Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/42b5a2a8cf235fdfc1f447fdb3662bccce08c591.roa
File:                     42b5a2a8cf235fdfc1f447fdb3662bccce08c591.roa (raw, json)
Hash identifier:          j65qbexNYJ9GYDI5yaXZyCCyNRMLznAgl+UIuN19dPE=
Subject key identifier:   60:38:83:B9:CA:2A:74:10:72:9E:1E:E9:A8:AC:40:12:5B:FB:78:5A
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0E7B6A
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/42b5a2a8cf235fdfc1f447fdb3662bccce08c591.roa
Signing time:             Sun 16 Oct 2022 05:20:53 +0000
ROA not before:           Sat 15 Oct 2022 03:00:00 +0000
ROA not after:            Mon 16 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949098 (0xe7b6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 15 03:00:00 2022 GMT
            Not After : Oct 16 03:00:00 2023 GMT
        Subject: CN=42b5a2a8cf235fdfc1f447fdb3662bccce08c591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:aa:e8:38:ff:55:2b:33:73:b8:5d:76:a2:
                    09:9f:18:13:9e:ea:40:d1:e5:7c:48:bf:a8:53:2d:
                    c0:c3:71:be:39:81:ab:6e:dd:75:5a:6f:06:9e:00:
                    50:22:5b:e2:23:6b:6d:9c:a2:41:4f:84:90:7d:77:
                    f8:f5:a8:6f:c8:7c:7e:f7:f6:76:06:62:47:47:38:
                    83:95:5c:2c:35:00:82:18:a0:ec:81:c9:6e:71:b7:
                    82:39:c6:5b:23:e7:14:f7:0a:c5:5a:76:ee:b7:77:
                    59:7b:3a:7b:14:ac:bb:e1:fc:fb:b8:e1:b2:b2:7f:
                    14:38:fc:d3:1f:9e:38:bf:05:07:bf:9c:5b:aa:44:
                    82:42:1c:07:6c:35:23:59:d4:6a:fc:95:7f:49:50:
                    7c:ca:ec:48:1e:8e:ee:66:40:37:b8:9d:4a:cd:fd:
                    43:e4:98:91:58:13:3e:40:d6:9f:e0:12:08:42:21:
                    3b:a7:d3:7d:27:67:76:70:b9:07:23:ed:ca:97:80:
                    d7:be:dc:c8:31:39:a1:b6:29:9f:af:e5:5f:b9:0d:
                    63:37:1e:38:8d:20:fa:12:d4:2f:3e:33:4a:30:52:
                    ec:90:70:18:8e:69:4a:5e:d0:a9:ba:fb:60:a5:ce:
                    6a:d8:24:f1:b3:cb:ec:63:c5:f4:98:20:6b:49:c1:
                    a2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:38:83:B9:CA:2A:74:10:72:9E:1E:E9:A8:AC:40:12:5B:FB:78:5A
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/42b5a2a8cf235fdfc1f447fdb3662bccce08c591.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:77:9d:0d:af:e2:28:4c:5f:0c:dc:dc:23:de:8f:45:9a:d6:
         8c:d6:03:7a:11:8e:09:3c:d0:20:36:2d:7b:b6:68:ba:03:50:
         51:b5:1b:4a:70:6d:84:66:2f:f6:84:fa:8a:41:06:26:3e:47:
         4d:2b:6d:13:48:53:d8:a4:c8:ad:d0:66:b6:86:61:98:04:8a:
         ce:e8:d8:6c:d6:72:fb:a8:4e:b3:a1:16:3d:96:bc:34:d4:f1:
         5c:c8:04:55:94:fe:90:08:1e:49:48:8f:c1:2a:0c:a3:e0:87:
         07:36:de:74:8c:bb:c3:d4:05:1e:53:41:20:c4:cd:18:94:1e:
         7b:87:0e:e2:85:cf:a9:4b:14:2c:e7:d6:38:44:22:32:af:43:
         e0:6a:3a:6d:32:48:5d:d3:0e:50:60:ca:f4:92:01:0f:d7:3e:
         5e:b3:6d:42:62:5a:63:22:55:57:77:28:1b:f0:fd:7d:46:35:
         4b:f9:e2:b2:a1:92:56:fb:8b:7a:6c:65:ec:3c:1f:90:e5:2e:
         f6:fe:26:e5:73:cd:3d:4d:83:2a:f1:20:d2:69:63:fc:ab:7d:
         e9:cb:51:d3:1b:d6:cf:87:4f:df:aa:a9:1d:e5:86:8e:70:26:
         64:62:47:50:fe:19:3c:55:56:84:60:ea:04:80:b5:48:58:0c:
         87:a2:aa:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----