Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/954095991bf96ad1d4cdf3a3e22710f5e48d6eae.roa
File:                     954095991bf96ad1d4cdf3a3e22710f5e48d6eae.roa (raw, json)
Hash identifier:          Cku9BEx7uPfSWBo/v/joTgTceKHMQ1C9Iq6GIEUscnU=
Subject key identifier:   D3:9F:8D:F8:83:82:71:13:A5:D4:6C:5F:B7:C4:58:AD:6E:2A:22:A6
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       03EB8E
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/954095991bf96ad1d4cdf3a3e22710f5e48d6eae.roa
Signing time:             Wed 23 Feb 2022 04:22:05 +0000
ROA not before:           Wed 23 Feb 2022 03:00:00 +0000
ROA not after:            Thu 23 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256910 (0x3eb8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 23 03:00:00 2022 GMT
            Not After : Feb 23 03:00:00 2023 GMT
        Subject: CN=954095991bf96ad1d4cdf3a3e22710f5e48d6eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:88:7d:e3:81:ba:0f:91:c3:92:b1:f9:d1:11:
                    1e:76:cd:9b:b6:aa:9b:50:8d:f5:24:ca:c9:73:0e:
                    f9:4b:0b:e7:00:fb:21:bd:ba:ba:65:09:14:93:d4:
                    21:48:61:c5:70:dc:d7:43:63:9c:f2:13:08:d8:a7:
                    e3:68:68:90:e9:f3:e3:f4:3b:f2:88:a4:d4:4d:fe:
                    6b:1a:6d:95:50:d2:a6:a3:61:a0:1c:cb:80:d8:92:
                    0d:23:62:96:08:08:cd:3c:dd:64:a9:ae:57:b0:e8:
                    3e:6d:ac:c0:b1:55:9a:51:75:5b:31:52:49:14:af:
                    52:6d:b3:43:00:0f:98:8c:e8:60:4b:db:a0:a0:e8:
                    d7:50:e7:86:7f:ac:5e:cb:7a:ce:21:f2:a4:e4:7d:
                    e1:8a:ef:92:cc:34:98:25:a2:f6:41:42:f8:02:41:
                    94:fa:18:6c:95:ed:0d:d4:bd:34:75:89:d1:7c:03:
                    6d:6d:4e:08:29:e4:b4:a0:5f:16:87:45:6e:41:e2:
                    62:5c:09:44:cc:10:df:42:03:18:0b:8b:68:36:42:
                    92:f3:e5:f2:6c:6d:d4:2c:19:ff:30:9c:bc:61:0d:
                    3f:c7:22:1b:73:97:f4:ba:53:7d:8b:5d:6b:7d:29:
                    1f:f4:0f:72:18:00:75:ee:b2:be:45:ed:d7:4e:15:
                    da:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9F:8D:F8:83:82:71:13:A5:D4:6C:5F:B7:C4:58:AD:6E:2A:22:A6
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/954095991bf96ad1d4cdf3a3e22710f5e48d6eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:eb:3d:f1:a3:06:1b:c8:23:fb:b2:fe:1b:9b:f2:e7:6c:cd:
         86:ee:3b:3e:e1:1f:74:2a:4c:3a:3e:a4:9f:72:f7:6c:0e:8e:
         eb:ae:4e:98:86:19:26:bb:88:1b:63:d2:77:b4:39:6b:35:3e:
         ef:32:d0:8d:46:ec:fe:fe:7f:29:60:ca:97:3b:53:18:e5:85:
         8b:ea:88:25:e2:59:4a:05:b1:5c:08:44:b8:00:e3:d2:c2:0a:
         47:b5:06:7e:20:7e:fd:82:af:32:5c:fa:e0:55:9d:a1:0e:6b:
         97:e7:81:cd:bd:5d:e3:1a:8d:23:fe:7e:35:1f:9a:10:7b:c9:
         d4:d6:68:a2:98:f1:11:f1:71:0e:fb:c7:38:2e:df:31:fe:02:
         da:24:f6:95:5b:71:88:43:a4:97:c0:2e:1e:87:9c:6d:a6:52:
         74:3a:81:db:06:93:43:d3:01:48:6d:64:0a:26:40:99:af:a0:
         bb:d1:e1:3d:f0:da:f4:14:6f:dc:ae:a5:b2:0d:ff:17:a2:20:
         5d:76:ce:d5:2a:95:7d:9b:1d:68:95:88:44:e6:eb:88:f9:a3:
         a3:68:a8:ea:16:bb:b4:82:34:1c:20:e7:05:c2:45:ae:cd:c8:
         4d:85:9d:19:54:c6:b4:40:4e:db:51:2e:16:00:4d:df:23:fa:
         cd:5f:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----