Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/692235ffbf8e300f1f5cc4a2499689ee561c253b.roa
File:                     692235ffbf8e300f1f5cc4a2499689ee561c253b.roa (raw, json)
Hash identifier:          8qivo32jL6GmPyXd1A6rK17GRK8UCiWbmQ9ykB6kgpQ=
Subject key identifier:   7B:A2:95:65:5C:D7:E3:A9:AF:90:82:DA:C7:29:B9:BB:99:0F:A6:96
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0EF2BB
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/692235ffbf8e300f1f5cc4a2499689ee561c253b.roa
Signing time:             Wed 26 Oct 2022 03:09:35 +0000
ROA not before:           Tue 25 Oct 2022 03:00:00 +0000
ROA not after:            Thu 26 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 979643 (0xef2bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 25 03:00:00 2022 GMT
            Not After : Oct 26 03:00:00 2023 GMT
        Subject: CN=692235ffbf8e300f1f5cc4a2499689ee561c253b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:93:90:8e:ae:b3:7f:3d:a1:97:48:d2:a8:
                    d3:14:34:94:bc:00:c8:6a:1d:fa:f6:91:a2:0f:96:
                    67:c5:51:b1:c4:3a:fc:52:7d:fb:07:31:45:7a:ee:
                    c5:80:8b:df:26:cf:48:77:3c:84:6f:38:aa:e9:6a:
                    ed:3f:6d:eb:fb:eb:ec:4f:2d:89:b1:f6:d4:c1:04:
                    3f:aa:c0:94:b7:44:ae:50:fd:06:81:a0:bb:c8:63:
                    25:e6:f6:20:84:d5:15:20:db:7b:4c:4f:3c:01:57:
                    cf:d6:ee:b1:c1:45:e7:9c:01:40:fb:c6:cb:da:0c:
                    7f:bd:9a:ee:f1:9a:1c:4c:90:43:45:6d:ac:c9:22:
                    13:81:1d:f4:10:ff:08:2a:e6:35:9b:a4:ac:c6:10:
                    57:18:dc:f4:e9:75:74:17:df:f6:da:f3:33:51:98:
                    bd:2d:71:f1:19:56:86:d4:91:e9:a2:c2:c5:65:5b:
                    d9:5c:e4:31:79:86:73:22:38:43:6d:bd:de:4e:47:
                    63:d9:dd:7e:eb:58:c2:73:16:a6:33:6b:03:c6:ad:
                    11:d5:3b:d3:78:12:78:5b:28:51:f9:c8:8f:6c:1f:
                    88:ca:16:8a:fc:2f:d7:ab:2c:a3:78:05:99:47:c3:
                    fd:7e:e2:e7:ed:50:f3:36:02:6d:74:45:c7:b9:f5:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A2:95:65:5C:D7:E3:A9:AF:90:82:DA:C7:29:B9:BB:99:0F:A6:96
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/692235ffbf8e300f1f5cc4a2499689ee561c253b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:ce:83:a3:79:7c:30:93:70:7d:3d:50:a0:1e:18:62:cf:a2:
         94:4b:ea:f2:f3:87:99:0d:05:c8:17:e6:5b:f5:cb:01:8d:8f:
         b1:d7:c5:37:49:95:22:87:8d:1f:f9:8f:c2:56:b8:74:d3:4a:
         54:e2:1a:a0:50:dd:74:d7:1c:5b:d7:cc:73:d6:3d:63:10:b0:
         a6:47:c0:cd:08:ca:e7:e1:e0:7b:ea:20:23:de:8e:14:d5:3a:
         62:95:5b:98:5f:1f:1c:38:40:db:b0:88:0f:b1:57:e1:0b:c1:
         4e:3c:4c:92:da:e8:94:e5:bf:49:fb:18:ba:9d:41:18:86:10:
         c5:6c:72:50:1e:7a:2c:22:04:13:7f:4a:0e:9a:a8:ff:28:2b:
         f2:93:44:7d:80:41:2d:d5:45:c0:41:71:f4:5f:a6:25:1a:3b:
         1d:3a:fa:39:45:4f:38:0e:6b:a4:5f:bc:82:10:64:0c:7b:7c:
         1a:f0:16:d2:ee:a4:0f:25:9b:60:2b:77:9d:ed:2b:ae:f2:fb:
         d5:77:ad:f7:18:47:65:34:aa:1d:58:cf:ec:8f:18:0a:38:33:
         ac:cb:44:3b:99:57:04:cf:e4:fe:fe:3d:13:5a:5a:1d:24:1e:
         55:69:f3:d4:a3:b3:13:a4:5a:69:ff:fc:78:f3:0e:0f:4e:d8:
         fd:19:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----