Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9093f77e92adb7c9c69497d811632482d9714f56.roa
File:                     9093f77e92adb7c9c69497d811632482d9714f56.roa (raw, json)
Hash identifier:          +MzWk9DreRhBw3+TvAueuBIGAAH2xXK1XD1xiwbq3Jg=
Subject key identifier:   09:C6:82:5D:55:42:FA:B1:9C:76:FF:48:49:4A:3D:49:57:C6:97:61
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       05C97F
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9093f77e92adb7c9c69497d811632482d9714f56.roa
Signing time:             Tue 05 Apr 2022 00:51:32 +0000
ROA not before:           Tue 05 Apr 2022 03:00:00 +0000
ROA not after:            Wed 05 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 379263 (0x5c97f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr  5 03:00:00 2022 GMT
            Not After : Apr  5 03:00:00 2023 GMT
        Subject: CN=9093f77e92adb7c9c69497d811632482d9714f56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ff:4d:4f:79:3e:0e:72:54:8b:bf:d0:36:64:
                    4b:1b:b6:6a:d4:e6:8e:cb:78:64:35:a6:ed:8b:13:
                    91:c6:7c:56:f2:9e:4e:97:81:8f:3a:fd:72:aa:98:
                    82:5f:bc:cb:10:31:8f:46:cc:ec:4c:3c:8f:6e:a7:
                    da:77:e3:12:66:0d:bf:81:29:9d:ed:6d:2b:06:41:
                    7c:0d:6e:94:8e:02:f5:9f:09:8a:65:a9:04:23:d4:
                    72:49:e2:4f:2f:2d:89:ad:bb:bc:85:06:5b:62:04:
                    2b:08:e8:fa:95:90:99:c3:7b:9d:7f:97:37:52:9d:
                    35:d7:95:68:3d:3f:9d:09:61:64:6e:70:f5:b0:b4:
                    d2:c2:73:75:d3:2e:17:1a:db:09:85:5f:8a:36:a9:
                    ad:99:ab:11:85:05:98:13:43:40:ab:20:ab:6b:e7:
                    29:da:72:9b:b8:8c:98:49:25:59:94:16:40:cc:90:
                    e6:60:42:61:c9:b5:ac:f0:f7:93:c2:56:4d:ac:7c:
                    df:1f:06:af:7c:08:18:26:8a:ed:0f:b4:a6:1c:06:
                    42:b9:23:58:88:f8:2d:17:9a:be:62:d7:2a:89:0f:
                    bb:fd:a8:c8:a1:99:60:0f:8c:7e:89:61:c7:03:96:
                    ad:f3:86:d1:f6:df:f3:58:d9:3b:73:41:56:99:6a:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C6:82:5D:55:42:FA:B1:9C:76:FF:48:49:4A:3D:49:57:C6:97:61
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9093f77e92adb7c9c69497d811632482d9714f56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:a5:22:ec:83:31:35:5f:6a:a8:14:74:39:8f:f9:5a:a2:9a:
         c9:83:98:4d:9e:15:64:17:f1:d2:9b:b1:bd:d1:5a:91:e5:7d:
         d4:ad:d8:53:57:1d:c3:8f:e8:a3:7a:39:72:c7:8e:01:14:53:
         8f:c4:6f:78:13:25:ab:e5:f7:06:62:bc:3c:d5:47:06:4c:9f:
         ec:b1:8a:4a:b2:16:b3:41:0b:c9:ec:f2:f0:ae:e4:e3:fe:89:
         ca:7b:bd:ab:20:71:3d:38:a5:ac:2b:33:c7:b1:bd:24:dd:ee:
         a8:29:40:89:78:54:72:04:24:32:15:2b:19:bd:38:b2:81:cb:
         49:c8:d2:3d:fe:90:f5:0d:ec:6b:29:f6:59:4f:db:2c:e9:fb:
         7b:9f:f2:09:7e:cf:d3:87:9b:28:8b:f2:97:87:40:bf:26:ce:
         af:00:98:6f:e1:f2:2a:8e:be:8c:f7:90:b5:da:f4:e8:f6:9d:
         92:c6:0f:ef:98:7d:67:97:85:52:20:44:58:1d:9d:ff:77:b1:
         59:ae:33:27:aa:ab:a3:c1:b1:0a:ed:ce:60:0d:14:2f:dd:62:
         2f:33:4d:0c:12:24:67:a7:23:44:e9:5a:18:c6:6d:f8:42:6d:
         b0:7b:f4:31:10:96:9a:42:8a:76:58:6e:17:46:d8:74:36:36:
         3c:e8:d4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----