Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4233d7258b4c0a942fa9c9189b24cc4358ed37e6.roa
File:                     4233d7258b4c0a942fa9c9189b24cc4358ed37e6.roa (raw, json)
Hash identifier:          uLmc28GCPL2D8adqLQ7xvU742V8zVflf6G54eGmBO7c=
Subject key identifier:   B8:1F:B7:3B:DB:68:AF:91:44:D4:98:62:62:E2:FF:CB:2B:37:14:13
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       03DEB1
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4233d7258b4c0a942fa9c9189b24cc4358ed37e6.roa
Signing time:             Tue 22 Feb 2022 03:02:11 +0000
ROA not before:           Tue 22 Feb 2022 03:00:00 +0000
ROA not after:            Wed 22 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253617 (0x3deb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 22 03:00:00 2022 GMT
            Not After : Feb 22 03:00:00 2023 GMT
        Subject: CN=4233d7258b4c0a942fa9c9189b24cc4358ed37e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:d3:17:6a:0f:c8:ca:53:fb:ca:68:55:e7:
                    88:8e:04:e7:fa:ce:e5:97:bd:21:8a:e6:e2:78:3f:
                    ff:60:70:02:9a:2e:93:7e:cf:69:f4:a6:2c:18:25:
                    8e:a5:0e:80:96:a4:51:5b:13:e3:56:fc:3a:f9:55:
                    07:7b:fd:93:d9:38:05:99:81:1a:f8:22:9d:38:6f:
                    8e:29:fc:39:c5:d1:e4:fb:6b:6a:4b:9c:e7:4e:95:
                    ca:d3:6c:ef:64:e2:a7:9d:76:33:04:50:b7:b4:3c:
                    6b:65:cb:35:39:66:f5:dc:f9:be:64:e1:da:3c:19:
                    2e:1c:ab:7f:55:79:5a:9f:ff:04:c1:1a:88:39:24:
                    b9:bb:9d:db:eb:51:8f:c3:45:bc:a2:cb:31:9a:ef:
                    91:36:ea:db:9b:81:d8:96:08:48:d8:68:02:1a:e9:
                    20:02:92:85:4e:a3:a0:b9:fa:6e:7b:ab:f9:d6:94:
                    91:6d:3e:48:10:20:df:e8:32:02:ee:da:e9:9a:a2:
                    4a:d6:fa:22:eb:5a:1c:eb:7c:cd:91:32:cd:12:ba:
                    e5:10:1d:4d:52:c7:da:96:40:45:46:c6:f6:29:90:
                    3c:3b:71:4a:10:e7:f9:12:d5:57:fe:b3:33:93:22:
                    66:cd:9a:ac:0b:f6:d7:fc:43:58:51:f5:e9:9c:90:
                    6f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1F:B7:3B:DB:68:AF:91:44:D4:98:62:62:E2:FF:CB:2B:37:14:13
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4233d7258b4c0a942fa9c9189b24cc4358ed37e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:6e:a2:51:64:41:87:21:80:97:e4:8e:e2:4b:fe:01:d5:1c:
         dc:3e:32:2c:93:a1:6f:f3:f3:20:92:58:a6:cc:af:77:d5:06:
         b1:71:a8:1b:2e:51:75:15:16:f8:02:4e:1f:9c:ad:17:5f:c2:
         70:23:f9:78:27:83:54:e7:b5:f5:b7:c8:b5:31:f5:78:25:d6:
         c9:07:ff:aa:ee:15:a2:15:41:e4:74:59:15:37:8a:30:3f:ad:
         e2:29:16:99:16:2e:9e:f0:f8:0a:91:9d:2c:15:18:55:c3:27:
         c1:85:04:fc:8b:4c:e3:ec:e5:6c:65:50:71:4f:9e:1a:d3:d7:
         50:4e:6c:33:c4:f6:50:f5:5c:ce:9f:67:0a:50:1f:bc:ac:ec:
         84:5c:1c:16:2c:af:14:69:89:a1:72:27:00:aa:11:c2:b7:0a:
         e1:f0:5b:19:f4:d5:9f:85:24:a1:cf:9f:eb:f3:84:d0:77:98:
         c9:d9:55:06:75:b9:33:4b:d5:1d:01:2c:86:11:e2:5f:89:87:
         3e:68:64:a1:a7:af:ab:21:36:83:e6:6b:d6:59:30:76:5c:6c:
         6d:2f:ba:1d:26:9c:8e:49:c2:3b:3b:87:08:34:ea:16:ee:aa:
         7c:4c:1c:7a:8e:aa:e7:3d:29:28:aa:dc:6d:55:40:4a:c6:11:
         7f:31:8a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----