Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/6fb097d0ff7d046bc6a634a99586ff4a56d5a79a.roa
File:                     6fb097d0ff7d046bc6a634a99586ff4a56d5a79a.roa (raw, json)
Hash identifier:          mii9BsEKqLtdqH4UnyslYrq60hwVkvz8K4ngoAv9GUI=
Subject key identifier:   17:F9:BA:7E:AF:50:F0:5B:6C:62:65:EF:42:47:42:C9:F3:43:E4:1F
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       05DECF
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/6fb097d0ff7d046bc6a634a99586ff4a56d5a79a.roa
Signing time:             Thu 07 Apr 2022 04:18:11 +0000
ROA not before:           Thu 07 Apr 2022 03:00:00 +0000
ROA not after:            Fri 07 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384719 (0x5decf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr  7 03:00:00 2022 GMT
            Not After : Apr  7 03:00:00 2023 GMT
        Subject: CN=6fb097d0ff7d046bc6a634a99586ff4a56d5a79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:91:74:db:68:28:70:0f:4a:71:b5:aa:68:7b:
                    df:2f:fa:cf:56:34:6d:24:2b:ca:23:d5:43:4a:a1:
                    9f:44:63:c4:9a:e2:97:fc:31:0b:34:d8:6d:e8:95:
                    21:02:9c:23:d0:4c:30:22:ec:9e:36:63:f7:41:c8:
                    67:12:59:bb:16:59:1c:f4:0a:d1:c6:76:19:94:b9:
                    95:bf:b9:58:49:f1:00:2f:d3:6b:72:f1:7b:5b:a0:
                    0c:7c:4a:1e:45:d4:07:17:21:73:d6:02:95:29:5e:
                    2c:48:e0:cb:a0:6e:db:16:77:93:d3:49:db:a8:96:
                    aa:72:df:4e:d9:a4:78:96:9c:d0:8c:8f:16:e2:a0:
                    13:1e:f7:6f:e8:b7:f4:a5:88:32:e4:6f:fc:be:1b:
                    9c:41:45:2f:d7:0a:96:4c:2f:10:66:42:b6:5d:5a:
                    66:14:e3:0b:b4:b8:e6:9b:b0:a0:d5:4f:bf:bd:8d:
                    ac:22:59:7f:ed:d5:6b:71:35:2d:fb:6d:5c:a2:78:
                    82:f3:09:85:a3:ba:ee:81:8f:58:2b:92:37:3f:1d:
                    8a:c5:8b:af:65:40:b2:9c:10:3c:b6:c8:e9:38:6b:
                    bd:2e:97:28:e6:13:6b:c7:44:e6:52:8c:38:05:41:
                    e5:74:a5:fd:d6:37:8f:10:38:66:45:f3:2d:f9:48:
                    7a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F9:BA:7E:AF:50:F0:5B:6C:62:65:EF:42:47:42:C9:F3:43:E4:1F
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/6fb097d0ff7d046bc6a634a99586ff4a56d5a79a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:0d:b3:37:52:a6:af:44:f1:80:7d:28:c2:1d:e6:0e:ac:c7:
         aa:2e:dc:8a:ff:e2:72:6a:30:c0:56:ce:4e:14:1b:8d:66:24:
         7d:4f:59:a7:5e:67:ac:75:56:67:08:ff:c3:4d:59:30:99:0a:
         96:16:05:97:a6:d2:c4:61:f5:f4:d4:d1:bc:1a:fb:86:85:24:
         78:55:88:29:09:55:4e:f1:36:5f:00:74:3d:1b:5c:5c:cb:a9:
         26:85:ce:a1:c0:6d:0f:dc:6a:7b:27:9b:a1:25:f5:68:af:2a:
         97:55:15:db:13:df:1a:d6:91:15:1d:0d:3e:20:db:84:6c:40:
         4d:fc:ee:bb:66:77:00:11:5c:a6:28:63:f4:e0:82:b7:76:58:
         d2:8e:93:f2:36:87:d0:9b:fb:2c:7c:0c:da:d7:f3:6a:f4:8a:
         89:2a:80:1e:8d:ad:63:b4:02:81:a8:86:c3:82:8e:8f:04:d5:
         b1:a9:73:7f:79:7c:c8:22:63:57:d4:12:6d:c2:84:6a:e3:39:
         89:1b:5f:48:b1:d6:ac:be:30:bd:e1:90:6b:94:f6:13:a2:55:
         89:b6:bc:86:ae:6e:61:13:3f:39:00:ce:ef:89:a9:a0:df:5c:
         3b:fc:71:7d:e6:51:4f:dd:6c:2f:91:f5:ab:90:4d:37:89:5d:
         fd:db:95:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----