Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/39738bb6f89e6381eea41980f8ef0acf1661ad05.roa
File:                     39738bb6f89e6381eea41980f8ef0acf1661ad05.roa (raw, json)
Hash identifier:          Y53JFYeOTw2bme0NmHXMh87WG5bEC1GVZ51qjmrigiQ=
Subject key identifier:   95:A6:51:9F:E2:90:C4:2D:A3:EA:00:A6:28:4B:5E:7F:18:2F:64:8A
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       08BB0F
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/39738bb6f89e6381eea41980f8ef0acf1661ad05.roa
Signing time:             Thu 09 Jun 2022 04:34:00 +0000
ROA not before:           Thu 09 Jun 2022 03:00:00 +0000
ROA not after:            Fri 09 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 572175 (0x8bb0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun  9 03:00:00 2022 GMT
            Not After : Jun  9 03:00:00 2023 GMT
        Subject: CN=39738bb6f89e6381eea41980f8ef0acf1661ad05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:16:1c:0f:05:cb:2c:60:74:d3:fb:3b:6f:
                    55:97:fb:1c:d0:85:dd:58:21:dd:ee:dc:79:20:70:
                    f6:fd:28:2e:27:78:7b:63:e6:c2:06:ff:04:dc:23:
                    e5:c2:61:bf:49:25:5e:6f:62:31:c2:8c:78:22:74:
                    dc:a4:ca:08:52:ca:35:00:57:31:e5:e3:e6:66:f2:
                    8f:d7:35:08:6a:0d:4a:26:7a:74:22:b0:16:e2:7a:
                    2b:c9:9a:d6:c6:81:e1:04:6d:10:98:69:8d:d2:ea:
                    0d:1e:d7:ad:be:7e:7d:3b:80:9c:75:65:f7:8e:55:
                    37:c0:bf:75:3b:0a:f9:25:53:78:94:35:50:6c:1f:
                    ac:f4:67:de:bc:bc:c7:bb:e3:f0:db:81:ab:b2:12:
                    d6:f3:1c:8d:ef:dc:95:29:30:60:d7:14:32:99:fa:
                    2b:02:41:a1:e7:6b:da:dd:29:2d:2d:a4:4b:8e:10:
                    a8:66:13:45:74:ff:f6:56:91:a8:c1:90:ab:2e:14:
                    3d:c7:1a:7b:05:04:34:6b:b9:85:8a:45:c7:0c:f1:
                    ee:90:9d:43:88:50:69:61:3a:fb:b6:1a:ac:51:1d:
                    52:66:29:fe:31:56:36:b4:c6:fc:f9:8c:af:ef:e6:
                    14:45:3f:e3:02:00:77:f7:d1:df:35:c7:10:d3:e5:
                    4c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A6:51:9F:E2:90:C4:2D:A3:EA:00:A6:28:4B:5E:7F:18:2F:64:8A
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/39738bb6f89e6381eea41980f8ef0acf1661ad05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         c2:e1:7d:f2:a2:e0:06:22:c2:71:a5:46:09:9a:1e:fb:be:02:
         ae:ed:28:ea:20:a3:bc:57:c3:67:c3:56:3b:02:43:e5:fd:1d:
         4e:2c:28:5b:bf:0f:44:1a:0d:3d:9e:59:3c:4f:bd:be:0d:42:
         f9:f2:3a:b3:10:af:86:e4:7e:e8:7c:7b:fe:d4:8a:54:48:1a:
         64:0c:22:78:ba:9a:75:1d:ab:f2:a2:e8:f5:3f:e5:f2:bc:e9:
         91:46:06:cb:7b:57:4c:aa:91:ef:fe:fe:14:cd:36:99:71:0e:
         e5:34:23:70:ee:57:8b:38:38:61:cd:20:f6:04:6c:f3:3d:c0:
         1c:41:65:6c:d1:e6:35:4d:eb:03:05:c1:1f:03:ac:eb:e5:23:
         b1:ad:bf:15:c8:ab:e7:8e:99:b4:0b:0c:21:76:96:d7:0d:20:
         02:e8:e5:06:79:94:7b:78:f9:44:04:dc:3b:3f:eb:17:31:13:
         f6:6c:8a:c9:98:c2:f7:b8:e6:59:83:5d:46:1b:cd:ff:49:78:
         de:8a:30:0d:77:fb:d8:18:1b:94:9a:1c:ea:dc:1c:8e:5b:87:
         35:60:38:9a:16:d0:dd:a7:53:82:a9:ab:0f:c3:54:31:f0:4f:
         7e:a8:4b:69:ee:83:4c:3a:98:99:54:cb:b5:fb:ac:cb:5b:f3:
         25:f1:2f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----