Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5ad152ef126bc55a3766c73101ade00d9abfbc62.roa
File:                     5ad152ef126bc55a3766c73101ade00d9abfbc62.roa (raw, json)
Hash identifier:          FNOblX2EftfyHttMO5kHSN3MBthZ64jO1QsBxP20cC0=
Subject key identifier:   5D:42:98:01:52:72:87:79:32:66:2C:AB:1E:5D:5C:4C:A1:81:9A:6D
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       07EAC0
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5ad152ef126bc55a3766c73101ade00d9abfbc62.roa
Signing time:             Sat 21 May 2022 01:11:11 +0000
ROA not before:           Sat 21 May 2022 03:00:00 +0000
ROA not after:            Sun 21 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518848 (0x7eac0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 21 03:00:00 2022 GMT
            Not After : May 21 03:00:00 2023 GMT
        Subject: CN=5ad152ef126bc55a3766c73101ade00d9abfbc62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:18:cb:95:4d:9f:4c:0e:5e:8f:4b:d3:1f:8b:
                    c6:1c:ad:a3:45:88:0d:5a:37:61:50:e2:83:f4:72:
                    99:fb:a8:48:4d:a5:e3:11:43:3f:56:d9:5e:6f:fd:
                    5f:51:d5:f5:22:c1:ac:cd:1c:67:70:c4:b5:57:49:
                    47:16:aa:95:ce:c7:bc:e6:bd:69:64:7d:cb:b9:34:
                    3b:b4:1e:fd:27:9e:af:53:6e:3d:b7:3d:2f:6b:bb:
                    87:bf:ba:58:15:66:40:6e:16:83:96:4e:92:b9:91:
                    46:75:8c:ad:0a:fb:95:c8:bf:96:5a:0c:cc:be:a3:
                    39:e0:7e:e6:80:f8:d1:eb:2f:36:a0:3d:e5:3f:a2:
                    8b:21:f0:7f:34:74:11:ed:38:df:48:ae:6c:6b:49:
                    15:7c:f8:55:0e:cf:6e:a9:37:b8:4d:9e:d5:89:e2:
                    6e:82:30:26:6f:4d:b7:21:8f:3e:02:19:5b:81:42:
                    89:ad:04:f6:f9:73:8c:8e:2b:4e:f9:39:17:00:c9:
                    79:43:7c:06:4d:36:d3:99:c8:e5:5d:09:17:fe:d2:
                    14:7c:4d:f9:0f:52:56:d1:c3:31:36:30:a2:b0:6c:
                    2e:81:3e:64:0f:bd:61:e8:6a:9d:e1:bb:fe:9e:e5:
                    6f:18:3e:40:56:7f:6e:5f:44:99:1e:db:c2:26:16:
                    cc:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:42:98:01:52:72:87:79:32:66:2C:AB:1E:5D:5C:4C:A1:81:9A:6D
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5ad152ef126bc55a3766c73101ade00d9abfbc62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:5b:c2:2b:74:e0:36:86:fe:77:b4:f2:83:e7:96:51:6f:91:
         2a:f5:09:3b:88:03:81:11:e6:0e:a9:b6:00:24:ca:a5:83:12:
         a0:cc:77:1b:74:da:ed:54:49:58:f9:ec:71:1f:0e:ca:c6:e0:
         4b:6c:66:5a:27:09:c1:77:65:d7:31:c3:6c:d1:72:a8:1f:22:
         67:cb:6f:f2:98:6b:55:66:38:7e:fa:cd:38:53:da:6e:e0:3d:
         1c:23:fd:d2:71:c1:a3:25:50:62:11:75:ad:c5:bf:f9:9e:88:
         54:56:6e:83:50:e3:64:ea:63:cf:59:32:3b:bb:c2:33:50:d1:
         05:bd:7a:77:59:e3:83:9f:29:f0:0e:dc:37:13:b6:80:86:e2:
         a0:5e:60:6f:19:89:93:4b:a6:05:85:4c:4d:3d:76:06:08:4f:
         9f:cb:3c:d3:d6:ca:4c:f4:2f:8b:6b:17:39:ff:45:4a:2f:c5:
         a0:76:bb:11:4b:a6:94:5e:09:71:d5:3f:01:88:ab:62:27:78:
         9b:f5:6d:0b:e9:24:54:be:b4:c3:78:52:bb:5a:8c:ca:e1:c3:
         61:b2:b4:c0:bb:93:51:a9:17:f9:5c:01:df:b9:46:10:00:54:
         30:e7:5f:ef:12:ad:e6:08:7b:da:21:46:55:7c:e8:33:5c:00:
         47:61:56:5d
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDB+rAMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNTIx
MDMwMDAwWhcNMjMwNTIxMDMwMDAwWjAzMTEwLwYDVQQDEyg1YWQxNTJlZjEyNmJj
NTVhMzc2NmM3MzEwMWFkZTAwZDlhYmZiYzYyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkRjLlU2fTA5ej0vTH4vGHK2jRYgNWjdhUOKD9HKZ+6hITaXj
EUM/Vtleb/1fUdX1IsGszRxncMS1V0lHFqqVzse85r1pZH3LuTQ7tB79J56vU249
tz0va7uHv7pYFWZAbhaDlk6SuZFGdYytCvuVyL+WWgzMvqM54H7mgPjR6y82oD3l
P6KLIfB/NHQR7TjfSK5sa0kVfPhVDs9uqTe4TZ7VieJugjAmb023IY8+AhlbgUKJ
rQT2+XOMjitO+TkXAMl5Q3wGTTbTmcjlXQkX/tIUfE35D1JW0cMxNjCisGwugT5k
D71h6Gqd4bv+nuVvGD5AVn9uX0SZHtvCJhbMhQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFF1CmAFScod5MmYsqx5dXEyhgZptMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzVhZDE1MmVmMTI2YmM1NWEzNzY2YzczMTAxYWRlMDBkOWFiZmJjNjIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAdlvCK3TgNob+
d7Tyg+eWUW+RKvUJO4gDgRHmDqm2ACTKpYMSoMx3G3Ta7VRJWPnscR8OysbgS2xm
WicJwXdl1zHDbNFyqB8iZ8tv8phrVWY4fvrNOFPabuA9HCP90nHBoyVQYhF1rcW/
+Z6IVFZug1DjZOpjz1kyO7vCM1DRBb16d1njg58p8A7cNxO2gIbioF5gbxmJk0um
BYVMTT12BghPn8s809bKTPQvi2sXOf9FSi/FoHa7EUumlF4JcdU/AYirYid4m/Vt
C+kkVL60w3hSu1qMyuHDYbK0wLuTUakX+VwB37lGEABUMOdf7xKt5gh72iFGVXzo
M1wAR2FWXQ==
-----END CERTIFICATE-----