Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/80576cb9aa496f2a9c1aa44e831ab44386b6a089.roa
File:                     80576cb9aa496f2a9c1aa44e831ab44386b6a089.roa (raw, json)
Hash identifier:          ChcwGXYDTE4KfI49X/CSVxY1Z02CVbJGmx5+zrG+aAE=
Subject key identifier:   C0:AF:9B:08:C5:AB:1C:81:D2:7C:BD:F5:A4:56:C6:9A:22:EC:57:7D
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       054924
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/80576cb9aa496f2a9c1aa44e831ab44386b6a089.roa
Signing time:             Fri 25 Mar 2022 05:58:29 +0000
ROA not before:           Fri 25 Mar 2022 03:00:00 +0000
ROA not after:            Sat 25 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346404 (0x54924)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 25 03:00:00 2022 GMT
            Not After : Mar 25 03:00:00 2023 GMT
        Subject: CN=80576cb9aa496f2a9c1aa44e831ab44386b6a089
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:50:29:b3:b6:b2:52:63:db:b8:6a:70:9d:74:
                    09:e4:51:54:15:73:88:0c:ef:16:bb:c1:9a:a0:46:
                    de:22:55:ce:32:8f:29:8b:e0:95:8f:5d:57:b4:13:
                    92:16:f2:bb:d8:20:bd:d2:9f:b1:69:29:c8:29:23:
                    8d:fa:27:4b:55:84:2f:e2:b9:2f:b1:08:76:89:c9:
                    9b:63:ed:38:13:86:66:d5:23:8e:a0:2c:83:f0:23:
                    8d:82:b1:90:24:bc:c4:f1:ce:45:3c:7c:51:63:b9:
                    b9:bb:cf:35:0b:c4:03:47:05:94:d7:85:b3:57:e5:
                    b1:40:9f:59:d0:6f:82:7a:05:63:53:3c:7c:75:f3:
                    d2:9c:2d:4f:27:13:ee:44:6e:a8:e2:7f:5e:8b:65:
                    15:c5:f5:7d:56:7d:11:e0:33:8c:0a:b0:3e:34:7f:
                    9b:30:f5:47:9d:1c:09:4d:21:9f:09:4a:94:f0:5a:
                    07:dd:bc:46:bf:e6:49:60:80:9e:6e:d2:03:c5:90:
                    6f:4b:e2:46:07:b9:bd:ee:93:26:6a:fa:e7:cd:dc:
                    c3:54:d1:9d:0f:3c:41:26:75:1f:05:7b:b2:22:40:
                    76:b1:79:a9:46:e7:b7:59:c2:dc:e5:31:75:62:0a:
                    39:b3:81:b2:32:67:fb:f6:b6:2c:ff:26:63:e1:8b:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AF:9B:08:C5:AB:1C:81:D2:7C:BD:F5:A4:56:C6:9A:22:EC:57:7D
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/80576cb9aa496f2a9c1aa44e831ab44386b6a089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:66:c2:22:7f:e7:67:b7:8f:e0:ab:92:9f:37:c3:70:cd:dd:
         f8:a0:fd:5c:dc:cf:03:ce:d2:d6:ab:cb:db:53:27:4c:80:0a:
         89:04:aa:c1:88:51:2c:fb:18:71:0a:cd:5e:08:8a:6b:ac:cb:
         79:3c:34:2e:8e:77:bb:cf:3a:e9:26:e7:de:30:2c:e0:83:cf:
         bf:ad:3a:33:81:6f:dc:d3:9e:3e:49:36:43:20:52:53:27:fc:
         fb:20:21:3e:e9:de:c2:2e:2b:cb:08:76:bd:4e:f7:76:60:a4:
         7d:f3:ed:06:cc:f0:73:5c:a3:d2:4b:55:ba:e7:6a:a4:32:d4:
         67:d2:bc:b3:63:08:61:2a:a1:60:9f:8f:9e:17:57:f2:2a:04:
         fd:8a:8b:8f:16:33:c1:5a:00:5d:94:7a:92:3f:d2:3b:5e:72:
         2e:43:e9:66:c3:45:ae:a6:51:a6:73:b8:24:0e:b6:d1:12:b3:
         e6:cd:97:44:dd:69:b1:85:bf:a1:dc:93:0f:ab:f4:17:0e:54:
         0d:c0:18:14:d5:3b:6d:99:b4:bd:e5:5c:79:45:a5:b6:7d:10:
         b2:44:5d:77:e0:1c:2a:87:fb:d6:a0:24:04:fa:c8:8b:89:65:
         5c:51:36:36:27:5c:ac:5a:73:1b:d6:61:04:71:fb:ae:98:5f:
         bb:18:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----