTL3ERp
TdMhOyjAQeawEiwUbrAijpqJB/lDyRUHGvhRo84X6zzXvUno5QlRPFYyHT3UwF9t
u2C+aNEuHHq2QoEDuq3EBcGjy9CBee3QA4PASs1u2nFo9ndhLZDaEzKgFjWhS6Z5
wINt7C7nm8QnxXeYc3oBYB6fwzpi+vGsToIKejc9IA7xYUWGnv7qc+Vv5b9Wei+M
jdzB8+8IFw==
-----END CERTIFICATE-----