Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4ea56140442e1ff2b3c11b67cd71dfbb0444b3c9.roa
File:                     4ea56140442e1ff2b3c11b67cd71dfbb0444b3c9.roa (raw, json)
Hash identifier:          j4HmhDS5RbwMn8KWqpgergnZWLpg2r7QngbZUws7uc4=
Subject key identifier:   BB:B0:66:D8:D6:F4:92:26:DB:CD:11:68:73:5D:C0:FF:92:0D:75:57
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       098619
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4ea56140442e1ff2b3c11b67cd71dfbb0444b3c9.roa
Signing time:             Tue 28 Jun 2022 01:20:28 +0000
ROA not before:           Tue 28 Jun 2022 03:00:00 +0000
ROA not after:            Wed 28 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 624153 (0x98619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 28 03:00:00 2022 GMT
            Not After : Jun 28 03:00:00 2023 GMT
        Subject: CN=4ea56140442e1ff2b3c11b67cd71dfbb0444b3c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:e0:13:e8:42:7b:49:28:f8:79:d7:59:8a:
                    33:ce:c6:ef:62:ee:66:e5:83:42:56:03:07:a1:cd:
                    4a:b8:19:9a:52:fb:6c:a8:0e:f3:50:70:4d:c7:6c:
                    bb:17:16:a6:33:b7:82:e3:39:76:18:d0:fa:91:a2:
                    4d:6f:2b:7b:a6:b6:d3:af:2e:e5:70:f0:ff:0e:88:
                    97:2b:2d:1e:61:ed:08:3d:69:64:f3:84:7f:7c:2d:
                    b2:54:f3:29:80:dd:1e:2f:cd:7c:2a:58:0d:35:5e:
                    11:1c:0a:af:49:72:bb:04:01:4d:2e:77:39:42:cc:
                    fd:b7:a5:c7:fc:11:a0:9f:d8:5f:e8:67:2e:a4:97:
                    b1:27:91:9f:66:bc:8b:83:66:8f:a3:5c:11:6d:02:
                    e0:5a:a8:22:d6:15:7c:bc:7e:1c:4f:57:67:c7:46:
                    e2:78:9d:f4:14:68:c9:06:c1:ff:85:8f:b4:a7:3e:
                    e1:38:ef:49:69:93:07:99:d5:7c:1b:33:78:60:db:
                    dc:76:e1:cd:5a:15:79:f2:b4:17:7e:ef:ce:a6:f6:
                    99:08:76:4d:4e:bd:53:8a:de:81:1f:3e:d0:f6:61:
                    58:54:40:e3:92:b2:3d:95:20:71:cf:f4:c3:db:4a:
                    e3:69:6d:1a:9d:3c:f9:11:88:df:04:a4:0e:24:b0:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B0:66:D8:D6:F4:92:26:DB:CD:11:68:73:5D:C0:FF:92:0D:75:57
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4ea56140442e1ff2b3c11b67cd71dfbb0444b3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:2d:84:06:cb:5d:da:6c:ce:64:9d:69:7e:5f:1a:b0:d7:
         45:4c:7d:d6:43:f8:a8:9d:52:ea:50:e1:df:37:d9:5b:6f:97:
         66:6f:ac:de:e1:c6:8f:18:ed:b4:81:ac:16:38:c5:cc:95:04:
         17:ff:74:2e:78:7e:67:f8:76:47:2f:ac:ee:00:9a:44:20:ce:
         e4:13:14:c0:75:e7:d4:a7:5b:45:db:2d:8d:57:98:83:6a:19:
         e2:f2:ba:27:53:e5:18:21:7d:83:82:84:d9:6a:5d:9a:25:3d:
         fc:f3:70:05:fe:f5:d6:17:58:11:55:3c:50:0c:79:a8:30:d3:
         26:1f:99:59:40:c3:30:4b:3f:6d:45:7d:0f:71:49:64:93:86:
         21:2b:6f:5e:98:e8:cf:64:b6:27:cd:21:89:27:aa:69:9f:a5:
         7a:0f:7a:3a:0b:79:6a:97:c6:28:63:4d:10:81:2e:5f:95:88:
         4d:b3:28:5a:04:3e:29:4b:68:48:13:42:0e:58:ed:2e:41:68:
         bd:21:ae:a0:61:4c:ec:04:65:25:34:fc:38:f3:4f:d7:2d:fd:
         38:41:25:b2:7f:24:b5:f5:fa:f0:90:d3:d3:7e:07:7f:4c:3a:
         97:83:e4:b4:a9:f1:15:b9:7b:4c:b8:4a:ad:dd:fa:18:7c:68:
         be:43:33:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----