Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/415d7edef43966d4213b3de06e3aff452f448e9e.roa
File:                     415d7edef43966d4213b3de06e3aff452f448e9e.roa (raw, json)
Hash identifier:          OeUzxLAYl4BgTJkNp8OMJkaHVmlD388P9KaOZ9NQdEI=
Subject key identifier:   D2:52:86:DA:3F:94:36:4F:35:97:70:2E:79:80:60:56:D3:C5:C0:F3
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0312E2
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/415d7edef43966d4213b3de06e3aff452f448e9e.roa
Signing time:             Fri 04 Feb 2022 03:08:51 +0000
ROA not before:           Fri 04 Feb 2022 03:00:00 +0000
ROA not after:            Sat 04 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201442 (0x312e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb  4 03:00:00 2022 GMT
            Not After : Feb  4 03:00:00 2023 GMT
        Subject: CN=415d7edef43966d4213b3de06e3aff452f448e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:17:b0:c3:8f:c6:18:ad:ca:17:fd:aa:f0:
                    de:5b:46:4b:5d:0f:57:bb:a7:2b:16:ce:ba:ec:90:
                    72:20:f8:b1:d0:11:e3:cb:a9:17:ec:63:40:da:4a:
                    6b:8c:83:91:52:d1:5c:a6:c5:a9:5c:b2:1a:22:1f:
                    fb:5d:02:6d:36:78:88:59:f0:9f:15:47:af:df:2d:
                    36:63:cb:8c:05:fa:a8:e2:70:6a:97:17:b0:07:3c:
                    a9:26:1d:eb:bc:91:08:00:2f:5e:cf:7b:b4:fe:ca:
                    e4:36:c7:ca:14:5e:a8:62:c4:b5:0e:68:75:70:89:
                    60:03:11:95:ba:67:65:b4:e1:1a:32:3a:40:c2:b8:
                    53:91:5d:0e:1b:30:f1:53:0e:d6:dc:c1:0a:73:b1:
                    75:7e:d4:fd:40:77:eb:3e:10:75:90:de:7a:4e:ba:
                    12:64:6a:55:4f:57:eb:62:f9:54:53:30:fe:bf:6d:
                    d3:0d:8b:e6:fc:07:82:bc:70:2c:c5:8f:d1:03:6a:
                    ee:ac:46:c2:ef:18:f7:0e:2d:33:aa:30:b1:22:f3:
                    2d:14:44:77:10:6f:6e:45:16:be:e3:bb:67:d5:f3:
                    16:e1:1d:24:28:60:98:21:bb:07:c9:11:a9:bd:09:
                    93:3c:69:0b:c6:d2:3b:4a:e0:ec:54:ee:74:2d:d1:
                    0d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:52:86:DA:3F:94:36:4F:35:97:70:2E:79:80:60:56:D3:C5:C0:F3
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/415d7edef43966d4213b3de06e3aff452f448e9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:05:a3:75:68:ef:6e:4d:16:d9:8c:01:7f:31:59:0a:07:a8:
         69:14:ff:11:d3:44:67:c9:6c:2b:ee:de:64:c4:a8:fb:21:69:
         00:f6:51:b7:fe:b4:92:c4:1d:7a:b7:dc:44:8f:04:d6:92:93:
         01:2a:c8:7a:36:6f:7f:a7:b8:35:1d:9c:2f:12:cf:e8:65:b0:
         a4:a5:fc:c5:e0:34:9c:8e:06:cf:ba:e2:6a:fd:73:39:b5:52:
         98:fa:61:0e:01:35:7f:97:19:41:f7:7e:4e:fd:d8:2e:9a:15:
         ce:81:a3:43:a3:2a:af:3f:69:5f:0f:44:f0:82:e7:f0:e4:7e:
         f3:ff:e5:45:e4:0a:95:17:14:9b:8a:f5:b3:b0:04:2d:56:78:
         6a:7a:dd:d1:4b:52:f6:32:50:f1:45:6d:89:02:0b:12:5c:6f:
         4c:a2:a3:05:21:5a:0d:1b:9a:b1:f3:6b:b1:46:11:18:91:6a:
         ba:18:43:39:18:64:6f:ef:e7:1d:8c:3e:54:26:37:14:5b:c0:
         c9:a4:35:90:02:af:a7:d7:3a:13:1a:0a:5b:7a:52:26:a0:93:
         5b:3a:fd:52:8c:cf:b1:ea:72:1c:ae:3e:da:91:11:ec:72:09:
         6b:dd:09:0b:75:f4:d8:f9:c9:49:c2:73:60:65:a8:9a:2a:17:
         b0:de:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----