Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/8a899d16ac7585cb052e8e9e858c8bf53f12f70e.roa
File:                     8a899d16ac7585cb052e8e9e858c8bf53f12f70e.roa (raw, json)
Hash identifier:          PJDF41qCS27Mv/+LBa6RUnu+o5XcoRlJ5hjD+Olozfg=
Subject key identifier:   23:57:1D:EB:97:9B:32:08:37:6B:6C:E8:A4:DB:84:2C:A9:64:27:86
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       064CC4
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/8a899d16ac7585cb052e8e9e858c8bf53f12f70e.roa
Signing time:             Sun 17 Apr 2022 11:46:36 +0000
ROA not before:           Sun 17 Apr 2022 03:00:00 +0000
ROA not after:            Mon 17 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412868 (0x64cc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr 17 03:00:00 2022 GMT
            Not After : Apr 17 03:00:00 2023 GMT
        Subject: CN=8a899d16ac7585cb052e8e9e858c8bf53f12f70e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:15:b0:dc:ad:1e:70:43:49:59:b6:83:22:
                    81:bc:e1:3d:97:bb:97:16:b4:49:03:e3:70:fa:bc:
                    16:cf:1d:f0:08:4e:9a:73:f2:54:84:05:4c:15:f9:
                    c9:89:2e:89:76:92:a1:b8:cf:41:44:42:ca:64:34:
                    12:e3:18:20:3d:23:e6:a0:bd:48:ea:18:68:1e:30:
                    76:63:af:62:42:5e:74:d4:5d:87:fd:f0:27:73:0e:
                    d4:d8:1d:48:ea:f9:11:74:27:bd:fd:3d:64:5e:9f:
                    58:71:68:a3:aa:ff:9a:34:92:61:c2:16:1a:55:20:
                    c8:97:e8:a3:be:a5:6e:34:67:9d:ce:04:2f:fa:f3:
                    ae:ba:2b:0f:79:08:7c:cd:f0:5e:03:aa:bc:12:a4:
                    3d:2e:8d:9c:ac:6a:ec:aa:fb:d7:03:36:07:12:92:
                    36:df:95:9a:b4:0d:8f:8f:d8:32:f9:a9:8a:5d:c4:
                    10:73:4b:17:d4:26:46:21:e4:1f:4b:27:55:7f:fc:
                    0d:96:75:65:81:49:29:c0:c4:62:9d:45:e5:5d:4e:
                    53:fd:2c:96:dc:a9:65:d6:d4:d8:13:60:35:8b:69:
                    3a:c2:d1:2a:6f:39:fd:05:fb:f0:43:e5:ec:a4:82:
                    e4:9b:8b:83:87:33:78:81:dc:00:9c:30:05:5a:3a:
                    7e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:57:1D:EB:97:9B:32:08:37:6B:6C:E8:A4:DB:84:2C:A9:64:27:86
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/8a899d16ac7585cb052e8e9e858c8bf53f12f70e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:6e:3c:d4:66:42:34:65:b4:12:ac:81:f4:f7:24:82:2b:18:
         f8:e9:46:af:38:2c:4e:6d:ee:ff:16:f6:77:4a:9d:80:20:75:
         c2:63:12:32:3d:78:a9:5f:03:8b:a5:9e:63:d8:b0:9d:f6:65:
         f7:17:7c:b6:cc:1f:ba:af:2d:00:75:cc:e6:27:b2:5a:3f:8f:
         e6:58:dc:4b:a7:83:62:68:ef:82:ce:d4:a5:31:b8:f8:9d:5d:
         d6:3e:96:15:14:5d:1c:73:b7:1d:48:14:c6:46:0f:e3:95:7e:
         cf:0a:33:f7:4c:90:bb:19:75:f2:53:e1:43:e8:93:83:3c:a5:
         b8:98:9f:f5:d2:d8:75:6d:f4:92:f0:9d:32:3f:a2:02:c5:b6:
         6b:2c:e2:54:dd:38:fc:07:fd:c7:3c:78:24:93:a5:71:a9:79:
         58:a0:6a:13:4e:9f:6f:db:96:a7:92:aa:02:cf:1b:b8:1d:2d:
         1d:75:f3:69:c6:d1:26:23:75:1c:60:b3:95:ff:24:1d:bb:af:
         ef:8b:c5:ba:33:8a:28:e9:f0:c7:1d:f6:c1:aa:af:52:6e:b7:
         35:c3:7f:56:80:73:27:91:4e:2d:d7:86:be:60:78:1d:5e:a0:
         7c:09:62:b8:a2:eb:12:3d:44:13:e1:29:7d:fa:41:0c:cb:b7:
         59:55:1b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----