Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/6fa7cc04e0592bc35a17668ab056f1346667ef26.roa
File:                     6fa7cc04e0592bc35a17668ab056f1346667ef26.roa (raw, json)
Hash identifier:          XC+B/uteOJfP2vFA7+WNdKkx8Wl7F+AQQ+OAsuHss1Y=
Subject key identifier:   E5:D8:4D:34:91:4B:1E:28:A9:ED:F0:62:B3:1D:80:AD:12:0C:70:9E
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0EA21E
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/6fa7cc04e0592bc35a17668ab056f1346667ef26.roa
Signing time:             Wed 19 Oct 2022 00:05:01 +0000
ROA not before:           Tue 18 Oct 2022 03:00:00 +0000
ROA not after:            Thu 19 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959006 (0xea21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 18 03:00:00 2022 GMT
            Not After : Oct 19 03:00:00 2023 GMT
        Subject: CN=6fa7cc04e0592bc35a17668ab056f1346667ef26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:dc:df:50:0f:e2:3c:93:5e:6d:ac:9d:4f:03:
                    b0:e4:55:2d:0f:0e:1f:f6:ff:7a:14:35:3b:65:f9:
                    84:b8:f0:2b:fd:67:dd:77:2c:0a:8d:f8:87:13:24:
                    e9:4b:2f:9c:02:0d:ae:e7:0a:fd:7a:ea:5f:0b:1d:
                    45:d4:21:bf:90:7b:ab:c5:4c:88:12:c8:ab:f3:ad:
                    1b:f9:33:b4:60:e2:dd:21:3f:01:43:d0:cc:ca:ce:
                    2e:35:50:dd:2f:51:cb:a4:b4:4e:c2:11:a7:7a:9e:
                    d8:40:bb:f6:d3:dd:01:85:47:01:30:69:41:0b:a1:
                    a1:98:f5:3c:ad:23:6f:4a:84:8d:3e:72:19:81:44:
                    e3:49:66:ca:87:9e:d2:84:7f:24:8f:e0:29:88:90:
                    0b:77:6a:26:4c:dd:b6:55:b7:2d:bd:3e:c5:ea:8f:
                    84:eb:25:2e:63:85:ae:62:ca:98:b8:62:dc:f2:7e:
                    35:f5:25:6e:27:e5:b9:3b:73:7a:40:89:8e:3f:36:
                    5b:e0:5e:15:03:74:9f:04:08:a4:b5:79:bc:9c:8e:
                    74:83:05:f3:09:80:cb:ef:b3:ee:7e:b2:1a:1f:7f:
                    fd:0f:b5:81:2f:ae:0c:14:02:85:73:bd:94:6f:9d:
                    61:8f:dc:af:fd:2a:63:8b:ed:76:10:69:78:56:b9:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D8:4D:34:91:4B:1E:28:A9:ED:F0:62:B3:1D:80:AD:12:0C:70:9E
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/6fa7cc04e0592bc35a17668ab056f1346667ef26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:49:83:4f:09:cd:e1:57:11:32:95:b8:4a:c2:b8:7f:2f:
         30:a7:79:60:1e:a9:df:b3:e2:d2:99:aa:3e:77:53:18:8c:82:
         a1:7f:b8:f8:cc:b7:28:f1:6b:24:60:b1:de:c5:24:94:94:1b:
         40:ba:e2:71:16:29:5d:bf:e9:dc:ff:d7:f1:d6:de:08:ea:20:
         7a:19:8c:7b:ce:3b:07:36:30:2f:d7:68:cc:a2:31:4f:12:2a:
         ff:76:25:8b:cb:f6:b9:3d:14:d3:d3:1a:b9:5f:54:ee:fc:c4:
         af:7d:78:9a:e4:8d:0b:80:ef:37:a9:f9:a6:bb:40:05:04:a7:
         60:bb:d0:cb:33:f2:53:fd:85:a8:57:12:73:ca:90:c7:53:49:
         6f:20:2f:3a:27:f0:87:62:7b:d2:8a:a0:92:7d:d0:ba:9f:86:
         86:b3:b8:ef:81:29:6d:4e:56:45:f2:6b:a5:97:7a:95:ed:e0:
         9e:34:9a:20:bf:18:12:c7:b8:76:63:34:86:4b:b5:4f:88:9a:
         30:06:c4:01:4a:4b:de:e5:92:26:f0:32:e3:c1:de:db:46:d9:
         0c:e8:18:8a:e2:f3:48:88:7e:f9:62:c7:c6:8a:9e:e4:b6:2d:
         d5:b9:d9:29:47:84:64:06:2e:a9:ff:2e:ef:1a:77:36:30:7d:
         ee:b5:81:a3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDqIeMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIxMDE4
MDMwMDAwWhcNMjMxMDE5MDMwMDAwWjAzMTEwLwYDVQQDEyg2ZmE3Y2MwNGUwNTky
YmMzNWExNzY2OGFiMDU2ZjEzNDY2NjdlZjI2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArdzfUA/iPJNebaydTwOw5FUtDw4f9v96FDU7ZfmEuPAr/Wfd
dywKjfiHEyTpSy+cAg2u5wr9eupfCx1F1CG/kHurxUyIEsir860b+TO0YOLdIT8B
Q9DMys4uNVDdL1HLpLROwhGnep7YQLv2090BhUcBMGlBC6GhmPU8rSNvSoSNPnIZ
gUTjSWbKh57ShH8kj+ApiJALd2omTN22VbctvT7F6o+E6yUuY4WuYsqYuGLc8n41
9SVuJ+W5O3N6QImOPzZb4F4VA3SfBAiktXm8nI50gwXzCYDL77PufrIaH3/9D7WB
L64MFAKFc72Ub51hj9yv/Spji+12EGl4Vrm57QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFOXYTTSRSx4oqe3wYrMdgK0SDHCeMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzZmYTdjYzA0ZTA1OTJiYzM1YTE3NjY4YWIwNTZmMTM0NjY2N2VmMjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAb3FJg08JzeFX
ETKVuErCuH8vMKd5YB6p37Pi0pmqPndTGIyCoX+4+My3KPFrJGCx3sUklJQbQLri
cRYpXb/p3P/X8dbeCOogehmMe847BzYwL9dozKIxTxIq/3Yli8v2uT0U09MauV9U
7vzEr314muSNC4DvN6n5prtABQSnYLvQyzPyU/2FqFcSc8qQx1NJbyAvOifwh2J7
0oqgkn3Qup+GhrO474EpbU5WRfJrpZd6le3gnjSaIL8YEse4dmM0hku1T4iaMAbE
AUpL3uWSJvAy48He20bZDOgYiuLzSIh++WLHxoqe5LYt1bnZKUeEZAYuqf8u7xp3
NjB97rWBow==
-----END CERTIFICATE-----