Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4feec47f7548dd6c66212b57fd381dd7a68c0518.roa
File:                     4feec47f7548dd6c66212b57fd381dd7a68c0518.roa (raw, json)
Hash identifier:          zzYPCTgA3YdqzQIKSzZ1CSHWdjJAfi8EdjwpnTqqe4I=
Subject key identifier:   9C:12:F4:19:99:DA:F6:E5:C7:6B:55:15:97:88:CD:69:1E:53:2B:97
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       094E72
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4feec47f7548dd6c66212b57fd381dd7a68c0518.roa
Signing time:             Thu 23 Jun 2022 02:19:00 +0000
ROA not before:           Thu 23 Jun 2022 03:00:00 +0000
ROA not after:            Fri 23 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609906 (0x94e72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 23 03:00:00 2022 GMT
            Not After : Jun 23 03:00:00 2023 GMT
        Subject: CN=4feec47f7548dd6c66212b57fd381dd7a68c0518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b3:b2:22:96:b4:c7:e0:75:26:c2:34:fe:19:
                    26:92:ea:52:9c:58:90:b3:1d:2c:06:a1:e2:72:a6:
                    ef:cc:eb:a6:2c:1e:81:d2:66:45:09:ab:09:ef:74:
                    d0:5e:2d:59:24:d9:e0:63:29:8b:89:6e:3a:ce:3e:
                    30:20:f5:45:8f:cd:7d:d6:c2:4e:22:aa:cd:6c:68:
                    29:87:d5:e5:4f:f2:07:85:40:52:7f:66:b6:90:6e:
                    61:53:04:47:c2:b6:1c:6a:0f:f8:f3:9a:d8:87:fd:
                    dc:99:46:bf:68:27:a8:fb:c5:ab:e7:49:01:02:19:
                    ac:97:73:59:21:03:10:00:88:b8:33:ac:2d:c5:f1:
                    2d:e6:e6:45:80:69:f0:f3:9b:02:25:67:19:c4:cc:
                    49:13:43:85:f0:05:6f:0e:a0:b5:9b:24:a2:61:94:
                    32:85:29:98:fe:ef:02:e5:53:f0:c6:bf:8b:75:a5:
                    a2:52:75:45:28:24:d3:10:76:b3:8f:4c:a9:64:89:
                    ce:12:6d:1a:97:e2:7b:ef:96:18:96:e9:7c:c8:01:
                    31:88:ba:aa:50:07:1b:b7:81:fa:ba:18:fe:a1:98:
                    44:4f:95:b1:04:f7:1d:32:0b:90:25:6e:de:a8:58:
                    10:01:27:e7:92:79:61:20:fc:34:2b:d8:95:21:19:
                    80:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:12:F4:19:99:DA:F6:E5:C7:6B:55:15:97:88:CD:69:1E:53:2B:97
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/4feec47f7548dd6c66212b57fd381dd7a68c0518.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:b4:c8:1f:f9:47:b7:c1:7e:9c:f8:3c:dd:f9:ac:14:85:95:
         8b:21:8b:a8:7c:65:d2:7e:77:0e:fd:db:3c:47:1f:0d:88:00:
         4b:b8:88:29:96:d2:e8:96:ec:ef:6f:81:35:5d:e6:ae:9f:c5:
         2a:ca:76:dc:94:83:ad:c4:90:2b:12:58:48:67:0a:aa:99:16:
         c1:26:84:27:ce:48:81:1f:8a:ed:54:4a:b5:3f:81:00:51:a0:
         24:1f:4c:8e:a6:3e:77:b2:d4:8f:47:e8:70:0b:d4:ba:44:e8:
         fe:26:dc:c6:87:7a:03:50:38:af:2e:35:15:79:75:ee:8e:4e:
         b3:b8:9a:72:91:f0:b2:a4:c1:86:d4:d3:00:98:21:7f:b7:33:
         c1:61:56:12:fa:ce:0a:29:f2:16:b8:22:62:b5:05:7d:20:5d:
         8b:52:46:e6:58:08:55:2d:26:47:0b:79:a1:68:4b:56:15:c1:
         aa:6f:82:42:81:58:ad:a2:74:c4:1f:42:13:d1:0d:bc:53:65:
         c2:79:77:ed:71:d1:a8:1b:d9:ff:c8:c6:7c:f2:2d:46:6f:56:
         72:f9:e2:dc:41:f9:8a:6c:09:cf:9d:be:fb:09:cb:6d:3c:55:
         b4:55:ef:1c:8f:9c:ca:ab:4e:aa:e6:8c:1b:62:3f:88:75:91:
         0b:19:0e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----