Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4b57732cc46c4073c7da59005bb87424494e1579.roa
File:                     4b57732cc46c4073c7da59005bb87424494e1579.roa (raw, json)
Hash identifier:          pWsOukQ+k5Ps9ICPAWbFGXMl8OXCCN1pLhCQCQZziLo=
Subject key identifier:   EF:40:1E:74:82:21:BD:66:22:F3:72:62:33:8B:C2:F5:85:02:BB:E6
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0A756E
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4b57732cc46c4073c7da59005bb87424494e1579.roa
Signing time:             Wed 20 Jul 2022 03:40:06 +0000
ROA not before:           Wed 20 Jul 2022 03:00:00 +0000
ROA not after:            Thu 20 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685422 (0xa756e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 20 03:00:00 2022 GMT
            Not After : Jul 20 03:00:00 2023 GMT
        Subject: CN=4b57732cc46c4073c7da59005bb87424494e1579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:78:d0:1a:6c:99:27:b2:a2:df:90:c2:04:b0:
                    62:38:80:9a:60:3e:87:f1:cb:43:b9:1f:d5:ea:db:
                    88:ac:25:d3:3c:53:46:a8:5a:af:18:49:ce:43:2d:
                    d9:c0:e5:f2:e9:88:5b:1f:5a:57:b4:d9:0a:47:a8:
                    83:cc:51:6c:4d:87:aa:c1:fb:4f:47:ed:da:6c:52:
                    16:48:9d:28:b6:fd:85:84:df:6e:e3:4d:be:12:ae:
                    40:3b:f8:26:ab:2b:63:05:49:15:56:42:59:99:69:
                    ae:74:6f:0f:25:da:7d:36:cd:8d:a3:50:42:92:46:
                    ad:40:fb:f8:b5:69:97:21:5c:90:73:cb:41:a7:7b:
                    51:e3:ce:c2:2d:25:f5:c2:a3:7e:9a:2d:14:7d:2f:
                    28:11:e4:35:9b:7e:13:4c:99:b2:6d:42:4b:cb:82:
                    2d:35:10:93:0e:b6:c4:52:00:cb:9e:50:5f:df:56:
                    2c:6b:d3:b1:02:24:74:f8:c5:84:5e:2f:19:f6:8e:
                    1a:35:a8:95:84:ff:4c:b8:85:fe:08:51:11:c9:59:
                    12:ac:df:71:be:d6:6f:26:dd:f0:bc:2f:45:68:96:
                    76:e8:74:59:2e:dd:fe:8e:18:d8:dd:a8:b6:8a:0d:
                    1d:be:57:17:10:13:9c:dc:50:0e:b9:26:2d:fc:c9:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:40:1E:74:82:21:BD:66:22:F3:72:62:33:8B:C2:F5:85:02:BB:E6
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4b57732cc46c4073c7da59005bb87424494e1579.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:57:a9:84:eb:12:5d:2a:77:3e:bb:69:5d:71:58:41:32:9e:
         5a:6d:d8:27:34:ce:d3:ab:c8:cc:bf:6c:00:f9:e5:ca:7b:4a:
         fd:c5:b6:82:9d:30:92:46:5b:e8:1c:03:bb:14:f1:bb:21:31:
         f3:24:ec:73:41:64:51:15:ee:f3:7b:ee:18:9d:72:ce:81:ce:
         88:df:60:70:3e:03:44:f9:cc:e1:d2:bf:4c:06:01:54:44:3a:
         03:ec:89:f0:be:db:25:de:50:a5:c3:54:1c:4f:08:df:7e:9c:
         15:8e:12:f2:21:3b:90:61:c4:f1:eb:0f:90:59:2a:ff:a4:da:
         61:73:45:cc:ed:34:47:a3:f8:e0:76:de:1f:4f:6d:01:d0:2b:
         0f:11:f0:da:9e:03:f5:6b:dd:ce:39:10:0b:78:10:32:ff:c8:
         5f:86:f3:1d:ba:f8:64:4d:15:71:cb:bf:a3:76:99:82:a1:0c:
         a4:5b:f8:51:74:03:6a:2e:a4:71:8c:f9:fd:6d:54:45:c0:ac:
         83:fb:2b:e1:30:7a:b8:14:f0:13:04:76:bb:0a:ab:20:10:5b:
         ee:b4:d2:77:c1:90:89:dc:92:ef:5f:d3:c9:67:05:86:01:9e:
         c4:eb:82:5b:38:5c:b4:77:0f:26:95:c1:30:d5:c6:3e:89:d4:
         42:30:5b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----