Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/69427b74d8a34edef23f37cbd8f162a14e56a8de.roa
File:                     69427b74d8a34edef23f37cbd8f162a14e56a8de.roa (raw, json)
Hash identifier:          bkIKaOH46Mb9pSlT8NStqNlHCxjQgmZ5V+TdLS7JavQ=
Subject key identifier:   3F:68:9C:C1:DF:24:89:E0:15:38:EF:8A:B6:48:33:DE:19:BA:66:33
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0C27FC
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/69427b74d8a34edef23f37cbd8f162a14e56a8de.roa
Signing time:             Sun 28 Aug 2022 00:16:56 +0000
ROA not before:           Sun 28 Aug 2022 03:00:00 +0000
ROA not after:            Mon 28 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796668 (0xc27fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug 28 03:00:00 2022 GMT
            Not After : Aug 28 03:00:00 2023 GMT
        Subject: CN=69427b74d8a34edef23f37cbd8f162a14e56a8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ed:96:1c:42:59:21:88:d1:1e:2f:f4:21:92:
                    1a:19:89:42:df:43:7d:fe:d6:5e:02:8d:10:cb:f0:
                    e9:c3:40:ff:71:fe:2a:59:d5:07:a3:c5:8c:7b:5b:
                    34:19:06:cb:d4:09:d6:9d:04:55:74:4a:8b:7f:0c:
                    64:90:9b:1b:d8:4b:80:33:99:d0:57:56:9d:53:9e:
                    33:ef:ed:56:34:86:2b:b0:39:58:0f:f7:73:93:1a:
                    93:90:19:33:85:e1:d9:9c:13:f6:d2:6d:10:eb:28:
                    c3:ac:02:ca:5d:ec:ba:58:05:28:ba:e8:2e:76:e1:
                    12:d4:09:8c:de:8e:96:1f:78:05:66:0d:93:22:e8:
                    d2:1c:e0:5b:77:8e:d3:0f:71:4a:8a:4f:07:ff:73:
                    b1:44:5d:bd:d3:b9:9c:b0:b2:61:b3:ae:90:52:54:
                    c0:8a:02:34:d0:c3:41:95:68:ea:f2:22:95:20:17:
                    c7:aa:d2:b1:c4:68:6f:42:2e:bd:74:8f:74:be:a1:
                    31:84:77:1b:b0:6c:40:b2:4e:7c:b0:cd:1b:64:4f:
                    87:ea:c5:ec:05:30:b8:7b:9a:9c:4f:3b:b6:97:66:
                    7f:aa:82:2d:d3:4e:51:ab:d9:67:8e:d6:6f:27:7e:
                    61:a4:66:b7:0c:8d:03:8d:fe:93:ba:a9:39:50:40:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:68:9C:C1:DF:24:89:E0:15:38:EF:8A:B6:48:33:DE:19:BA:66:33
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/69427b74d8a34edef23f37cbd8f162a14e56a8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:bf:e9:e1:c9:64:9a:7f:36:7f:4f:a9:43:98:24:05:c8:9e:
         61:64:00:02:25:ee:cb:04:8b:d0:5f:62:e9:c1:18:0c:2e:16:
         4b:98:1a:e6:49:c6:0a:86:ef:7b:b3:ae:36:1f:a5:76:6f:f5:
         03:88:5f:16:d5:ca:b0:42:76:aa:cf:31:67:56:a4:80:94:8b:
         77:18:9e:63:f8:41:e3:5b:87:95:7d:73:04:e4:28:50:63:95:
         73:be:d0:66:28:e1:1c:34:08:cf:6c:30:16:70:89:a8:a1:3e:
         8a:37:f7:33:94:14:97:57:c0:f8:aa:74:8b:7b:82:a8:76:f2:
         a5:1d:b5:2b:c6:05:a4:ba:72:84:46:9a:63:c2:da:ce:64:c7:
         68:9e:17:64:c8:dc:90:d8:de:3c:80:be:cd:62:fe:3f:ec:dd:
         08:36:cc:dd:9a:7d:15:5d:bb:d0:c1:ae:2c:59:8b:2b:d5:ec:
         4c:f5:d8:69:ab:62:b4:32:4d:4e:4d:58:72:8b:35:7a:60:45:
         fa:bc:5b:97:e6:53:67:9a:2a:f9:f9:97:8f:77:c0:9e:9a:0e:
         cc:8c:76:f4:01:d4:49:e4:dd:af:84:1f:9a:f5:5e:15:51:4c:
         4b:52:0e:4f:c8:68:e6:dd:00:d8:c8:e9:92:c8:03:af:06:c6:
         20:ed:d7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----