Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4e7f77ad2dddb7e3cd1464454881cd897c16e50f.roa
File:                     4e7f77ad2dddb7e3cd1464454881cd897c16e50f.roa (raw, json)
Hash identifier:          uqR2LnXm/4Z7AiVUm1CGL9jP20i8Tftgxflzyf+tEAg=
Subject key identifier:   60:62:C2:D4:30:45:78:4C:97:89:F9:85:A2:BE:37:A2:14:82:A8:86
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       06D8DC
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4e7f77ad2dddb7e3cd1464454881cd897c16e50f.roa
Signing time:             Fri 29 Apr 2022 02:25:28 +0000
ROA not before:           Fri 29 Apr 2022 03:00:00 +0000
ROA not after:            Sat 29 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448732 (0x6d8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr 29 03:00:00 2022 GMT
            Not After : Apr 29 03:00:00 2023 GMT
        Subject: CN=4e7f77ad2dddb7e3cd1464454881cd897c16e50f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:37:1c:8e:e2:99:71:f5:90:4b:a8:c5:3f:
                    61:4e:fc:8e:bd:f5:85:5f:11:66:8c:ab:ee:19:0b:
                    a8:b4:7b:13:65:77:44:4f:61:0c:7f:dc:d7:96:4c:
                    db:aa:86:da:7e:e5:97:dd:20:03:fc:ec:95:6d:c4:
                    bc:d7:1c:4e:1b:fa:ff:29:15:65:b1:61:61:8d:5e:
                    d7:b1:0f:08:e9:8f:7b:8d:54:47:d9:ba:09:ba:f5:
                    99:bd:31:21:9d:b1:72:21:0e:0f:51:f7:eb:a4:49:
                    b6:a4:6a:47:f3:d2:cc:54:a1:2c:03:96:0e:2b:b3:
                    ad:5e:3b:3d:c1:0b:c5:d5:16:c6:09:f9:42:f4:4b:
                    5a:43:01:5d:b9:a7:71:28:d9:b3:1b:d1:d9:13:09:
                    ef:36:c8:68:cc:ef:12:9f:bb:4d:36:8a:4e:82:1c:
                    5c:25:34:74:5a:ae:8b:11:c4:8b:d0:4d:a8:a9:38:
                    f0:dd:53:f3:03:da:4a:a3:45:c1:53:d6:76:8b:ef:
                    96:65:22:64:ed:ee:d6:bc:9c:12:56:4b:76:1b:57:
                    0b:ff:f8:43:ba:d7:37:3e:7a:f1:fc:bc:e8:67:51:
                    09:96:38:68:8e:43:7e:60:2e:66:ac:08:64:43:82:
                    11:93:ba:77:a3:72:00:71:c0:69:82:b9:c9:c0:9e:
                    ba:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:62:C2:D4:30:45:78:4C:97:89:F9:85:A2:BE:37:A2:14:82:A8:86
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4e7f77ad2dddb7e3cd1464454881cd897c16e50f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:a2:b2:75:e4:bd:67:62:2d:66:ea:55:01:ec:88:86:25:d8:
         96:4c:9e:1b:5e:7b:ae:3b:82:5d:90:24:c4:ae:86:f8:a0:23:
         5f:d0:c6:8f:58:2f:4c:af:a4:68:bd:20:e1:4d:15:6d:98:6e:
         1c:b0:ff:9f:89:72:05:68:db:90:73:9d:39:56:4e:3c:84:28:
         1c:c3:bf:77:9c:a5:df:7e:67:ec:22:83:95:44:39:30:51:4f:
         b9:49:93:1e:a1:f6:4f:d7:0d:29:e5:b7:86:19:00:1d:46:d8:
         5e:3d:2c:30:a4:76:95:d9:a6:5d:19:f5:a1:b1:85:b0:07:d3:
         28:11:49:f9:f1:70:b5:74:ee:f6:1f:ec:53:4e:50:f2:e2:5a:
         bf:b3:dc:bb:cf:1c:0f:9b:a7:ee:9b:b2:0a:f0:57:b4:a9:ed:
         01:b2:33:e9:29:a6:55:6b:19:4f:e5:e5:35:62:08:13:80:56:
         04:a1:66:31:a7:eb:69:5d:f1:d8:b7:37:92:55:da:48:e1:6d:
         dc:0c:51:e7:0c:68:ce:92:7f:f7:b7:ca:20:3d:b9:5b:0e:79:
         b5:6d:f6:0e:2f:fc:8d:fe:ea:4d:93:f1:de:80:94:f6:92:72:
         59:fb:5b:68:51:3f:34:49:2e:29:b5:ae:b4:ca:6c:86:da:e4:
         21:e4:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----