Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/62af324c0692e51089e83eac5b2e61420b89aeaa.roa
File:                     62af324c0692e51089e83eac5b2e61420b89aeaa.roa (raw, json)
Hash identifier:          6Ab8kq+liz/umpY71O5eJZgduZ5RgoC0TJroJWLKuXs=
Subject key identifier:   E2:7E:35:C0:93:97:76:56:C5:FB:A6:5D:2B:B4:EE:FB:68:FD:B6:5A
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       066601
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/62af324c0692e51089e83eac5b2e61420b89aeaa.roa
Signing time:             Tue 19 Apr 2022 07:09:30 +0000
ROA not before:           Tue 19 Apr 2022 03:00:00 +0000
ROA not after:            Wed 19 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419329 (0x66601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr 19 03:00:00 2022 GMT
            Not After : Apr 19 03:00:00 2023 GMT
        Subject: CN=62af324c0692e51089e83eac5b2e61420b89aeaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:c8:c8:f2:3c:d4:09:d7:8e:85:c6:7b:2e:
                    45:82:57:bd:b3:4d:89:b8:f5:a3:17:6f:29:59:73:
                    5a:8d:3c:79:55:b8:0e:80:4e:0f:c0:a3:b3:18:3c:
                    85:e8:cb:66:c7:bc:ca:c2:ee:1c:9f:28:10:35:a1:
                    d0:e4:41:ca:f5:1a:c8:3f:3b:77:08:bf:61:e3:25:
                    3e:47:de:9f:bf:c5:6a:f2:39:f0:3f:97:1f:fd:07:
                    b5:90:3a:c3:84:8d:6d:bd:4c:5f:94:09:6f:b0:62:
                    23:ae:96:c4:bf:5e:6f:c7:a7:4f:14:de:48:ff:13:
                    c2:58:82:3c:2c:b3:cf:08:1f:9f:0b:6d:53:e1:0f:
                    d0:a0:85:17:f3:b6:c2:e1:53:b4:f6:27:6c:fb:24:
                    ca:ef:36:b3:d8:60:a1:8d:59:06:af:f9:d2:6a:fb:
                    16:02:b5:76:8a:6a:e5:17:c2:52:6e:76:09:4b:9d:
                    72:6a:3b:37:4a:17:ac:18:92:ff:98:4a:af:36:60:
                    42:d4:f2:e1:66:1f:7e:19:d3:73:f8:be:1d:b9:08:
                    94:c7:e0:04:4e:8b:b0:81:27:12:8d:2d:42:3f:98:
                    d8:2c:83:1a:13:5b:74:65:69:73:44:42:8d:5a:c8:
                    93:91:01:e0:26:51:f7:14:89:55:20:1a:df:24:55:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7E:35:C0:93:97:76:56:C5:FB:A6:5D:2B:B4:EE:FB:68:FD:B6:5A
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/62af324c0692e51089e83eac5b2e61420b89aeaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:50:ea:e6:bd:43:ab:f9:30:2d:ea:5d:0f:58:c6:cf:a3:f2:
         c4:53:10:5b:21:3a:cf:c7:d4:a7:8d:b7:28:e0:40:c9:92:15:
         a1:12:18:27:31:f5:af:38:94:cf:2f:ee:4e:e9:92:50:81:52:
         c5:2a:40:72:b9:b5:99:09:a6:46:c8:5a:d7:80:c5:2b:30:df:
         51:e8:8a:73:d8:f4:dc:ec:b4:3f:74:2a:6f:ba:9c:9a:9d:13:
         78:68:79:c9:b6:ef:a1:d2:fc:6a:82:cd:6f:5c:4d:32:36:50:
         77:15:c1:53:9c:a5:21:b8:ee:31:8d:f4:05:05:eb:0f:e5:ee:
         b0:4b:7d:2d:f4:f8:22:f8:9b:7b:50:67:40:fa:23:80:f0:85:
         1e:f7:46:03:f1:b1:96:98:51:ff:20:e3:57:5b:8f:2d:6a:2a:
         ed:b2:83:00:27:8f:d5:b9:44:20:ff:f5:10:4d:98:17:fd:43:
         9e:1a:6d:ba:19:aa:22:b7:6e:9f:5e:a0:6a:04:18:f6:4a:80:
         5f:a2:b7:a6:21:6b:cb:d2:b5:fb:a7:e9:2c:fe:01:d8:dd:f9:
         9d:64:a2:8d:e6:44:9d:e1:f9:5e:10:b5:1d:31:a6:35:88:a4:
         3a:16:e6:aa:b1:bb:66:5d:64:38:ed:f7:9d:71:47:37:8d:c5:
         71:76:c2:d5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBmYBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNDE5
MDMwMDAwWhcNMjMwNDE5MDMwMDAwWjAzMTEwLwYDVQQDEyg2MmFmMzI0YzA2OTJl
NTEwODllODNlYWM1YjJlNjE0MjBiODlhZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsXrIyPI81AnXjoXGey5Fgle9s02JuPWjF28pWXNajTx5VbgO
gE4PwKOzGDyF6Mtmx7zKwu4cnygQNaHQ5EHK9RrIPzt3CL9h4yU+R96fv8Vq8jnw
P5cf/Qe1kDrDhI1tvUxflAlvsGIjrpbEv15vx6dPFN5I/xPCWII8LLPPCB+fC21T
4Q/QoIUX87bC4VO09ids+yTK7zaz2GChjVkGr/nSavsWArV2imrlF8JSbnYJS51y
ajs3ShesGJL/mEqvNmBC1PLhZh9+GdNz+L4duQiUx+AETouwgScSjS1CP5jYLIMa
E1t0ZWlzREKNWsiTkQHgJlH3FIlVIBrfJFUUjwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFOJ+NcCTl3ZWxfumXSu07vto/bZaMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzYyYWYzMjRjMDY5MmU1MTA4OWU4M2VhYzViMmU2MTQyMGI4OWFlYWEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAOVDq5r1Dq/kw
LepdD1jGz6PyxFMQWyE6z8fUp423KOBAyZIVoRIYJzH1rziUzy/uTumSUIFSxSpA
crm1mQmmRsha14DFKzDfUeiKc9j03Oy0P3Qqb7qcmp0TeGh5ybbvodL8aoLNb1xN
MjZQdxXBU5ylIbjuMY30BQXrD+XusEt9LfT4Ivibe1BnQPojgPCFHvdGA/GxlphR
/yDjV1uPLWoq7bKDACeP1blEIP/1EE2YF/1DnhptuhmqIrdun16gagQY9kqAX6K3
piFry9K1+6fpLP4B2N35nWSijeZEneH5XhC1HTGmNYikOhbmqrG7Zl1kOO33nXFH
N43FcXbC1Q==
-----END CERTIFICATE-----