Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/36cb3b4c679ceee462dda27054cb5e7f843be9d1.roa
File:                     36cb3b4c679ceee462dda27054cb5e7f843be9d1.roa (raw, json)
Hash identifier:          0sN8XNa1jiuGCLMe88V5wFPIeFFZqm9WPkR5TXpWQO8=
Subject key identifier:   C7:51:00:7A:93:76:46:8E:EA:A6:1F:DF:50:D6:3E:5A:9B:51:8E:23
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0C020D
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/36cb3b4c679ceee462dda27054cb5e7f843be9d1.roa
Signing time:             Wed 24 Aug 2022 00:50:07 +0000
ROA not before:           Wed 24 Aug 2022 03:00:00 +0000
ROA not after:            Thu 24 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786957 (0xc020d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug 24 03:00:00 2022 GMT
            Not After : Aug 24 03:00:00 2023 GMT
        Subject: CN=36cb3b4c679ceee462dda27054cb5e7f843be9d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:0d:26:38:1f:06:7c:78:5f:c4:33:e0:60:
                    f2:67:36:eb:51:77:5d:40:a8:f6:ef:a5:1c:d2:f3:
                    72:51:7d:7a:43:e8:35:e3:dc:cf:e1:db:ed:1d:9e:
                    82:18:9a:f6:73:41:0c:9c:05:68:9c:c0:a5:e8:84:
                    ad:a9:15:17:31:34:da:08:a4:13:96:82:56:2f:03:
                    c7:04:96:fb:b9:cf:33:95:3d:29:30:99:65:a8:39:
                    b7:79:05:2f:63:dc:f1:16:e1:26:39:98:0b:c1:45:
                    64:34:0d:a8:21:76:88:3c:7a:d5:f7:94:c9:8d:48:
                    20:58:17:ac:24:ff:ca:cc:b3:0b:f8:a2:65:60:a0:
                    69:72:d3:05:8c:14:da:cf:34:4c:b4:47:3a:22:7a:
                    ef:32:8b:9e:4c:20:b0:3e:d6:d4:a2:18:88:ba:d6:
                    be:47:d9:35:ea:b2:de:29:86:46:09:df:d8:4b:05:
                    3b:c0:ba:8c:a3:3f:d5:b1:1a:e1:7e:0e:8a:b2:38:
                    17:7d:80:6b:1d:83:5c:b1:db:f0:13:a9:ba:6c:1c:
                    a4:53:64:0e:93:0d:38:43:0f:2d:39:0f:51:be:a6:
                    a3:5c:32:f8:8a:fe:d4:34:c6:7e:dc:64:c4:84:2a:
                    84:77:ec:39:88:ac:51:c5:3f:89:f5:bc:63:59:7b:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:51:00:7A:93:76:46:8E:EA:A6:1F:DF:50:D6:3E:5A:9B:51:8E:23
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/36cb3b4c679ceee462dda27054cb5e7f843be9d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:05:fc:27:32:58:b8:0d:34:17:3c:2c:bd:3a:6b:b4:5f:0f:
         fa:c5:78:0e:4c:c7:f0:8f:34:57:89:c2:a0:5e:e5:ac:c3:a5:
         cc:17:2b:1f:30:79:8f:15:4d:fc:5b:45:d2:71:7c:cb:48:18:
         ac:e6:0f:3a:fc:fe:fa:6c:9c:dc:bf:19:1e:f1:0b:0d:e0:92:
         51:f6:f6:3d:b2:e6:f1:cf:c1:82:90:de:71:24:40:c9:10:e3:
         e1:92:0a:ca:ff:10:e8:a1:f0:ed:4f:56:c0:8c:87:d6:dd:c0:
         cc:af:13:48:4c:1d:af:d0:ae:11:46:94:11:16:49:3b:46:0f:
         55:4b:8e:a0:0e:1e:ae:49:42:ef:15:02:35:46:af:af:2c:28:
         8b:dd:12:58:6a:5c:9d:41:91:5b:09:e0:97:10:db:a1:d8:0d:
         9c:1a:c8:3b:cc:2c:32:02:fe:fb:24:a5:d3:95:53:7d:d3:3e:
         33:9b:4f:5f:13:5d:26:0c:12:cd:22:e1:b4:85:41:c2:f5:77:
         07:e2:d0:e5:a4:b8:bd:f7:b1:c8:cc:48:b1:bd:4e:d6:d4:a5:
         e4:96:60:d2:c0:6c:86:eb:7c:37:c5:af:81:3f:b3:1e:fc:5e:
         5f:42:3e:d0:ab:3e:cb:7e:b4:ea:31:ac:fd:08:74:53:96:46:
         f5:1f:d8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----