Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3fec272e15241d25214c9530785a4d86017d336b.roa
File:                     3fec272e15241d25214c9530785a4d86017d336b.roa (raw, json)
Hash identifier:          I+1z5zu+4nzBtkMdP32zJ/F2OnR5HF4GZYZtZEhM5EY=
Subject key identifier:   B4:29:44:EE:F5:57:05:33:D6:34:B3:E7:04:B3:6B:5E:AB:62:86:75
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       098E43
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3fec272e15241d25214c9530785a4d86017d336b.roa
Signing time:             Wed 29 Jun 2022 01:01:32 +0000
ROA not before:           Wed 29 Jun 2022 03:00:00 +0000
ROA not after:            Thu 29 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626243 (0x98e43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 29 03:00:00 2022 GMT
            Not After : Jun 29 03:00:00 2023 GMT
        Subject: CN=3fec272e15241d25214c9530785a4d86017d336b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0f:26:2b:9c:c6:8f:0b:78:62:96:69:db:8f:
                    aa:38:f7:af:18:e9:2c:d9:1c:b0:c9:92:5f:be:9a:
                    b1:21:ef:0c:47:98:97:11:6a:75:44:7c:6c:26:b6:
                    42:56:8c:4a:c8:41:93:86:8e:be:19:f7:32:b7:6d:
                    27:dc:58:39:73:f0:79:2d:53:ac:ed:b0:07:89:56:
                    62:a8:12:38:6a:36:4b:82:dc:5f:d4:38:c3:a1:f1:
                    b2:9a:77:70:ce:35:25:53:96:7b:c1:f0:93:b0:77:
                    09:c2:4e:62:89:9e:c4:f8:58:70:7a:ff:c7:b3:62:
                    12:7b:05:bc:c4:1f:4a:a0:b6:9c:68:b7:da:af:ac:
                    09:02:15:29:73:db:c5:52:0b:a9:fc:7d:86:45:90:
                    23:67:ce:6b:97:35:2a:f8:8e:b9:76:64:d3:2a:85:
                    5f:6d:dc:8f:8f:38:fd:cb:c7:6d:0e:86:a4:3a:e4:
                    25:57:8f:69:2c:93:bb:41:7b:4a:70:fb:55:e5:85:
                    e4:97:6e:1c:92:0c:f8:c8:89:2b:98:32:e5:72:d6:
                    aa:ee:c8:c7:8e:53:8e:60:fd:c1:24:c7:11:fb:c2:
                    12:f2:f9:b6:9a:cb:bc:b1:60:fd:ee:fa:a3:68:64:
                    a7:e1:61:39:91:55:91:90:33:8f:c0:06:e9:43:8a:
                    d3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:29:44:EE:F5:57:05:33:D6:34:B3:E7:04:B3:6B:5E:AB:62:86:75
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/3fec272e15241d25214c9530785a4d86017d336b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:0d:92:29:1b:bf:6c:eb:9f:15:a4:2e:c2:0a:5b:47:39:73:
         4a:b9:0a:48:a7:5f:10:50:88:6d:32:6d:b4:c6:fd:c9:cc:95:
         b5:85:39:9d:c2:2a:da:25:f7:34:b2:16:1e:75:3d:c1:9f:14:
         96:61:b5:37:8d:3b:b1:34:64:cb:29:a1:92:7f:95:90:f5:f4:
         12:fd:fa:b6:70:c6:da:eb:29:cc:b2:62:73:34:a2:2f:1a:f5:
         96:1a:68:25:92:36:f6:85:ba:35:6b:46:be:83:ee:10:42:94:
         7c:4f:52:52:43:ac:aa:0d:ed:96:d5:7d:f4:53:e2:4d:f6:be:
         05:4a:2e:20:ef:42:9a:9f:92:42:6d:73:06:43:8e:94:a4:64:
         37:a2:1b:65:24:2a:9c:4e:03:f5:19:6d:3a:1f:24:bc:5f:7e:
         33:25:5b:4b:79:66:26:6d:ff:32:12:5d:92:33:eb:9f:25:fb:
         ba:78:e2:3c:27:12:1a:52:88:bf:c9:cb:d5:49:1d:6c:a8:9c:
         ba:92:71:5a:00:c7:11:b7:57:3f:25:c5:97:3a:c4:5d:41:2c:
         bf:cb:87:ca:ae:22:58:1f:06:90:ec:d4:1e:ba:98:27:77:e2:
         a8:d9:53:cc:e0:3d:97:69:3f:79:b9:32:fd:dd:2f:d2:ab:3a:
         da:2a:29:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----