Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/8a4b6006e7b3ea6fa1e28606d03ad44642f01f89.roa
File:                     8a4b6006e7b3ea6fa1e28606d03ad44642f01f89.roa (raw, json)
Hash identifier:          vRCvdWVzIZtyDTe65k+6JZw273s0ZyrSf3+f+O1emG4=
Subject key identifier:   60:53:2B:0B:D0:11:5C:20:DC:C7:67:56:71:75:D2:C6:19:A1:06:E2
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       21D7
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/8a4b6006e7b3ea6fa1e28606d03ad44642f01f89.roa
Signing time:             Tue 16 Nov 2021 03:05:40 +0000
ROA not before:           Tue 16 Nov 2021 03:00:00 +0000
ROA not after:            Thu 16 Nov 2023 03:00:00 +0000
asID:                     3130
IP address blocks:        2801:1e:1800::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8663 (0x21d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Nov 16 03:00:00 2021 GMT
            Not After : Nov 16 03:00:00 2023 GMT
        Subject: CN=8a4b6006e7b3ea6fa1e28606d03ad44642f01f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b5:7a:19:1b:bf:56:6d:5c:1d:1c:f8:f6:cc:
                    91:4a:7a:80:cd:22:e4:90:9d:26:32:57:36:93:65:
                    38:3e:7e:e4:78:1c:70:72:f4:b1:35:8f:5f:c8:47:
                    ea:e8:27:1b:ff:16:f6:d2:04:3e:40:8d:b5:7d:e4:
                    52:62:3c:c1:0c:6f:0e:99:31:1d:1a:63:4c:10:8e:
                    07:64:0a:8e:aa:dc:84:e8:ab:04:3a:56:03:b0:22:
                    b6:44:ca:73:cc:0a:a6:c5:ce:d9:7f:95:b9:92:c3:
                    33:d2:d8:ae:7e:ed:1e:48:4e:5b:c1:a2:15:4e:34:
                    c0:f4:03:84:3f:dd:76:c5:7f:6d:cd:bf:73:28:27:
                    b9:5e:71:1b:75:20:ac:3b:93:cc:54:0b:06:e2:a6:
                    82:43:84:d4:ce:44:e8:98:fd:96:ac:cf:3a:a3:9e:
                    fb:34:40:36:24:d9:83:20:50:96:75:9e:70:6a:8a:
                    14:50:a8:61:48:f2:f0:dd:e5:19:87:d8:fc:2d:f1:
                    7e:b2:1f:60:1c:0d:48:5f:77:67:7d:1c:4c:6f:7e:
                    d4:2a:d7:da:89:6b:e2:d9:84:59:07:99:4b:f4:89:
                    4d:0d:30:ea:a3:99:22:c4:13:ac:e8:9b:b2:2d:7d:
                    4e:d9:d9:88:77:6f:5f:c3:a1:b7:a6:4f:9e:40:0a:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:53:2B:0B:D0:11:5C:20:DC:C7:67:56:71:75:D2:C6:19:A1:06:E2
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/8a4b6006e7b3ea6fa1e28606d03ad44642f01f89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1800::/47

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:24:34:83:2a:8d:6f:d7:86:a2:48:4f:93:72:a6:47:a7:
         d1:72:7b:7c:71:17:32:dc:66:e2:76:66:5f:f4:95:2b:6a:46:
         28:4e:e2:3a:61:e0:a9:66:c0:de:06:a9:a6:fc:21:fe:30:ee:
         b7:b4:c2:24:b9:52:80:d9:86:64:75:0c:c1:02:67:74:98:7b:
         a4:d8:df:a3:ab:38:20:4c:c7:cf:47:11:ea:bc:93:d3:80:da:
         9f:3e:01:76:73:39:ed:a2:58:c4:d2:58:18:65:e3:75:29:3e:
         bb:33:da:4e:4d:80:1e:de:25:79:fc:ff:61:19:41:35:79:3d:
         25:78:95:45:7d:18:96:76:3f:9b:ab:71:8f:23:57:c8:c0:18:
         14:f5:bb:cf:06:29:eb:de:38:de:07:96:c3:4b:3e:39:ba:64:
         47:bc:39:64:b7:e7:bf:f3:c0:73:2e:27:a0:de:a5:e3:1f:a2:
         21:de:25:cd:0e:a5:91:db:f4:a8:f2:ca:ae:b6:62:7f:39:28:
         01:cf:a4:5f:35:d7:a0:4c:b2:b5:ca:9b:f7:40:61:b1:42:78:
         4f:83:f3:d7:b7:35:b1:60:4e:c3:11:e2:df:81:16:23:f5:dc:
         0d:d0:84:ad:b4:e4:d7:54:11:5f:68:3b:dd:cf:ce:e9:a6:ea:
         10:7d:96:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----