Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/746e045d806da09194654cdd5cb650a54ca15f8e.roa
File:                     746e045d806da09194654cdd5cb650a54ca15f8e.roa (raw, json)
Hash identifier:          J5TNlqrsmOU2bfxNRes30hWFefPsUz4Xy2JIc0iwaRY=
Subject key identifier:   63:F8:6E:26:0F:BE:6F:4A:05:E4:BE:DB:80:D9:86:88:78:D6:2C:9E
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       039203
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/746e045d806da09194654cdd5cb650a54ca15f8e.roa
Signing time:             Wed 16 Feb 2022 01:20:00 +0000
ROA not before:           Wed 16 Feb 2022 03:00:00 +0000
ROA not after:            Thu 16 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233987 (0x39203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 16 03:00:00 2022 GMT
            Not After : Feb 16 03:00:00 2023 GMT
        Subject: CN=746e045d806da09194654cdd5cb650a54ca15f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:58:d6:ff:77:85:44:d9:6e:d8:09:71:dd:
                    98:bd:da:af:a3:e3:75:c5:0f:9e:b3:21:87:87:e9:
                    2a:1e:c6:c1:3b:8c:0b:43:88:89:50:ac:37:8a:b3:
                    a3:5a:6a:a8:d4:12:c7:85:bf:b2:fe:1b:6f:dd:ee:
                    00:1e:75:90:1d:fd:be:81:7e:9e:98:a1:6a:9b:61:
                    64:c4:d0:d2:59:97:d6:57:88:24:fc:7a:68:bc:97:
                    0c:c5:49:27:fa:f9:07:28:b6:39:70:30:87:46:dd:
                    eb:e4:78:3a:1d:37:2a:4d:4d:9f:bf:d6:89:19:76:
                    0d:d8:63:f2:fa:7a:44:44:44:f9:d8:e1:62:c1:d4:
                    0a:42:af:eb:c6:ef:35:13:ee:b1:1e:fc:47:d6:04:
                    ff:6e:f3:91:08:a2:aa:ed:f5:6d:e8:08:5e:23:86:
                    87:93:83:2b:cb:5c:00:3d:cf:49:02:f7:35:75:f8:
                    01:0c:cf:bf:67:fe:a9:d1:3a:16:d5:51:cf:39:09:
                    31:00:20:c1:13:b8:6b:1f:26:21:8a:4a:65:8b:ad:
                    ef:7b:03:24:80:e7:aa:33:4c:16:70:cf:08:6d:c4:
                    8f:97:1e:92:d7:38:18:1a:af:80:3b:f2:24:78:2b:
                    43:1a:0b:26:6b:20:56:a6:f8:06:8f:9e:c2:df:22:
                    92:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F8:6E:26:0F:BE:6F:4A:05:E4:BE:DB:80:D9:86:88:78:D6:2C:9E
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/746e045d806da09194654cdd5cb650a54ca15f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:47:4b:34:5f:f9:74:eb:e7:c7:ff:52:7f:35:41:1a:47:52:
         28:25:df:ff:da:18:2e:ac:69:ca:3d:3d:54:9d:19:56:62:26:
         b7:31:50:a3:f4:11:cd:93:54:18:d0:66:f3:7c:86:65:7b:9d:
         a3:fd:53:72:03:d8:ef:55:4e:96:86:e8:19:c4:49:c7:d5:cf:
         d0:99:6e:77:75:d9:1f:d6:a9:d4:c0:46:a1:7a:ad:6b:52:5b:
         61:22:34:b1:c4:a7:7d:0a:3b:08:ab:53:19:f5:e2:22:9e:6d:
         47:f0:02:39:c7:7f:64:2c:74:42:ef:63:fc:1c:74:42:29:2e:
         51:5d:19:1e:90:08:b7:81:c9:28:5a:3c:78:36:2c:ad:e7:e8:
         b4:25:f4:3e:d2:4e:f6:a0:28:71:1f:d6:66:c4:4b:30:b6:18:
         c0:54:cd:61:c8:06:c7:4b:32:2e:f0:47:bb:5b:4b:f5:bf:a7:
         92:bd:73:3b:8a:c5:5c:fb:54:87:8a:93:b4:e9:55:62:c3:11:
         4b:12:4f:2e:da:04:6e:47:e2:db:9e:65:a6:04:ce:ee:6e:ee:
         91:e6:6d:a5:43:c5:8c:01:0e:e3:d0:d1:d4:72:d7:06:a5:ed:
         69:eb:a4:fc:70:af:37:8a:9e:13:7d:f3:98:c8:37:5e:05:20:
         15:00:7d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----