Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/43c21bafc4dca223185468c03d9f89fc62b3f474.roa
File:                     43c21bafc4dca223185468c03d9f89fc62b3f474.roa (raw, json)
Hash identifier:          vgOtvuUYnJew5guOrZYlBsa93nPjOcJVKJrAswA+1Tg=
Subject key identifier:   E8:FB:1D:0C:83:6D:78:A7:FC:64:03:5B:6D:18:B4:EC:2D:EA:EF:B9
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       05159A
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/43c21bafc4dca223185468c03d9f89fc62b3f474.roa
Signing time:             Mon 21 Mar 2022 03:07:55 +0000
ROA not before:           Mon 21 Mar 2022 03:00:00 +0000
ROA not after:            Tue 21 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333210 (0x5159a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 21 03:00:00 2022 GMT
            Not After : Mar 21 03:00:00 2023 GMT
        Subject: CN=43c21bafc4dca223185468c03d9f89fc62b3f474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:9e:d6:ed:2a:42:ec:bf:46:bd:8e:13:37:c4:
                    13:25:8e:00:8c:e9:2d:d4:0b:15:4e:7e:23:be:c6:
                    66:b3:93:de:d2:bf:a3:ca:5a:fe:69:5c:5d:84:c4:
                    6d:53:a2:3c:0f:b6:6a:b6:be:f3:62:f6:d9:ee:8c:
                    4e:9d:21:79:ce:26:ce:8e:a7:4c:0d:34:bc:89:ae:
                    09:b1:bc:61:f9:3f:55:58:29:12:12:68:d8:e0:66:
                    a6:35:be:36:c2:b6:b7:92:81:03:80:7b:8b:c9:d0:
                    ab:22:78:de:91:27:3b:87:00:a0:cc:99:53:40:85:
                    74:37:7c:74:db:6b:6f:8c:2a:08:2d:e7:88:bf:56:
                    71:23:06:a1:90:ce:db:af:e7:ad:f7:3a:4b:1e:f7:
                    0e:c4:07:e4:de:7a:6c:11:9d:82:45:23:89:c9:11:
                    ee:9f:19:e5:fb:be:2f:69:3e:03:dd:8c:2f:8d:5d:
                    47:2f:0f:ef:5b:60:c1:1d:a1:62:2b:c9:08:f5:2b:
                    34:61:0b:95:41:bb:30:c8:84:c1:82:9a:df:61:7f:
                    dd:ae:3d:cd:1c:92:41:31:b7:6b:2a:79:1e:72:eb:
                    80:a8:4b:3e:d5:a5:a3:08:14:c6:65:45:d2:e5:35:
                    ad:3f:82:50:8f:50:d8:0b:c8:10:5d:c9:df:5e:04:
                    d8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:FB:1D:0C:83:6D:78:A7:FC:64:03:5B:6D:18:B4:EC:2D:EA:EF:B9
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/43c21bafc4dca223185468c03d9f89fc62b3f474.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:95:e9:e0:87:f7:a6:ca:d1:63:04:2e:1a:cc:71:9b:18:
         fc:87:a2:a2:90:c9:20:4e:74:2e:e0:6c:01:7e:1f:b7:2f:1a:
         4a:e8:f2:d8:98:35:a5:4a:d2:90:53:d5:76:0c:20:89:fe:52:
         57:22:9c:7b:a3:45:f4:d3:8a:b6:ec:eb:40:27:af:8f:50:3f:
         7b:04:f0:63:c8:43:02:fe:32:bf:5b:6c:1c:eb:35:be:bc:f1:
         13:73:52:44:7e:91:64:63:c2:7c:8e:31:ff:c9:90:79:7e:d3:
         17:98:c9:a4:be:bf:d9:56:40:6b:7d:c0:d8:93:13:b7:19:8b:
         5a:37:96:bd:be:6e:50:db:56:02:22:d9:02:98:88:09:33:7c:
         36:d9:69:f6:9c:43:a5:84:8f:45:1f:d7:12:d7:c4:57:af:50:
         87:66:fd:d6:4b:50:18:ca:89:93:ce:29:65:b1:c1:e6:68:25:
         7c:e7:24:b5:67:f6:7f:1c:e1:90:56:f7:65:5c:fa:6e:3b:f1:
         1a:b9:20:e0:5f:7e:ca:30:13:7f:f5:d5:94:8e:e7:b1:68:94:
         46:56:a9:b2:9d:85:8f:9e:89:73:02:a5:57:fc:07:b4:f3:8b:
         b6:eb:48:58:78:2e:75:0d:78:31:69:13:6b:f9:3c:05:5b:80:
         03:51:01:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----