Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/380d3c6bb7b50d1ce3a47104498cd3aa5bade574.roa
File:                     380d3c6bb7b50d1ce3a47104498cd3aa5bade574.roa (raw, json)
Hash identifier:          2QlJn0Q5xGzNYMROdEae5BU70a1n3j7AAkYTFtGOCNM=
Subject key identifier:   4C:90:20:67:2A:0B:6D:34:08:9A:71:73:EB:5D:14:17:FC:09:D0:D9
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       06067F
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/380d3c6bb7b50d1ce3a47104498cd3aa5bade574.roa
Signing time:             Sun 10 Apr 2022 11:00:45 +0000
ROA not before:           Sun 10 Apr 2022 03:00:00 +0000
ROA not after:            Mon 10 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394879 (0x6067f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr 10 03:00:00 2022 GMT
            Not After : Apr 10 03:00:00 2023 GMT
        Subject: CN=380d3c6bb7b50d1ce3a47104498cd3aa5bade574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:64:4a:d0:c8:e9:98:12:14:35:4a:aa:d1:
                    3f:f2:81:6d:b4:79:a3:c1:e7:48:56:7e:fa:a9:e4:
                    c5:6c:ab:5a:f2:4d:fb:1f:49:50:81:54:b8:16:65:
                    2e:b2:87:28:1a:ea:e9:5b:62:b0:86:d7:64:ee:24:
                    84:aa:57:ea:4f:97:91:30:55:d5:c9:13:4b:e4:3f:
                    7a:c8:73:f3:da:13:94:0b:17:ca:ff:69:49:e6:a7:
                    13:02:ef:75:43:8a:22:fc:ba:70:38:b6:2b:59:e3:
                    62:bb:33:51:29:81:76:66:8d:fb:e5:cc:92:3f:84:
                    e9:3f:a9:fe:99:b0:0a:c0:c9:cd:ad:5a:ec:fb:49:
                    07:9c:b5:45:4a:75:f3:18:f7:0a:42:6e:38:56:98:
                    11:79:af:0d:fa:e1:c3:95:8e:39:f2:41:aa:3d:7d:
                    e4:a8:f6:db:1d:ee:cf:86:d9:75:32:23:fa:63:6e:
                    3b:0d:b6:6b:37:4a:3d:bd:de:c7:eb:df:d7:31:37:
                    aa:22:95:b1:74:dd:cd:97:29:d2:68:d1:d9:8a:a3:
                    dc:64:da:a1:6d:f6:e1:24:26:f9:b1:df:74:23:5c:
                    f8:e3:23:d5:d9:9e:87:31:6b:32:88:ae:ff:9d:1f:
                    27:75:cc:86:c2:ec:19:10:c9:29:47:72:1f:ea:86:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:90:20:67:2A:0B:6D:34:08:9A:71:73:EB:5D:14:17:FC:09:D0:D9
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/380d3c6bb7b50d1ce3a47104498cd3aa5bade574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:36:a7:dc:64:76:1a:b6:c5:a5:5e:80:00:68:5e:93:2a:aa:
         b1:24:a9:a6:be:37:34:bc:c4:34:e2:a5:33:83:d2:5c:58:98:
         e9:4b:be:bc:e5:60:de:15:43:79:fb:9e:44:8d:a2:17:93:8d:
         96:3a:42:3f:14:b8:55:10:79:b8:6d:b9:ea:de:ad:ed:4e:b2:
         ea:c4:92:4e:16:2f:04:44:df:79:72:74:5e:c9:3b:8c:42:e1:
         a4:5a:cc:68:b7:6f:e0:b9:98:e1:2c:5d:46:cc:82:7e:b9:84:
         c5:c9:ff:cb:67:8a:f0:24:c8:22:0d:09:02:d8:b2:45:66:1e:
         e3:b8:3a:c8:95:a6:37:63:ef:c3:5c:d9:9a:f0:0b:e0:e4:32:
         7d:f0:61:21:f1:ff:21:42:7b:b6:21:7a:f3:5f:ae:2d:bd:d4:
         4c:ca:1b:5b:2b:5a:46:eb:a3:c0:02:6a:49:67:d2:05:dd:f2:
         40:dd:84:de:c5:c1:98:86:69:b4:63:56:d2:d8:de:94:f4:d3:
         60:2e:af:b3:e4:26:de:d9:0a:67:46:60:fc:06:04:85:25:34:
         d9:db:e8:0e:09:c3:79:08:43:20:84:9c:f5:8f:ce:cb:d4:58:
         ad:b5:4e:8a:8e:98:bd:9f:3b:a3:9c:1b:e4:6a:b8:f8:01:43:
         1f:c9:ed:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----