Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/55d141a41e41ecfb8d00f81ddd4347a4caee9c88.roa
File:                     55d141a41e41ecfb8d00f81ddd4347a4caee9c88.roa (raw, json)
Hash identifier:          TqH+hBsxw0p9cdpVBkipd2Z8nR/p72hDxoIFCU0TlEc=
Subject key identifier:   4F:75:BA:FA:B7:79:EA:36:D9:93:D7:A3:77:23:B6:05:36:93:22:AF
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0AB190
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/55d141a41e41ecfb8d00f81ddd4347a4caee9c88.roa
Signing time:             Tue 26 Jul 2022 05:33:19 +0000
ROA not before:           Tue 26 Jul 2022 03:00:00 +0000
ROA not after:            Wed 26 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700816 (0xab190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 26 03:00:00 2022 GMT
            Not After : Jul 26 03:00:00 2023 GMT
        Subject: CN=55d141a41e41ecfb8d00f81ddd4347a4caee9c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c9:66:bf:c8:33:7f:8d:6c:56:50:fc:b4:4c:
                    71:ea:bf:be:81:d7:7c:a8:96:9c:b4:47:c2:6c:f2:
                    d8:21:27:a2:f7:69:0e:7d:27:ff:08:38:01:90:c3:
                    6a:ca:f5:ac:0a:dc:e9:0e:b5:2a:6e:08:2f:39:00:
                    1a:69:67:83:63:d3:f2:13:07:a2:b9:8e:aa:7c:ef:
                    1a:6f:f2:ed:2d:80:3d:33:bc:14:ed:f0:4a:31:a7:
                    df:59:d8:d0:7c:d5:d7:97:63:a0:bf:1e:04:eb:a1:
                    4d:f5:1d:de:dc:b3:ab:c0:d1:91:03:0a:51:02:ad:
                    dc:80:87:07:80:a1:41:46:aa:a9:89:90:61:a2:5d:
                    a4:b8:0d:de:01:c1:53:ef:1a:34:1e:ba:57:7e:4a:
                    0d:b5:52:50:e2:d7:1c:ed:83:b0:32:12:b0:a3:42:
                    fc:32:a9:c8:da:ce:fe:33:5a:0e:4b:6b:45:64:3e:
                    cc:75:54:85:95:8c:72:29:49:03:5d:13:5b:27:6d:
                    b4:f9:39:98:bf:df:2c:37:93:b1:45:91:ea:f9:15:
                    f1:96:9f:94:a1:c6:2f:7f:75:e1:6e:a9:df:1e:2c:
                    61:85:6e:cb:99:15:6b:fc:08:f1:cc:6d:ee:4b:41:
                    ae:e8:df:a2:bc:b8:9c:1d:e3:6a:e6:be:47:cb:c3:
                    d7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:75:BA:FA:B7:79:EA:36:D9:93:D7:A3:77:23:B6:05:36:93:22:AF
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/55d141a41e41ecfb8d00f81ddd4347a4caee9c88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:24:88:3d:75:a0:f4:17:3f:66:1d:74:7a:68:31:ae:c3:ca:
         9b:f6:0a:11:c4:e4:b5:02:c3:b5:e4:26:4a:d7:41:48:2f:f5:
         03:d6:e6:73:21:2e:a1:ea:6c:08:cf:40:07:9f:45:1f:c4:51:
         9e:2e:77:21:3d:5a:7c:64:54:52:40:22:97:0e:bb:1d:85:9d:
         ab:6e:ea:ed:a5:ce:1a:01:12:59:7d:b9:cc:c3:9c:04:3e:2d:
         23:09:f6:81:a8:a1:7b:78:fb:17:00:fa:57:59:70:41:50:12:
         12:fd:50:a8:f6:3d:96:a4:54:1b:06:a8:79:16:94:28:97:62:
         10:ec:50:4f:9a:44:27:81:f1:33:9b:b4:b1:13:ec:d1:94:21:
         5f:ed:e7:c6:02:29:c4:96:d6:d5:4c:79:55:1f:ec:c9:d0:ef:
         ab:05:6c:57:51:1f:cd:ec:ee:8d:c2:ce:ac:7e:cb:e4:77:7f:
         52:93:04:75:1c:8b:97:42:70:cb:a1:52:c1:88:54:37:f8:0c:
         d0:54:5c:c2:7b:31:a4:b2:8f:01:1e:35:83:74:78:fb:b9:32:
         74:15:db:6c:8a:80:a1:b3:e4:e4:75:bb:52:e1:14:4b:53:f8:
         83:ce:53:08:1a:bc:b0:59:7f:94:1e:1a:61:d5:5a:c5:a9:2e:
         e1:fd:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----