Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/61aa0ad7a6dc4e5e457dbb730af7bc7afc5ba98a.roa
File:                     61aa0ad7a6dc4e5e457dbb730af7bc7afc5ba98a.roa (raw, json)
Hash identifier:          f1LTbu+r/QQy4gsRgtB1nr8kOL/wFwyGoBH5aOW5tOE=
Subject key identifier:   A9:B6:0A:70:CD:41:26:9F:EE:17:88:7A:29:C1:C2:83:1D:CF:D0:FE
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0ECEE7
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/61aa0ad7a6dc4e5e457dbb730af7bc7afc5ba98a.roa
Signing time:             Sun 23 Oct 2022 05:06:14 +0000
ROA not before:           Sat 22 Oct 2022 03:00:00 +0000
ROA not after:            Mon 23 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970471 (0xecee7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 22 03:00:00 2022 GMT
            Not After : Oct 23 03:00:00 2023 GMT
        Subject: CN=61aa0ad7a6dc4e5e457dbb730af7bc7afc5ba98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:42:e5:35:11:42:e5:5e:52:ac:8a:81:f5:b7:
                    25:f3:9c:61:86:28:ee:09:65:aa:ed:12:03:19:10:
                    6c:c3:de:c8:2d:b0:43:8c:57:28:e0:5e:51:62:0c:
                    65:c4:43:95:0f:51:f8:d8:99:7f:b4:6c:c5:c2:33:
                    6c:fc:14:a9:70:7c:8a:be:f7:5a:76:86:c1:7f:bf:
                    72:2e:5f:d8:45:30:45:12:9f:52:36:3f:3b:d1:ea:
                    e9:46:86:d1:72:4f:4d:87:fb:32:68:71:9f:9f:03:
                    c0:f8:3e:4f:dd:b3:d3:b6:64:d1:ae:4d:cf:43:69:
                    bc:28:2c:d2:5f:3b:38:38:77:4d:3d:68:58:69:43:
                    db:8a:d1:3e:a7:aa:28:6f:ad:2f:66:a1:61:f2:b8:
                    04:2b:a5:a2:0f:d5:e1:37:c7:14:c4:d8:30:a0:94:
                    d9:b3:e5:30:a6:1b:45:6e:d4:29:ff:6f:76:57:3a:
                    a6:7a:66:03:3f:51:0c:d6:85:8c:6d:25:83:40:b0:
                    88:d3:8e:4b:03:74:41:bb:bd:1e:bb:3f:80:dd:bf:
                    b7:ff:20:a2:cf:3b:79:85:e8:af:98:2b:d8:e1:bf:
                    b8:f6:ad:42:b3:42:3b:3c:35:da:d5:f7:d2:56:33:
                    ed:1b:ef:8c:12:c0:c5:9e:d2:25:36:8d:88:82:a5:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:0A:70:CD:41:26:9F:EE:17:88:7A:29:C1:C2:83:1D:CF:D0:FE
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/61aa0ad7a6dc4e5e457dbb730af7bc7afc5ba98a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:ef:99:a8:71:c2:6e:bc:6a:3a:0c:e9:33:96:d0:87:78:aa:
         29:4b:90:b7:69:7e:8d:94:23:05:3c:23:d6:ff:38:67:5a:26:
         07:de:ea:d6:d2:5e:f5:40:43:83:e5:f2:bb:7c:5c:4e:eb:d9:
         d6:3d:c3:ce:d9:c4:10:1e:5d:84:8a:31:f4:43:55:26:2a:08:
         6c:46:ca:6f:6d:76:91:c5:39:f7:a8:5f:72:4a:82:cd:b1:45:
         67:60:98:b2:24:90:a5:83:71:2a:44:ea:05:ef:8f:10:6b:a3:
         09:0f:f7:98:a6:56:e6:12:94:0f:36:82:dc:8d:9d:2e:e5:bd:
         4c:8e:ec:af:41:0b:bf:8b:c1:31:6c:96:e7:73:18:83:a0:b2:
         9b:69:3f:57:93:a3:18:3f:9e:2f:47:de:9c:ff:21:ad:68:ec:
         39:cd:6a:db:6b:20:16:fa:cb:b6:29:9b:7f:72:20:6a:10:a6:
         d7:9b:c9:da:cd:b8:cc:00:d4:4f:71:7b:e5:f2:62:82:6a:88:
         f6:11:0c:68:99:1a:d9:27:73:80:9f:06:33:fb:c4:2f:d2:d4:
         15:00:9c:b1:4f:10:e7:cc:a4:b6:19:65:f4:a7:d6:ec:0b:f2:
         ae:54:b9:08:f0:98:c3:52:28:de:e2:1d:b0:92:6a:c2:91:0d:
         32:70:c1:00
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDs7nMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIxMDIy
MDMwMDAwWhcNMjMxMDIzMDMwMDAwWjAzMTEwLwYDVQQDEyg2MWFhMGFkN2E2ZGM0
ZTVlNDU3ZGJiNzMwYWY3YmM3YWZjNWJhOThhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA30LlNRFC5V5SrIqB9bcl85xhhijuCWWq7RIDGRBsw97ILbBD
jFco4F5RYgxlxEOVD1H42Jl/tGzFwjNs/BSpcHyKvvdadobBf79yLl/YRTBFEp9S
Nj870erpRobRck9Nh/syaHGfnwPA+D5P3bPTtmTRrk3PQ2m8KCzSXzs4OHdNPWhY
aUPbitE+p6oob60vZqFh8rgEK6WiD9XhN8cUxNgwoJTZs+UwphtFbtQp/292Vzqm
emYDP1EM1oWMbSWDQLCI045LA3RBu70euz+A3b+3/yCizzt5heivmCvY4b+49q1C
s0I7PDXa1ffSVjPtG++MEsDFntIlNo2IgqUV7QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFKm2CnDNQSaf7heIeinBwoMdz9D+MB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzYxYWEwYWQ3YTZkYzRlNWU0NTdkYmI3MzBhZjdiYzdhZmM1YmE5OGEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAQ++ZqHHCbrxq
OgzpM5bQh3iqKUuQt2l+jZQjBTwj1v84Z1omB97q1tJe9UBDg+Xyu3xcTuvZ1j3D
ztnEEB5dhIox9ENVJioIbEbKb212kcU596hfckqCzbFFZ2CYsiSQpYNxKkTqBe+P
EGujCQ/3mKZW5hKUDzaC3I2dLuW9TI7sr0ELv4vBMWyW53MYg6Cym2k/V5OjGD+e
L0fenP8hrWjsOc1q22sgFvrLtimbf3IgahCm15vJ2s24zADUT3F75fJigmqI9hEM
aJka2SdzgJ8GM/vEL9LUFQCcsU8Q58ykthll9KfW7AvyrlS5CPCYw1Io3uIdsJJq
wpENMnDBAA==
-----END CERTIFICATE-----