Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/53e7abc37a0053975f4395466b5d9eac17588016.roa
File:                     53e7abc37a0053975f4395466b5d9eac17588016.roa (raw, json)
Hash identifier:          ntjLqnR8AeC9qCvnWtNjq52vjgeVVoTMLvtvflP44C8=
Subject key identifier:   B4:CE:6D:AC:74:B2:49:96:BA:65:B0:F6:C3:72:D1:C1:87:5C:8A:10
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0C7609
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/53e7abc37a0053975f4395466b5d9eac17588016.roa
Signing time:             Sun 04 Sep 2022 01:29:45 +0000
ROA not before:           Sun 04 Sep 2022 03:00:00 +0000
ROA not after:            Mon 04 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 816649 (0xc7609)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep  4 03:00:00 2022 GMT
            Not After : Sep  4 03:00:00 2023 GMT
        Subject: CN=53e7abc37a0053975f4395466b5d9eac17588016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:c2:42:10:d4:f4:90:f6:f7:d4:4b:52:38:
                    c6:da:b6:af:84:b9:6e:11:f3:e2:19:11:94:ac:27:
                    ea:b0:92:c5:26:02:93:12:b7:36:f9:a6:c1:13:22:
                    2e:de:de:a7:55:4a:f6:13:f0:b2:9a:a5:c0:15:09:
                    bb:e1:47:cd:1b:e8:d0:ae:ee:77:da:b7:20:0f:b7:
                    c5:8e:3d:be:3e:9a:9b:8b:f5:df:13:ea:8e:00:f9:
                    95:9f:f5:99:bd:38:4f:9a:b7:78:4a:19:ef:fa:8a:
                    c4:e2:35:a0:81:6d:0a:f7:b6:2c:43:f0:0b:34:44:
                    5c:04:e2:ee:7d:54:f0:b0:5c:3f:bc:fc:1e:0a:3c:
                    ac:e2:ba:39:02:5e:16:49:18:56:be:75:2d:da:87:
                    2c:e9:34:8a:03:3d:31:ad:cf:bf:9f:3b:ef:13:80:
                    ed:98:5b:de:77:d8:64:73:85:25:a6:13:6e:c2:84:
                    70:86:7a:48:f1:b0:58:1d:e8:a4:88:6a:ca:ba:fb:
                    27:8c:2d:89:af:36:ab:0a:d1:dd:4c:0c:2a:6f:cc:
                    96:a2:84:fa:3b:ba:c2:7d:44:32:3c:e0:05:b9:f0:
                    8b:42:13:2c:4b:2e:75:4c:c4:76:ae:ba:32:e7:81:
                    53:f0:cf:e4:68:61:e4:d3:66:fc:40:70:00:e4:c4:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:CE:6D:AC:74:B2:49:96:BA:65:B0:F6:C3:72:D1:C1:87:5C:8A:10
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/53e7abc37a0053975f4395466b5d9eac17588016.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:5b:fb:44:e4:45:18:72:d2:19:1e:cb:e3:42:b6:b0:4f:
         7a:5b:5c:64:a2:45:2e:55:53:54:95:59:e4:c1:90:86:44:0c:
         12:e9:80:2d:8e:16:9e:1e:4b:4d:f8:65:e9:ea:08:4a:50:a7:
         d7:4a:67:67:96:41:1e:e9:76:7a:2f:37:ed:91:54:07:19:c3:
         4a:2f:a3:0f:bd:a3:91:3b:16:13:2c:78:9b:61:36:23:ca:23:
         1d:08:14:57:3b:fa:48:2a:65:f8:bb:ec:36:9f:6c:d9:2c:5a:
         bb:94:62:a2:46:bc:3e:75:1c:9d:d8:07:b3:f4:0a:3a:76:a7:
         0e:27:45:d5:b5:87:b9:ce:e7:88:2b:cc:22:1b:df:16:20:8d:
         12:52:aa:9a:f0:e8:d0:d2:0a:bd:08:84:29:7d:c4:6b:73:24:
         0c:64:14:0b:2b:c6:7f:c3:7c:a9:89:a7:df:21:8b:2f:e7:c0:
         db:a7:3f:7c:d4:c4:69:40:51:52:e8:f2:c6:32:72:7f:28:89:
         dd:e4:1a:07:98:c8:37:73:9e:55:a8:7e:0c:6c:f6:1b:90:36:
         c8:d0:69:5e:ea:61:34:2d:ae:2d:f9:36:db:44:bb:f1:24:86:
         55:81:b4:92:5a:d3:08:a5:96:0b:3c:8b:59:15:f8:66:50:64:
         c7:27:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----