Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7c99571af4f68703cd69d4bf92908c2388692b15.roa
File:                     7c99571af4f68703cd69d4bf92908c2388692b15.roa (raw, json)
Hash identifier:          JqLFMawQS6gtZfedUmBQDweBnSQsQBoC1FyKv8AB1bo=
Subject key identifier:   18:2F:0D:67:88:BD:3E:F8:51:C1:39:90:03:C0:F8:A0:57:D9:14:58
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       03AF63
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7c99571af4f68703cd69d4bf92908c2388692b15.roa
Signing time:             Sat 19 Feb 2022 02:41:15 +0000
ROA not before:           Sat 19 Feb 2022 03:00:00 +0000
ROA not after:            Sun 19 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241507 (0x3af63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 19 03:00:00 2022 GMT
            Not After : Feb 19 03:00:00 2023 GMT
        Subject: CN=7c99571af4f68703cd69d4bf92908c2388692b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:2b:04:72:4f:1b:dd:7e:cc:d1:b7:bd:cc:
                    c3:1f:ae:eb:81:b0:e8:31:28:43:12:0d:cb:09:db:
                    bc:2c:d7:78:74:ee:6c:e7:00:b9:9e:cd:f3:48:42:
                    bb:21:5f:aa:ee:93:67:11:cb:ae:14:19:9f:92:6c:
                    3e:36:4a:a0:bc:d7:c6:73:38:3f:2e:e4:18:9b:1e:
                    ee:4b:2b:af:a2:87:70:5f:ce:95:b4:7f:08:cb:cc:
                    3f:30:33:7c:24:3a:7f:e4:c9:74:47:55:a8:f2:61:
                    96:80:8b:9c:55:8e:63:5b:ce:5f:55:89:eb:c5:73:
                    d6:64:ed:10:b4:92:83:c9:c9:bd:0a:a0:c7:6a:c7:
                    a3:b9:c4:06:c9:39:70:6c:fe:e3:70:69:5a:b6:a2:
                    79:84:8a:5b:57:a9:08:d2:cd:4f:37:94:9a:31:06:
                    16:80:52:04:4f:5f:36:95:2a:68:92:02:c0:5a:5a:
                    a1:8c:b9:c1:9e:97:76:ba:61:7f:6e:53:5e:1f:b1:
                    3f:ad:6e:ec:e1:a9:db:8b:c5:86:88:64:a8:4a:51:
                    78:6b:ed:08:4b:bd:62:13:3f:64:25:dd:f1:13:e6:
                    1e:64:d6:ae:eb:a3:6e:b8:ae:0a:f4:48:c9:f7:be:
                    cc:2e:64:32:78:c0:e3:e9:a3:10:f4:a1:60:44:ee:
                    0e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2F:0D:67:88:BD:3E:F8:51:C1:39:90:03:C0:F8:A0:57:D9:14:58
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7c99571af4f68703cd69d4bf92908c2388692b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:4c:6f:c8:e0:3c:15:95:4a:82:bc:aa:32:38:94:91:3d:1a:
         76:c6:d7:34:ac:0d:8d:46:e1:54:5c:4c:09:78:94:40:c1:33:
         50:c4:ad:2c:fa:15:16:82:46:00:45:70:ba:d3:da:c1:aa:98:
         37:c4:88:a5:cf:9f:1b:04:bf:d1:6a:ad:cb:c4:b3:12:25:30:
         d1:2f:3b:a0:be:4d:c3:1d:0a:67:f5:2f:d8:c6:b3:64:f1:72:
         0f:31:9b:23:c0:51:97:47:9c:e4:b0:9e:f9:54:dc:01:d7:ea:
         61:13:51:d5:57:02:72:1e:5a:8d:76:da:9a:46:4a:e4:1e:f1:
         6d:95:f1:58:25:f5:01:52:18:bf:28:e1:e7:1d:21:a1:b6:69:
         1f:86:77:fa:aa:bb:ef:4c:01:19:80:37:00:61:1a:ec:4a:2c:
         a5:2b:21:0f:61:85:ce:df:79:3c:22:92:ed:e2:8c:fe:b4:78:
         3d:37:d3:ae:ce:b2:d5:5f:46:88:ba:55:c9:88:98:3e:9b:d8:
         69:f5:ed:92:c5:47:38:cd:c7:63:44:39:b7:c7:fd:25:ae:bf:
         ff:f3:6b:89:71:f8:a7:ff:86:cb:c5:1e:19:db:05:df:a9:3d:
         e3:9e:0d:be:90:3d:05:80:5b:25:af:80:98:b2:a9:7a:15:d1:
         f0:48:4b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----