Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/428296b026df22e0ea368b58addbf3b8bbffa6f0.roa
File:                     428296b026df22e0ea368b58addbf3b8bbffa6f0.roa (raw, json)
Hash identifier:          v2k0fBIw/ifhSwFGU0YlcDZrc70KCUacXI5lYZUzTOo=
Subject key identifier:   1D:1C:A9:0D:C5:6B:54:5C:CF:E7:B1:EB:7D:31:29:38:74:B0:C3:A6
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0A3210
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/428296b026df22e0ea368b58addbf3b8bbffa6f0.roa
Signing time:             Thu 14 Jul 2022 05:58:45 +0000
ROA not before:           Thu 14 Jul 2022 03:00:00 +0000
ROA not after:            Fri 14 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668176 (0xa3210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 14 03:00:00 2022 GMT
            Not After : Jul 14 03:00:00 2023 GMT
        Subject: CN=428296b026df22e0ea368b58addbf3b8bbffa6f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:44:30:63:b1:b4:34:be:81:1b:3c:a2:44:
                    66:f1:6a:4f:12:2b:eb:ab:15:13:b8:f9:69:c7:68:
                    66:b3:4d:b0:dd:49:9c:09:97:44:18:49:fc:19:9a:
                    b1:bf:14:15:cc:a6:9e:39:31:03:74:62:75:a7:99:
                    d6:96:b3:8f:a0:99:cc:c1:07:d0:ab:14:61:8e:c4:
                    49:f9:c0:63:1d:68:04:69:4c:d4:b3:ac:16:10:5a:
                    23:38:4a:d2:bf:bb:6d:d4:9c:5f:56:1c:ec:3b:99:
                    a3:d9:ea:f9:ec:2a:97:6b:78:14:25:c0:66:48:8d:
                    07:96:46:4f:03:66:d2:a9:18:39:75:18:4c:cc:96:
                    75:7b:d7:14:7b:50:f0:50:ae:4a:77:6b:46:92:15:
                    89:49:ed:bd:c9:20:e1:46:d6:c6:6b:d9:36:f7:e4:
                    ea:c9:75:c3:be:36:ed:1b:8a:6d:91:b4:73:a1:8d:
                    3c:90:46:40:d7:78:82:20:43:45:48:f2:47:94:0c:
                    f4:6a:ab:88:4c:37:02:f3:27:2c:3f:3c:3c:0b:f1:
                    5d:78:39:58:b7:41:98:57:83:2d:cb:20:c4:5d:6d:
                    4d:9c:97:5d:4e:b4:dc:cb:7d:39:3c:49:c1:10:1a:
                    97:b5:61:96:02:79:ca:45:69:8f:d8:8a:7d:28:0c:
                    22:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1C:A9:0D:C5:6B:54:5C:CF:E7:B1:EB:7D:31:29:38:74:B0:C3:A6
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/428296b026df22e0ea368b58addbf3b8bbffa6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:ae:30:ce:a1:ea:7a:69:31:d9:59:c2:13:47:33:96:b9:8b:
         8a:48:81:39:f5:a3:74:b7:99:a0:22:ff:94:94:02:14:73:60:
         ca:ff:73:88:0c:fa:bf:02:98:ef:3b:45:94:4a:84:1a:86:ce:
         2a:e7:c2:4d:7c:11:93:df:e4:10:91:f2:b1:0d:bb:4a:eb:bc:
         47:60:38:ee:13:02:8a:5a:fb:cd:48:69:ab:d7:7a:75:01:58:
         4b:74:e1:08:f7:10:0f:af:f3:d9:3a:0d:75:c5:a6:29:2f:a0:
         af:12:51:38:fd:dd:78:8a:ee:da:9d:cb:74:38:fb:86:ea:d0:
         5c:d7:1c:49:cb:79:39:f2:8c:06:68:79:99:6d:6c:06:92:4b:
         c9:2d:23:13:a5:60:e4:46:65:ad:29:0f:f3:d1:f3:cb:28:3f:
         b2:f2:08:7d:1a:cb:c3:9e:70:15:5b:ad:e5:26:4d:2f:2e:dc:
         e7:64:26:bb:ee:9b:ac:d4:3c:0c:dd:80:f4:9b:2d:e4:de:17:
         d8:78:9c:3a:33:70:e5:1b:33:78:90:63:ea:56:79:e5:22:de:
         5a:f2:e5:cf:ad:43:b9:db:93:a5:d5:a1:31:7f:0f:e9:c7:ef:
         9f:81:81:1a:46:a5:7e:31:c7:c1:db:6e:5b:e8:43:45:e9:19:
         92:99:5d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----