Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/455ba1dc5c3562534a335913be1a6d8a9b3b736d.roa
File:                     455ba1dc5c3562534a335913be1a6d8a9b3b736d.roa (raw, json)
Hash identifier:          mGXc3bOY3J10FCVND0byvGoNU/0EKEWVYn+ZVnZRsWQ=
Subject key identifier:   AD:C1:82:01:03:16:99:44:EA:AC:B4:0C:7E:29:8E:D3:8B:05:0B:56
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       077B37
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/455ba1dc5c3562534a335913be1a6d8a9b3b736d.roa
Signing time:             Wed 11 May 2022 02:18:03 +0000
ROA not before:           Wed 11 May 2022 03:00:00 +0000
ROA not after:            Thu 11 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490295 (0x77b37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 11 03:00:00 2022 GMT
            Not After : May 11 03:00:00 2023 GMT
        Subject: CN=455ba1dc5c3562534a335913be1a6d8a9b3b736d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a3:69:31:6a:5a:7b:25:1f:0b:a5:63:87:c8:
                    2e:4e:b7:41:4f:b4:fc:58:a6:9d:9a:75:cd:8d:cd:
                    f7:74:23:73:cf:f0:61:dd:d4:84:8e:df:c3:87:30:
                    d3:a9:40:88:b9:9f:95:c8:55:d0:63:87:c5:3f:8c:
                    f5:53:27:e5:d0:bd:60:89:93:19:29:ab:01:81:1d:
                    e6:c0:3a:9e:52:04:74:12:52:3d:d2:55:0d:5d:d4:
                    3d:69:e0:68:b5:76:40:56:eb:1f:0b:f7:c4:d0:2c:
                    2a:5d:63:41:8d:ac:82:44:6f:42:2e:51:be:19:eb:
                    cd:ec:93:db:de:52:92:32:38:13:c6:bb:35:ef:44:
                    23:b5:c8:05:3c:ad:a6:ff:4a:92:2e:b0:57:9d:d1:
                    f2:22:41:cc:f2:d5:c3:dc:28:15:a8:12:45:ef:7d:
                    c4:0c:cd:5c:90:be:cc:96:88:76:62:fc:a2:15:18:
                    89:4f:65:a9:a5:57:f0:ac:d3:84:45:1a:0b:ea:60:
                    88:9b:85:83:e8:2d:38:20:89:18:b9:e4:76:f0:d9:
                    92:42:5c:28:a5:96:d0:26:4e:d3:f6:e0:f3:28:bf:
                    8a:82:c1:db:25:00:09:fc:62:1e:3a:2c:df:49:b8:
                    9f:39:0f:20:37:18:b2:68:ba:04:ee:95:e2:7a:46:
                    fc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C1:82:01:03:16:99:44:EA:AC:B4:0C:7E:29:8E:D3:8B:05:0B:56
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/455ba1dc5c3562534a335913be1a6d8a9b3b736d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:59:21:c7:e4:c3:7c:c6:69:b2:34:a1:8f:68:44:a5:08:24:
         82:78:a0:c4:7b:d6:1d:4f:68:03:22:f2:71:df:0f:61:c7:6c:
         d9:37:a7:45:75:36:15:67:8a:7e:2d:08:93:9e:fa:7e:21:0c:
         c0:65:bd:e5:e3:c4:07:33:d1:1d:35:e3:98:b9:fd:5f:f0:04:
         10:df:48:e2:7e:70:b7:c8:52:ab:7e:b4:9d:4f:c4:26:5c:6f:
         3c:49:51:86:3a:02:19:f1:1f:74:c6:4a:58:2f:e2:19:48:fa:
         e9:03:d3:20:2e:cc:27:45:39:4e:9c:87:75:91:ab:ae:27:a3:
         df:aa:81:5c:ad:5e:1a:a6:e9:db:9b:65:8a:54:e3:d3:1c:71:
         b2:d9:8d:80:a4:18:98:b5:28:60:c5:5c:16:0a:36:20:f9:02:
         4e:eb:57:07:9e:0d:46:89:5e:1e:d1:ab:2a:44:4d:fc:cf:aa:
         91:62:6a:4c:f4:57:7f:f5:71:5d:4c:f9:0a:c3:a4:03:51:2f:
         67:ef:3d:cf:9a:bc:d1:de:46:c8:5f:33:51:94:b6:74:03:fa:
         73:2d:cd:e5:a2:f8:e9:3f:05:31:be:f9:3b:45:f5:42:46:fb:
         70:41:cf:cb:2c:85:3a:eb:8f:69:76:ca:38:d2:89:05:01:fa:
         22:46:ea:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----