Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7e3191c65be981892da92b96cd758d77e3429f61.roa
File:                     7e3191c65be981892da92b96cd758d77e3429f61.roa (raw, json)
Hash identifier:          RIncIetBkMv19s0cwx4GX1ZrPJPWPHEdZPLu/UcsAGE=
Subject key identifier:   70:EB:7A:C4:DB:B5:D4:C5:96:64:B8:D5:CA:BB:EE:CD:AB:48:77:0C
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0BBEBA
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7e3191c65be981892da92b96cd758d77e3429f61.roa
Signing time:             Thu 18 Aug 2022 04:57:27 +0000
ROA not before:           Thu 18 Aug 2022 03:00:00 +0000
ROA not after:            Fri 18 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 769722 (0xbbeba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug 18 03:00:00 2022 GMT
            Not After : Aug 18 03:00:00 2023 GMT
        Subject: CN=7e3191c65be981892da92b96cd758d77e3429f61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:58:61:1b:3f:e8:db:48:c4:17:6f:66:76:
                    a2:eb:4b:d4:e1:09:14:b3:32:df:65:40:19:05:a6:
                    fb:50:61:15:69:a0:a5:2c:1c:44:d3:a5:a0:f7:93:
                    3c:22:75:b5:1f:e6:73:62:6a:1b:f1:28:33:6b:e3:
                    85:5e:15:71:1d:b4:a7:9e:69:80:5c:da:9d:14:a0:
                    69:34:3c:d3:60:93:e2:c2:00:5a:ef:c8:20:b8:a6:
                    33:cf:85:eb:ca:be:4e:bd:55:16:16:7a:13:b7:00:
                    58:ef:ab:ce:21:ff:ce:a0:f2:7e:b0:b6:51:8c:9c:
                    76:0c:db:52:f3:dc:f3:f9:79:5a:51:e1:ac:4f:d2:
                    35:69:7d:25:be:81:8e:92:63:c1:2a:b0:9d:bb:08:
                    69:e1:86:5f:6c:cb:f1:33:01:3d:e3:69:4f:c0:e6:
                    fd:32:6f:9b:93:f6:7e:fb:4a:93:29:a9:f8:e6:57:
                    db:0a:61:f3:18:6e:19:d2:d2:3e:9a:5a:b0:39:eb:
                    78:6a:60:23:84:ec:ba:1a:67:b3:a7:41:38:a9:f7:
                    08:b0:c4:2a:39:1c:5b:17:4b:31:c0:c6:b2:17:8f:
                    21:e0:dc:6f:6b:c0:bc:6b:b2:b8:19:ad:df:6d:61:
                    55:7c:d4:3e:dc:73:71:9f:a2:50:fa:61:bd:f2:19:
                    58:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EB:7A:C4:DB:B5:D4:C5:96:64:B8:D5:CA:BB:EE:CD:AB:48:77:0C
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/7e3191c65be981892da92b96cd758d77e3429f61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:69:42:df:64:a0:e6:0f:0c:54:a7:e6:c2:aa:80:7f:db:ea:
         cb:31:15:7a:83:b0:d1:77:7a:a0:9d:15:02:0b:bd:44:2c:69:
         ce:26:63:3a:1e:02:7a:96:b5:51:ce:ca:09:df:7a:a8:68:e4:
         45:37:99:1b:dd:69:93:cf:6c:89:8b:09:7d:3c:e4:5c:d2:95:
         fc:d6:93:89:79:ba:ee:a9:a2:b5:b0:63:31:e9:49:44:1d:6f:
         a3:a8:15:39:c6:fa:a9:eb:d2:40:ab:6f:05:be:ed:93:6b:64:
         4d:08:e0:6c:86:ef:5b:74:62:65:1d:65:97:85:3a:77:f3:62:
         d5:34:33:6b:f7:0c:52:63:99:fa:46:69:e7:0e:44:35:b5:88:
         5b:2d:2a:d1:fc:23:8e:da:1b:66:ca:08:ae:fc:78:3e:4d:db:
         3d:8e:c6:ad:94:18:73:0c:bb:b0:77:1c:8f:99:04:f9:4f:82:
         ea:8e:64:64:ab:3f:f1:da:a1:21:ba:22:36:07:bd:b2:8c:4d:
         14:69:6e:33:68:69:b8:e6:91:b1:79:c0:db:d1:ce:88:7a:33:
         cf:eb:03:f6:01:7c:54:9e:58:52:11:a9:fa:95:bd:12:8a:2a:
         e7:c2:31:44:b2:13:e1:1a:ab:db:3f:75:0c:dc:4f:bf:99:7a:
         ee:d8:80:fb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDC766MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwODE4
MDMwMDAwWhcNMjMwODE4MDMwMDAwWjAzMTEwLwYDVQQDEyg3ZTMxOTFjNjViZTk4
MTg5MmRhOTJiOTZjZDc1OGQ3N2UzNDI5ZjYxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxkhYYRs/6NtIxBdvZnai60vU4QkUszLfZUAZBab7UGEVaaCl
LBxE06Wg95M8InW1H+ZzYmob8Sgza+OFXhVxHbSnnmmAXNqdFKBpNDzTYJPiwgBa
78gguKYzz4Xryr5OvVUWFnoTtwBY76vOIf/OoPJ+sLZRjJx2DNtS89zz+XlaUeGs
T9I1aX0lvoGOkmPBKrCduwhp4YZfbMvxMwE942lPwOb9Mm+bk/Z++0qTKan45lfb
CmHzGG4Z0tI+mlqwOet4amAjhOy6Gmezp0E4qfcIsMQqORxbF0sxwMayF48h4Nxv
a8C8a7K4Ga3fbWFVfNQ+3HNxn6JQ+mG98hlY8QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFHDresTbtdTFlmS41cq77s2rSHcMMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjLzdlMzE5MWM2NWJlOTgxODkyZGE5MmI5NmNkNzU4ZDc3ZTM0MjlmNjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAZWlC32Sg5g8M
VKfmwqqAf9vqyzEVeoOw0Xd6oJ0VAgu9RCxpziZjOh4Cepa1Uc7KCd96qGjkRTeZ
G91pk89siYsJfTzkXNKV/NaTiXm67qmitbBjMelJRB1vo6gVOcb6qevSQKtvBb7t
k2tkTQjgbIbvW3RiZR1ll4U6d/Ni1TQza/cMUmOZ+kZp5w5ENbWIWy0q0fwjjtob
ZsoIrvx4Pk3bPY7GrZQYcwy7sHccj5kE+U+C6o5kZKs/8dqhIboiNge9soxNFGlu
M2hpuOaRsXnA29HOiHozz+sD9gF8VJ5YUhGp+pW9Eooq58IxRLIT4Rqr2z91DNxP
v5l67tiA+w==
-----END CERTIFICATE-----