Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9172f47a8f3e9b2045d25ff27ab086817787dffe.roa
File:                     9172f47a8f3e9b2045d25ff27ab086817787dffe.roa (raw, json)
Hash identifier:          U0YWtr3ykK5WZoUdiOJgXw30p0hzzK2YwZGwsiZlZGw=
Subject key identifier:   E0:46:59:C1:F2:86:90:C2:21:55:A3:04:F3:05:A1:A2:5D:91:14:A4
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       090A4E
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9172f47a8f3e9b2045d25ff27ab086817787dffe.roa
Signing time:             Fri 17 Jun 2022 00:41:14 +0000
ROA not before:           Fri 17 Jun 2022 03:00:00 +0000
ROA not after:            Sat 17 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 592462 (0x90a4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 17 03:00:00 2022 GMT
            Not After : Jun 17 03:00:00 2023 GMT
        Subject: CN=9172f47a8f3e9b2045d25ff27ab086817787dffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:68:58:67:19:45:72:6e:08:f6:d9:69:17:
                    a6:8d:69:17:e5:a5:66:53:14:4d:ef:9c:9b:39:7e:
                    65:11:26:45:67:1d:8f:64:3a:f9:4c:e8:80:ae:eb:
                    57:d1:aa:46:d6:d6:a7:b5:c7:0c:74:c0:a2:0e:34:
                    77:54:01:2f:eb:21:ce:71:e9:79:90:e3:e0:06:7d:
                    d0:13:c4:46:53:b9:69:53:2b:fa:70:de:08:3f:d1:
                    6a:0e:99:0e:27:cb:63:4f:f3:fc:47:53:07:ca:de:
                    81:0e:ff:8a:94:d1:02:5a:cd:04:43:7d:2f:4d:32:
                    49:53:01:f8:25:0d:ad:91:eb:e0:82:65:10:4a:3f:
                    a6:6e:85:5c:6b:5f:b8:33:ca:a3:49:e1:4f:e1:2e:
                    fb:eb:d8:04:09:cf:e1:b0:c0:d5:4a:6e:fa:65:d4:
                    5a:ff:f5:0f:37:0a:a9:09:04:40:0c:06:cb:fd:b9:
                    63:bc:42:c3:3d:0c:c1:63:4a:41:15:08:ec:c8:0c:
                    6f:af:01:88:fb:cc:62:04:28:28:bc:83:f6:a4:6b:
                    d4:47:97:a3:b2:47:31:d3:bc:3b:0f:83:62:8b:8f:
                    b3:f7:6e:b6:af:9e:32:f9:a8:ab:bd:59:1e:18:ac:
                    60:e3:5a:6a:3b:cd:07:f0:a0:4f:5a:9a:35:51:20:
                    d5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:46:59:C1:F2:86:90:C2:21:55:A3:04:F3:05:A1:A2:5D:91:14:A4
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9172f47a8f3e9b2045d25ff27ab086817787dffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:8e:d5:0d:df:11:d6:f0:7c:b1:c8:9a:9b:d9:5c:c2:8a:bb:
         fb:30:1c:4e:7b:36:38:f4:d1:85:1f:f5:10:4e:79:88:a1:be:
         38:ca:60:79:b1:2c:f2:ae:80:a8:a0:40:50:7c:51:3e:d1:a8:
         a7:d7:d7:be:c1:12:3c:e0:cd:fb:99:60:75:59:08:e7:b6:c8:
         05:13:c7:3f:78:38:c5:44:5b:02:0e:2e:ea:ff:6b:fd:a0:e6:
         02:46:4d:2c:20:b8:c5:9d:05:2d:cf:5b:73:5e:fb:20:9e:e6:
         4b:b0:85:f6:4d:8c:26:69:73:2b:3f:6f:92:0f:28:5b:6f:54:
         95:ad:f7:6a:62:d3:2f:bd:a7:ec:17:24:a8:8f:90:06:62:c3:
         94:42:19:4f:2d:12:f8:62:05:13:7e:d5:e4:9f:32:1b:6f:3b:
         8b:ad:bf:57:5f:cf:e9:2e:ef:ed:a8:96:3b:69:0a:96:a5:ae:
         dd:1c:c6:7f:96:26:78:22:aa:ef:9a:8f:0a:3a:c4:97:69:01:
         a9:ad:2d:64:02:b4:30:88:43:75:94:c7:23:0a:a3:38:4e:01:
         66:5d:b5:4d:9d:ab:15:96:b7:0a:be:07:cc:16:13:0f:a7:c1:
         a9:01:e1:43:ef:f3:de:ae:14:22:bb:25:a9:d9:b7:6b:83:e4:
         83:7e:1a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----