Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5f8bbed3ccf927bf51f11e6c064be535eb8bea2b.roa
File:                     5f8bbed3ccf927bf51f11e6c064be535eb8bea2b.roa (raw, json)
Hash identifier:          q1MGwoqI7/BtBWsvyin1fdphNi7t1Q6IBZ+M/tJLGws=
Subject key identifier:   90:82:98:17:12:39:96:11:6F:FF:C8:C7:1A:4D:37:FF:41:BC:F4:65
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0CF1A4
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5f8bbed3ccf927bf51f11e6c064be535eb8bea2b.roa
Signing time:             Tue 13 Sep 2022 04:44:26 +0000
ROA not before:           Tue 13 Sep 2022 03:00:00 +0000
ROA not after:            Wed 13 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848292 (0xcf1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep 13 03:00:00 2022 GMT
            Not After : Sep 13 03:00:00 2023 GMT
        Subject: CN=5f8bbed3ccf927bf51f11e6c064be535eb8bea2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:89:20:02:b0:3c:f5:ca:1a:cd:eb:c4:72:bb:
                    e5:22:37:b1:26:e9:77:91:89:07:9e:5d:36:aa:e2:
                    e3:08:cd:fb:69:41:7d:1c:60:e4:e8:a0:05:52:cc:
                    5a:42:dc:cd:88:76:0c:d4:55:01:c5:a8:cd:0e:01:
                    6d:af:98:7f:32:67:6c:d9:76:e1:68:0c:e4:b7:c2:
                    b7:bb:31:16:4c:fc:87:fa:03:5c:a5:a3:c6:5d:d9:
                    21:bd:86:16:66:27:df:bb:4e:bf:81:a6:5a:6e:d7:
                    d8:14:68:b6:9f:d4:e8:a3:ec:5a:0a:69:54:40:0a:
                    d1:07:88:63:16:a0:eb:60:60:b3:28:d2:fe:1f:c9:
                    5a:21:20:71:92:70:d4:41:4b:6c:a4:d4:f4:29:8d:
                    ca:f2:53:49:df:f0:87:95:21:9c:9d:c0:52:2e:96:
                    a3:c9:4d:1d:44:b6:dd:77:96:7a:0e:13:7c:de:9c:
                    ed:32:de:5a:aa:24:67:ca:74:33:25:24:89:b4:d5:
                    c0:c6:0a:89:91:5c:39:cd:ce:c0:4c:b7:cc:45:b5:
                    2e:0a:dc:55:7a:51:44:22:b2:c8:f5:f1:df:35:19:
                    28:63:1c:5e:b6:91:c7:d9:bb:0a:f3:ee:02:15:5b:
                    4f:af:67:81:62:29:1c:23:6a:11:99:b2:ae:d9:de:
                    06:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:82:98:17:12:39:96:11:6F:FF:C8:C7:1A:4D:37:FF:41:BC:F4:65
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/5f8bbed3ccf927bf51f11e6c064be535eb8bea2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:32:e7:6f:02:a6:ec:3c:c7:2f:1e:a5:7b:1b:21:5a:85:78:
         cb:f0:1a:80:68:b2:57:86:05:a6:c4:bf:4c:50:3c:f0:07:66:
         27:13:19:fd:9f:4e:a0:1d:af:40:bd:43:1b:25:ac:fd:15:cc:
         7c:51:24:80:08:8b:80:ad:66:ee:f5:86:f9:22:3b:32:0a:cc:
         95:75:ca:9c:33:7d:38:c6:05:21:48:c2:ec:7d:1c:8d:9c:76:
         95:6d:6c:19:1b:1b:68:1e:d8:82:46:e8:15:c5:db:b6:47:8a:
         01:e4:59:65:43:8e:87:cf:8a:e6:72:7b:3a:92:4f:bf:7e:f6:
         c2:82:29:dd:1c:55:44:88:6c:74:58:9d:5b:f9:8e:23:7a:e6:
         cb:eb:c1:f0:ae:0c:84:5e:2e:55:64:bb:b4:68:08:ea:30:ca:
         2b:32:f8:6a:2b:00:0a:d1:c8:01:f1:05:3d:ab:5a:df:07:67:
         c2:5b:23:a9:2c:9d:0e:06:e9:1a:cc:89:ef:93:c3:2c:28:9a:
         2c:cc:f7:d8:4f:4d:b5:68:79:4c:42:b5:29:73:79:8e:56:d1:
         5e:34:ee:a9:08:55:af:e8:b9:e3:91:be:e6:60:d6:ca:6f:32:
         a9:72:2b:28:26:c7:0a:8a:36:e8:33:20:8c:bf:cf:14:99:a1:
         06:fa:f1:d4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDPGkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwOTEz
MDMwMDAwWhcNMjMwOTEzMDMwMDAwWjAzMTEwLwYDVQQDEyg1ZjhiYmVkM2NjZjky
N2JmNTFmMTFlNmMwNjRiZTUzNWViOGJlYTJiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi4kgArA89coazevEcrvlIjexJul3kYkHnl02quLjCM37aUF9
HGDk6KAFUsxaQtzNiHYM1FUBxajNDgFtr5h/Mmds2XbhaAzkt8K3uzEWTPyH+gNc
paPGXdkhvYYWZiffu06/gaZabtfYFGi2n9Too+xaCmlUQArRB4hjFqDrYGCzKNL+
H8laISBxknDUQUtspNT0KY3K8lNJ3/CHlSGcncBSLpajyU0dRLbdd5Z6DhN83pzt
Mt5aqiRnynQzJSSJtNXAxgqJkVw5zc7ATLfMRbUuCtxVelFEIrLI9fHfNRkoYxxe
tpHH2bsK8+4CFVtPr2eBYikcI2oRmbKu2d4G5QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFJCCmBcSOZYRb//IxxpNN/9BvPRlMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzVmOGJiZWQzY2NmOTI3YmY1MWYxMWU2YzA2NGJlNTM1ZWI4YmVhMmIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAcjLnbwKm7DzH
Lx6lexshWoV4y/AagGiyV4YFpsS/TFA88AdmJxMZ/Z9OoB2vQL1DGyWs/RXMfFEk
gAiLgK1m7vWG+SI7MgrMlXXKnDN9OMYFIUjC7H0cjZx2lW1sGRsbaB7YgkboFcXb
tkeKAeRZZUOOh8+K5nJ7OpJPv372woIp3RxVRIhsdFidW/mOI3rmy+vB8K4MhF4u
VWS7tGgI6jDKKzL4aisACtHIAfEFPata3wdnwlsjqSydDgbpGsyJ75PDLCiaLMz3
2E9NtWh5TEK1KXN5jlbRXjTuqQhVr+i545G+5mDWym8yqXIrKCbHCoo26DMgjL/P
FJmhBvrx1A==
-----END CERTIFICATE-----