Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/438be97ac655f8e4728aa2b18cdb5dfa30c92465.roa
File:                     438be97ac655f8e4728aa2b18cdb5dfa30c92465.roa (raw, json)
Hash identifier:          2xi4LwrBzYpPSzA3bzgFjQCI96NNl86dWTFmzCSXUw0=
Subject key identifier:   6E:7E:3F:4D:7D:89:74:7C:0A:D6:4B:7A:3B:BA:04:BA:C8:A2:75:DE
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0E28D9
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/438be97ac655f8e4728aa2b18cdb5dfa30c92465.roa
Signing time:             Sun 09 Oct 2022 01:03:30 +0000
ROA not before:           Sun 09 Oct 2022 03:00:00 +0000
ROA not after:            Mon 09 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927961 (0xe28d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct  9 03:00:00 2022 GMT
            Not After : Oct  9 03:00:00 2023 GMT
        Subject: CN=438be97ac655f8e4728aa2b18cdb5dfa30c92465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ad:39:8d:e8:e3:e7:38:0b:fa:34:e0:14:a5:
                    a2:91:a5:76:35:ea:fa:97:e8:ca:7c:12:28:9e:aa:
                    38:ec:7e:44:fa:90:5d:d0:98:35:64:a1:6e:0e:d5:
                    85:a4:eb:f8:fc:f0:56:17:c2:4d:1c:11:64:d1:61:
                    cf:3c:59:d1:49:59:55:c3:cd:1f:ed:05:b5:43:2d:
                    7f:4f:1d:8e:95:90:6a:3f:d5:c2:26:4a:a3:7f:aa:
                    92:e3:0a:9d:03:61:af:a2:86:88:17:42:bf:59:c7:
                    a5:00:d1:86:93:2a:f6:e5:3a:1a:88:3f:74:fa:67:
                    e2:90:21:e9:de:21:b8:63:4f:94:bb:17:26:dd:13:
                    83:7f:04:f8:ab:f9:3b:34:d0:cb:1d:b8:8d:1f:50:
                    df:50:bc:b4:df:55:5f:17:32:5d:c9:d9:b9:68:5b:
                    03:44:d2:42:2c:42:1e:37:c7:36:bb:7b:5d:d5:0c:
                    9b:8d:12:2f:47:96:d0:86:48:a1:57:79:3f:be:05:
                    7e:5a:87:48:d2:d4:ca:e3:bd:83:2f:94:67:16:06:
                    62:b9:68:a4:6e:f0:ab:60:08:6d:df:0e:65:cf:10:
                    03:67:d7:bb:21:a8:fe:09:31:e4:31:1f:4d:fa:ce:
                    5e:7d:07:2c:d8:e0:a4:b3:3c:d6:e4:14:0c:99:35:
                    af:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7E:3F:4D:7D:89:74:7C:0A:D6:4B:7A:3B:BA:04:BA:C8:A2:75:DE
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/438be97ac655f8e4728aa2b18cdb5dfa30c92465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:eb:f0:68:fb:ad:88:5c:00:8a:c0:e4:34:8b:15:d1:22:
         ed:3b:a9:0d:e8:51:ae:e1:60:68:db:9c:c9:81:92:b5:d3:69:
         00:fd:72:ce:bb:06:9c:62:a9:18:da:9a:66:06:51:1d:fe:bb:
         0d:e4:22:69:d7:af:fc:1d:42:c2:c6:1c:b2:72:fc:74:20:54:
         0c:c3:e4:78:58:2b:c7:97:56:91:8a:1a:2f:ae:8a:52:f1:9b:
         b7:e2:9c:08:fc:ad:34:5e:1f:51:8c:52:4b:25:78:ff:e0:e6:
         d1:3b:c3:00:ea:25:0b:03:0a:53:6e:52:b1:fc:f1:f5:87:d6:
         a6:99:de:06:e5:2c:1b:fe:ba:de:52:1a:93:54:fd:fe:cc:ad:
         06:75:93:86:b2:f5:ae:1a:b2:fc:7b:1e:99:7a:63:d7:cc:ca:
         b8:eb:ae:e0:58:88:c5:84:47:4f:70:f9:65:ee:21:f4:08:06:
         fd:e9:f3:89:12:e5:8e:58:5f:68:b3:36:67:ee:d4:0e:77:14:
         ab:09:62:8a:c5:cd:fc:33:71:48:45:61:9d:d5:64:03:b5:45:
         83:25:f9:85:51:03:81:30:51:58:9a:e8:20:50:b9:e7:ee:d5:
         e7:07:94:98:55:e8:ae:df:c6:51:fc:c7:a3:c0:63:40:12:ff:
         a9:ab:b6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----