Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/71f8a58a2d14b250ad9596b543123a8160e4fd2d.roa
File:                     71f8a58a2d14b250ad9596b543123a8160e4fd2d.roa (raw, json)
Hash identifier:          xxEbY7F/1xh3pzNJMEEKPhNJNEh6bpswLZEMR9/iR+w=
Subject key identifier:   40:2D:20:CF:4B:17:AA:0B:73:78:81:E6:7C:F9:ED:57:6C:52:D4:E6
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       07A9DA
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/71f8a58a2d14b250ad9596b543123a8160e4fd2d.roa
Signing time:             Sun 15 May 2022 03:04:09 +0000
ROA not before:           Sun 15 May 2022 03:00:00 +0000
ROA not after:            Mon 15 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502234 (0x7a9da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 15 03:00:00 2022 GMT
            Not After : May 15 03:00:00 2023 GMT
        Subject: CN=71f8a58a2d14b250ad9596b543123a8160e4fd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:65:bc:e8:c0:fc:7b:bd:52:31:84:1f:5d:9e:
                    7c:1a:f2:61:ca:d3:a1:4e:45:f9:22:9d:86:35:b9:
                    64:ce:84:19:c7:dd:2b:8f:15:fb:a9:31:4d:f4:52:
                    b2:cf:ed:89:75:62:8e:1c:39:a3:ee:85:d6:a8:e6:
                    f3:13:c7:4f:21:b8:2b:f2:b4:bb:cb:fb:a3:0b:e0:
                    7b:6a:84:1e:b4:71:93:07:ef:63:49:39:77:00:e5:
                    da:ee:ee:9f:86:95:59:57:aa:80:1c:55:d6:cb:36:
                    db:66:99:d8:48:b1:0d:6a:44:a3:0c:72:4a:29:88:
                    3f:b8:3a:12:ef:e4:11:15:c3:61:56:15:e9:3d:7c:
                    9f:d7:01:08:73:ff:0a:75:30:57:69:90:0d:16:38:
                    d0:3b:de:91:9f:e0:ec:b5:76:14:92:97:58:d3:1a:
                    cb:6b:0a:19:89:09:1a:1e:f4:15:cf:a4:f0:07:48:
                    de:41:eb:09:20:26:7d:0e:a3:cb:6a:37:24:ce:bf:
                    eb:80:c3:66:51:c8:f6:cb:91:9f:05:58:b5:8d:ff:
                    64:39:05:8d:23:0d:bb:22:ca:5d:2c:01:33:ce:51:
                    47:28:bf:d0:6e:39:11:61:20:7e:1e:0f:5d:2c:84:
                    59:21:90:c1:b8:6f:34:31:c6:b4:7f:cb:78:81:ca:
                    88:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2D:20:CF:4B:17:AA:0B:73:78:81:E6:7C:F9:ED:57:6C:52:D4:E6
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/71f8a58a2d14b250ad9596b543123a8160e4fd2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:ca:8e:5c:39:88:8c:03:69:04:81:5a:69:a9:04:88:d7:29:
         ae:7a:17:8d:9a:5b:9a:16:79:61:16:45:55:c1:55:38:6c:1c:
         72:fd:d6:ba:63:12:d5:0e:2b:09:ac:90:32:e2:b5:ce:23:92:
         58:4c:2b:e1:80:80:36:c4:aa:f9:00:ec:a1:bd:d4:be:f4:07:
         5c:f5:11:b4:bf:5d:46:4c:b9:f2:93:f1:95:d0:99:6d:b9:42:
         f8:33:8a:b2:1e:46:e6:dd:08:7e:89:86:38:28:84:1b:b0:e8:
         07:04:af:d5:ed:17:c2:b2:94:a5:6d:2b:bb:a3:3c:12:48:91:
         93:bd:1f:a0:6a:20:54:05:61:9d:db:6d:50:25:e5:b7:9e:c9:
         41:8f:0d:b1:6b:97:b7:61:b9:1a:b9:41:c1:c4:b8:ea:52:b7:
         a8:fc:78:b1:a0:ef:8a:36:40:f7:4a:81:77:fe:21:61:a5:a4:
         8e:0f:fb:bd:37:b0:f8:02:51:c6:14:24:ce:5b:9d:d6:73:9b:
         e9:3c:5e:ae:c7:5f:61:28:a1:21:34:28:98:07:74:4d:50:0b:
         31:e7:4c:7f:a3:c6:67:14:0f:0e:79:c5:be:3e:3e:b3:1c:5a:
         e8:76:c8:f8:47:89:5b:c6:94:21:75:bf:f7:22:b1:32:d0:d6:
         c2:17:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----