Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/498a666c40788e83c1eb8b866b0840a8442575cb.roa
File:                     498a666c40788e83c1eb8b866b0840a8442575cb.roa (raw, json)
Hash identifier:          6HxdzgeBJeCw6HXb1Ta88yj0QKxc7Qoszs4KpI5J5y0=
Subject key identifier:   CC:FF:7E:3C:BD:DF:37:CB:51:4D:B5:66:83:DF:12:94:8E:63:75:17
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       07C5FD
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/498a666c40788e83c1eb8b866b0840a8442575cb.roa
Signing time:             Tue 17 May 2022 04:26:00 +0000
ROA not before:           Tue 17 May 2022 03:00:00 +0000
ROA not after:            Wed 17 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509437 (0x7c5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 17 03:00:00 2022 GMT
            Not After : May 17 03:00:00 2023 GMT
        Subject: CN=498a666c40788e83c1eb8b866b0840a8442575cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:01:a3:2f:41:93:7c:37:3b:f7:93:88:72:b4:
                    74:d1:18:ed:ce:51:b6:84:d9:4e:8c:1e:52:d4:08:
                    30:23:9d:26:bd:d8:fe:06:4f:43:8c:d4:60:12:aa:
                    8b:54:ac:06:e3:92:5f:6b:74:6d:03:b5:19:5f:85:
                    fa:db:a9:c5:00:9d:3e:4b:9d:6a:fd:92:00:16:fe:
                    7b:47:82:42:04:a6:88:c6:a4:97:16:c8:8b:23:26:
                    ef:a6:91:cf:87:5d:e4:2e:2c:b2:3a:03:2e:81:6f:
                    a2:a3:4c:7e:f2:42:de:0d:90:97:bf:63:8e:1d:67:
                    fc:dd:b7:d9:70:01:9c:f5:d0:51:e1:5c:e5:d6:5a:
                    d9:23:a0:0f:6f:ca:df:57:a3:12:18:46:1e:25:d4:
                    11:22:65:1f:c0:59:87:d2:3f:30:2a:58:73:dc:da:
                    80:6b:3f:ae:d3:19:b7:89:51:de:64:dd:19:ed:38:
                    13:37:19:54:ef:ee:c1:aa:25:18:50:3d:56:b4:e4:
                    76:f6:f1:15:bd:86:a5:6a:45:89:65:2a:fa:97:07:
                    71:7d:20:c0:6e:d6:47:de:1b:43:dd:23:2a:e7:f2:
                    73:f5:d9:b0:01:a7:1d:f6:3f:ab:f2:51:c2:3a:60:
                    97:6c:4c:52:19:e2:c1:9b:7b:0f:69:f9:b3:7d:7a:
                    4a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FF:7E:3C:BD:DF:37:CB:51:4D:B5:66:83:DF:12:94:8E:63:75:17
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/498a666c40788e83c1eb8b866b0840a8442575cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:de:fc:3c:56:33:ed:89:35:41:c0:3d:e6:bc:42:12:7c:94:
         72:52:ea:ef:3d:f0:e8:1e:45:a9:d2:35:7e:14:27:97:6a:e2:
         95:89:f4:80:ec:c6:0d:01:55:47:86:cc:46:52:e7:38:ec:23:
         f5:de:30:08:21:e1:61:14:6d:be:2b:0b:da:2c:dd:9a:ef:20:
         25:ee:d6:2c:5c:db:96:86:bd:63:ee:28:53:fc:e0:ef:2d:e5:
         fe:c3:0b:2e:42:93:c1:35:06:de:4b:f3:55:6c:e9:2f:9b:04:
         7c:11:7b:ee:02:ee:a2:78:b9:1a:22:ba:ce:fa:db:a3:ab:15:
         70:4c:27:fe:83:c0:35:e8:8a:2b:ba:e4:d9:4d:5f:94:26:96:
         9c:4f:26:e4:5e:9e:5a:15:67:e0:29:97:1e:00:4a:1e:2f:60:
         a4:cb:ac:c7:8a:27:f9:6d:d9:0a:cd:49:2e:8f:be:8c:7e:f3:
         1f:4f:89:61:52:f5:0a:97:e1:ec:20:ec:3c:9c:8b:b0:08:5c:
         cb:cd:39:f2:5c:d1:53:1e:e7:89:b7:05:b2:1d:31:4e:b4:58:
         a9:db:8b:bf:30:b4:52:22:10:27:1e:25:73:80:da:78:26:49:
         2b:cc:2a:b6:68:bb:a0:8a:d1:e8:6e:13:e8:5a:f6:2a:88:3f:
         37:5c:86:1c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDB8X9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNTE3
MDMwMDAwWhcNMjMwNTE3MDMwMDAwWjAzMTEwLwYDVQQDEyg0OThhNjY2YzQwNzg4
ZTgzYzFlYjhiODY2YjA4NDBhODQ0MjU3NWNiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqAGjL0GTfDc795OIcrR00RjtzlG2hNlOjB5S1AgwI50mvdj+
Bk9DjNRgEqqLVKwG45Jfa3RtA7UZX4X626nFAJ0+S51q/ZIAFv57R4JCBKaIxqSX
FsiLIybvppHPh13kLiyyOgMugW+io0x+8kLeDZCXv2OOHWf83bfZcAGc9dBR4Vzl
1lrZI6APb8rfV6MSGEYeJdQRImUfwFmH0j8wKlhz3NqAaz+u0xm3iVHeZN0Z7TgT
NxlU7+7BqiUYUD1WtOR29vEVvYalakWJZSr6lwdxfSDAbtZH3htD3SMq5/Jz9dmw
Aacd9j+r8lHCOmCXbExSGeLBm3sPafmzfXpKQQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFMz/fjy93zfLUU21ZoPfEpSOY3UXMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzQ5OGE2NjZjNDA3ODhlODNjMWViOGI4NjZiMDg0MGE4NDQyNTc1Y2Iu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAyd78PFYz7Yk1
QcA95rxCEnyUclLq7z3w6B5FqdI1fhQnl2rilYn0gOzGDQFVR4bMRlLnOOwj9d4w
CCHhYRRtvisL2izdmu8gJe7WLFzbloa9Y+4oU/zg7y3l/sMLLkKTwTUG3kvzVWzp
L5sEfBF77gLuoni5GiK6zvrbo6sVcEwn/oPANeiKK7rk2U1flCaWnE8m5F6eWhVn
4CmXHgBKHi9gpMusx4on+W3ZCs1JLo++jH7zH0+JYVL1Cpfh7CDsPJyLsAhcy805
8lzRUx7nibcFsh0xTrRYqduLvzC0UiIQJx4lc4DaeCZJK8wqtmi7oIrR6G4T6Fr2
Kog/N1yGHA==
-----END CERTIFICATE-----