Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/90eb740b1587c83363f358cf88e57d6720f99f9b.roa
File:                     90eb740b1587c83363f358cf88e57d6720f99f9b.roa (raw, json)
Hash identifier:          IqI49bOq+HLImaBu18OzfzNWxK/Y+kjpLg2reB/OMZY=
Subject key identifier:   8A:CE:4D:AA:11:13:AF:92:75:7A:B9:BC:B3:3D:28:FA:1C:B9:B2:9F
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0F2808
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/90eb740b1587c83363f358cf88e57d6720f99f9b.roa
Signing time:             Mon 31 Oct 2022 01:06:45 +0000
ROA not before:           Sun 30 Oct 2022 03:00:00 +0000
ROA not after:            Tue 31 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993288 (0xf2808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 30 03:00:00 2022 GMT
            Not After : Oct 31 03:00:00 2023 GMT
        Subject: CN=90eb740b1587c83363f358cf88e57d6720f99f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:18:b5:90:e0:8d:8e:71:91:1b:10:d1:cd:8d:
                    d1:27:62:28:52:4f:f5:00:fb:ac:07:9d:88:6f:8e:
                    62:79:d8:03:93:23:b6:85:0d:cb:90:55:cf:ef:e6:
                    30:07:e3:fe:64:89:2d:30:0e:aa:8d:f1:0b:f6:a6:
                    c1:28:6f:dd:16:61:8a:c6:ff:a8:66:e6:54:8a:29:
                    db:eb:8e:16:e3:44:97:64:b4:f0:0b:5c:c9:30:26:
                    52:91:9a:ee:43:8f:32:e6:67:3b:e2:fa:1e:55:64:
                    85:78:f5:c8:d2:cf:c1:24:3b:05:37:cc:9b:45:97:
                    6d:83:71:dd:30:e8:28:d8:a2:be:1f:3b:00:6e:83:
                    e3:64:2d:c6:79:1f:ba:ff:09:c8:f5:54:31:c7:55:
                    e2:ea:8f:f1:94:6c:20:3b:1c:1b:25:c6:06:5a:a0:
                    15:54:80:7a:12:5b:b7:d4:7b:95:f6:b7:6d:21:50:
                    50:1e:bc:65:d3:7b:0a:4c:78:e3:1f:87:7b:66:de:
                    d8:73:54:65:cc:36:81:ef:ea:af:97:ec:92:87:12:
                    4b:ed:cb:a8:64:60:9f:fe:dd:7a:a3:62:d7:62:8b:
                    55:e4:14:0a:fa:95:90:3a:bb:08:55:82:70:19:8e:
                    a9:8f:29:46:26:6b:04:4c:d9:4a:56:c2:a8:77:44:
                    f9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:CE:4D:AA:11:13:AF:92:75:7A:B9:BC:B3:3D:28:FA:1C:B9:B2:9F
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/90eb740b1587c83363f358cf88e57d6720f99f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:c5:b1:75:a6:2f:4d:82:c8:36:3c:0a:8f:ef:fa:40:d9:70:
         05:f1:fb:d1:b3:db:58:6a:94:cf:11:71:c1:cb:fc:65:99:94:
         ae:d2:f8:bc:b8:af:f7:98:d5:da:21:2f:fe:ee:da:44:c0:0d:
         60:b6:ce:0b:73:bd:05:77:3b:63:16:c7:ca:7f:73:e2:17:52:
         1f:6a:97:52:01:50:45:c6:6e:27:0d:e5:27:bf:02:03:22:a5:
         e2:01:5c:9c:3a:cd:a4:66:85:fa:bd:1b:29:e6:39:8d:b7:6c:
         eb:d9:69:90:36:5d:af:93:bc:f6:73:c5:3e:ce:4b:08:a4:dd:
         b1:d3:9c:25:8d:d6:0d:9c:08:41:fe:6d:ee:6f:e3:e0:16:b0:
         de:fd:e8:98:31:9b:0c:48:0c:37:84:f4:cb:c1:bf:b9:e3:48:
         b7:aa:9f:9e:bc:7a:a9:f1:b8:05:59:30:34:6e:a0:71:a2:ba:
         85:2c:15:6d:f5:a0:86:ce:84:79:9d:f8:5a:48:97:01:5d:22:
         bb:0e:fb:4e:27:20:1c:a5:e8:93:d7:1a:3c:85:a5:82:91:42:
         74:11:24:bd:8b:d9:de:99:04:c9:64:94:3a:79:0d:f5:53:9a:
         39:c6:37:9a:e2:8c:4f:eb:0d:ee:48:4b:84:c0:bf:95:76:7d:
         98:0c:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----