Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7d64cb6d537d7499b298bddd96aba9b642554832.roa
File:                     7d64cb6d537d7499b298bddd96aba9b642554832.roa (raw, json)
Hash identifier:          6Gg6Jz8G+d6cc68UrBbXhyBSTDoLV9X6HByiWrAO2/E=
Subject key identifier:   5E:4F:FB:6C:07:C6:0A:A9:7F:0C:15:33:6E:9A:8D:83:84:9B:65:FB
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0353F7
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7d64cb6d537d7499b298bddd96aba9b642554832.roa
Signing time:             Fri 11 Feb 2022 05:20:25 +0000
ROA not before:           Fri 11 Feb 2022 03:00:00 +0000
ROA not after:            Sat 11 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 218103 (0x353f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 11 03:00:00 2022 GMT
            Not After : Feb 11 03:00:00 2023 GMT
        Subject: CN=7d64cb6d537d7499b298bddd96aba9b642554832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:ec:85:dc:0f:9a:2d:63:3a:79:3c:a4:56:
                    46:64:73:9a:37:68:a3:ff:2f:46:c4:b0:46:18:00:
                    6f:4d:b2:50:dd:8c:56:9f:cf:25:1f:34:6d:7f:70:
                    ff:dc:cf:21:3a:88:53:cb:1e:19:b3:b0:ae:12:32:
                    cb:3e:b3:b0:90:b9:90:0e:f9:dc:7c:3d:02:31:6c:
                    fd:1b:96:73:98:c1:b7:c8:7c:03:d8:17:98:ff:5b:
                    2a:f5:33:fb:5f:37:6e:ad:1f:d8:0e:57:ba:5e:e0:
                    f9:cd:09:cd:fa:26:ac:2f:a1:06:92:5b:96:d6:fc:
                    73:c4:eb:38:cc:39:bd:96:fc:48:92:4e:b4:91:d6:
                    5d:df:9e:cd:1b:3e:ae:34:72:11:74:1d:65:81:d5:
                    2d:5f:73:07:49:29:1c:e0:71:6a:56:db:4c:60:dd:
                    b8:87:f0:04:c6:f3:73:99:cc:0d:46:93:6d:b2:db:
                    a6:62:ca:63:b1:58:60:14:4a:05:b2:16:2e:7a:e8:
                    b8:3e:95:cf:07:7b:d6:01:db:60:55:2a:98:23:e7:
                    3d:ed:43:94:96:0e:8d:24:29:82:20:b4:07:8b:c9:
                    29:0b:0c:df:94:68:1e:26:5c:f7:04:26:67:db:cc:
                    07:8c:4f:51:c1:1c:74:45:48:2b:7e:25:6e:6a:6c:
                    8f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:4F:FB:6C:07:C6:0A:A9:7F:0C:15:33:6E:9A:8D:83:84:9B:65:FB
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7d64cb6d537d7499b298bddd96aba9b642554832.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         cc:5f:b9:b6:94:01:51:76:6d:af:25:65:1c:be:90:8d:40:8c:
         ec:e4:58:70:7f:05:6a:bb:60:a3:31:e2:c9:82:01:d7:df:fe:
         99:6a:aa:d3:05:e9:9b:4d:02:71:7c:9a:f2:4c:4d:39:da:4d:
         71:74:0e:ba:99:12:f9:f7:03:dd:45:1d:95:71:e4:3e:18:07:
         2b:7c:9c:13:ca:73:3c:66:53:a2:3e:16:52:b4:14:5b:1f:29:
         f9:e6:b4:47:5e:56:82:c6:79:89:0e:e0:22:eb:60:5f:11:f1:
         8c:e1:ca:92:2f:7f:00:51:65:53:fd:c9:c2:9a:44:02:6e:f6:
         30:5d:51:b2:ec:87:e7:8b:ff:16:7f:0e:42:c2:b2:e7:8f:5a:
         0a:8b:5e:d0:dd:3c:96:fc:77:14:38:be:ae:13:ee:e1:7e:3d:
         59:ae:0c:12:50:47:82:30:89:0c:29:d1:0c:50:72:b5:61:d0:
         db:42:79:55:36:b7:ac:0a:0b:5c:23:9a:9f:c0:d2:d8:ab:2f:
         67:67:d1:6f:0f:c6:bb:b7:1b:76:bb:f2:62:f7:a7:62:21:2b:
         ff:d8:f3:59:51:09:5f:6d:2a:70:b5:de:17:aa:42:0b:b9:75:
         78:7c:35:4f:e6:b8:ea:75:1c:d3:63:67:ff:84:4e:5f:2f:b7:
         82:8b:b0:d8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDA1P3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwMjEx
MDMwMDAwWhcNMjMwMjExMDMwMDAwWjAzMTEwLwYDVQQDEyg3ZDY0Y2I2ZDUzN2Q3
NDk5YjI5OGJkZGQ5NmFiYTliNjQyNTU0ODMyMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAnCbshdwPmi1jOnk8pFZGZHOaN2ij/y9GxLBGGABvTbJQ3YxW
n88lHzRtf3D/3M8hOohTyx4Zs7CuEjLLPrOwkLmQDvncfD0CMWz9G5ZzmMG3yHwD
2BeY/1sq9TP7XzdurR/YDle6XuD5zQnN+iasL6EGkluW1vxzxOs4zDm9lvxIkk60
kdZd357NGz6uNHIRdB1lgdUtX3MHSSkc4HFqVttMYN24h/AExvNzmcwNRpNtstum
YspjsVhgFEoFshYueui4PpXPB3vWAdtgVSqYI+c97UOUlg6NJCmCILQHi8kpCwzf
lGgeJlz3BCZn28wHjE9RwRx0RUgrfiVuamyPVwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFF5P+2wHxgqpfwwVM26ajYOEm2X7MB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzdkNjRjYjZkNTM3ZDc0OTliMjk4YmRkZDk2YWJhOWI2NDI1NTQ4MzIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAzF+5tpQBUXZt
ryVlHL6QjUCM7ORYcH8FartgozHiyYIB19/+mWqq0wXpm00CcXya8kxNOdpNcXQO
upkS+fcD3UUdlXHkPhgHK3ycE8pzPGZToj4WUrQUWx8p+ea0R15WgsZ5iQ7gIutg
XxHxjOHKki9/AFFlU/3JwppEAm72MF1RsuyH54v/Fn8OQsKy549aCote0N08lvx3
FDi+rhPu4X49Wa4MElBHgjCJDCnRDFBytWHQ20J5VTa3rAoLXCOan8DS2KsvZ2fR
bw/Gu7cbdrvyYvenYiEr/9jzWVEJX20qcLXeF6pCC7l1eHw1T+a46nUc02Nn/4RO
Xy+3gouw2A==
-----END CERTIFICATE-----