Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4eda3d60bf09dd66eb907197a3a704ef2cf5c394.roa
File:                     4eda3d60bf09dd66eb907197a3a704ef2cf5c394.roa (raw, json)
Hash identifier:          4esbAcocIILnKVoBx9Mv/c+Y2r+oFSuKQZCNtkiVGOs=
Subject key identifier:   A3:85:2C:0F:DB:CE:FB:24:74:59:F6:07:6A:76:C2:8D:27:E1:51:98
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0620DE
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4eda3d60bf09dd66eb907197a3a704ef2cf5c394.roa
Signing time:             Tue 12 Apr 2022 11:06:22 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Wed 12 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401630 (0x620de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2023 GMT
        Subject: CN=4eda3d60bf09dd66eb907197a3a704ef2cf5c394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:35:bd:27:cd:2f:00:ce:f6:e2:77:49:15:de:
                    45:b6:34:35:31:55:25:51:5c:59:92:39:b0:4a:5e:
                    14:da:a4:8b:59:80:f7:86:d0:d1:87:14:cd:70:de:
                    ea:29:c4:95:26:c5:75:a3:2f:19:7c:a7:c7:80:04:
                    c4:24:d3:4a:4e:30:9b:ee:e8:97:7c:b5:62:b3:77:
                    43:34:d0:73:43:b2:09:21:76:5c:d0:a1:28:03:9d:
                    c0:3c:97:31:bc:a8:f1:7c:0e:e3:47:98:4c:7f:e6:
                    f9:af:41:74:85:24:28:3e:e3:2b:5e:0a:68:40:23:
                    20:12:96:a4:77:cf:2d:f6:b3:e7:68:ac:99:61:43:
                    4e:8a:29:36:cc:26:70:72:66:1a:b2:46:d1:eb:c6:
                    44:30:e6:47:90:0f:61:00:44:fb:8f:97:01:72:74:
                    b3:89:1b:59:8a:1c:30:0d:e3:60:be:f5:b6:da:b9:
                    3b:13:5b:a5:3b:64:4b:fc:26:06:cc:97:cd:af:6f:
                    04:1e:d2:ce:27:b2:40:ca:e5:af:55:01:d7:d3:df:
                    4f:b1:88:fc:b7:db:ae:94:c6:a7:a9:c3:7e:09:81:
                    c1:6e:91:f5:42:16:a5:55:e5:e7:92:8a:c5:d6:bf:
                    09:c6:83:f6:9e:91:f3:99:b9:e7:70:9e:49:47:dc:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:85:2C:0F:DB:CE:FB:24:74:59:F6:07:6A:76:C2:8D:27:E1:51:98
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4eda3d60bf09dd66eb907197a3a704ef2cf5c394.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:f5:d7:73:92:86:30:95:47:60:2e:7f:b8:a1:0a:88:35:a4:
         8b:96:fb:16:4a:6f:b7:e7:5c:2f:2f:08:bb:db:07:a6:4f:18:
         06:a1:fd:81:c4:cc:4d:8b:28:6b:22:0f:e4:6b:c3:81:fc:3a:
         62:2b:a4:95:c6:c9:71:95:bc:8f:5b:06:12:66:52:b6:6c:73:
         c6:82:7c:1e:80:6c:3f:ce:eb:e1:3c:92:c5:73:bf:c0:cc:71:
         8e:53:01:23:d8:aa:98:97:7c:e3:16:d0:25:0c:73:c1:4d:d1:
         bd:ac:e7:55:26:ac:32:44:f3:6c:41:c4:35:90:14:90:df:55:
         e1:ba:01:03:fd:55:3c:bc:23:df:af:7c:e0:b2:f9:28:5d:e5:
         76:b1:12:25:00:8a:f1:3b:80:99:dd:91:ff:1d:30:d7:cb:21:
         05:41:f1:dc:78:52:eb:68:2f:da:7f:1a:36:ab:d3:0f:40:c8:
         e7:e9:af:88:47:62:bc:b0:3f:de:51:9b:7a:57:a0:75:1f:5b:
         66:69:4a:0c:37:89:36:11:a4:6d:2f:7d:fd:19:df:3e:be:37:
         4c:41:51:e2:20:c8:14:c1:47:24:a8:9a:6e:1b:ef:48:04:bf:
         51:4d:e0:9b:ca:d2:3c:8a:57:e1:92:af:da:8c:2b:79:60:63:
         35:22:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----