Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/97e8fbbada685ecda5bf22097b27ec6ac26d1771.roa
File:                     97e8fbbada685ecda5bf22097b27ec6ac26d1771.roa (raw, json)
Hash identifier:          GtJ8SpN2heMqwxjWD/qbYl7ReAm8u2WPjh/j9NDYrMU=
Subject key identifier:   02:5F:09:8A:7D:A4:67:81:9A:45:31:97:B5:B2:03:4A:82:55:2D:E0
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       05377F
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/97e8fbbada685ecda5bf22097b27ec6ac26d1771.roa
Signing time:             Thu 24 Mar 2022 00:57:23 +0000
ROA not before:           Thu 24 Mar 2022 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341887 (0x5377f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 24 03:00:00 2022 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=97e8fbbada685ecda5bf22097b27ec6ac26d1771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:24:b4:6b:a5:e0:5a:73:82:82:1a:b0:3c:65:
                    67:b9:c1:35:64:4b:13:cc:99:3e:e8:16:aa:7c:44:
                    cd:5a:15:c4:c9:b4:cd:07:2e:28:7d:48:59:52:43:
                    36:d5:ed:fe:6b:87:ed:c3:d2:46:18:9e:73:24:91:
                    09:03:56:bd:a9:23:e4:26:30:1b:57:0e:e6:7a:4f:
                    42:8e:ab:37:6f:00:b7:74:ef:0a:c5:a9:68:82:e5:
                    19:42:f2:0d:92:d7:94:6d:54:61:1c:0e:bf:39:f1:
                    55:86:9c:20:10:ee:72:b7:d9:fc:12:03:6b:c7:13:
                    30:eb:10:02:6b:cf:e7:74:57:b9:aa:81:7c:8c:9d:
                    e2:37:7c:1c:42:3d:b7:3a:9b:90:56:5b:9e:a5:ae:
                    2f:a4:0b:91:11:ef:fd:2e:d3:09:b6:01:6b:88:ba:
                    e6:d8:ed:d0:31:c8:a1:e4:a1:bd:fd:9e:c7:88:73:
                    62:e0:b1:4a:b6:b7:b9:af:5c:25:1e:f9:67:23:ea:
                    5b:fe:ac:37:08:a0:22:52:95:5d:9a:88:c7:6c:d7:
                    c4:92:17:1a:78:51:6e:ca:bc:77:89:23:b6:c3:4e:
                    df:ff:b0:b4:dd:58:50:a5:b7:13:4f:82:36:9f:f3:
                    31:91:e8:d5:ba:81:e6:76:ea:9a:b2:8c:fe:aa:ea:
                    e3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5F:09:8A:7D:A4:67:81:9A:45:31:97:B5:B2:03:4A:82:55:2D:E0
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/97e8fbbada685ecda5bf22097b27ec6ac26d1771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:30:f7:b9:3e:58:2d:24:e9:5c:ce:7d:00:c9:a2:4c:7e:59:
         b5:f8:18:b7:44:dd:0b:d9:0e:9a:53:c9:20:46:bf:d3:2c:3d:
         a6:a6:33:33:76:28:ab:ea:8c:01:4c:53:dc:d8:73:a0:3b:ed:
         7f:bd:4a:1c:20:d5:37:5d:b9:dc:7f:c0:a9:93:14:60:5c:b3:
         9c:ef:78:d6:08:f2:8a:2e:c9:d3:f7:b2:de:31:31:f0:14:a4:
         3d:44:3a:d8:ab:f9:7e:a4:74:ba:61:68:51:8a:15:64:f2:85:
         46:27:13:e4:de:8b:49:d5:15:68:ec:20:9f:8a:fe:fa:e1:eb:
         66:90:48:d7:8f:a7:38:a8:6d:04:ab:d1:82:ed:5f:58:c9:56:
         9e:9b:db:19:84:ba:96:f4:de:0e:5e:6f:44:91:ca:0d:13:0c:
         4f:f2:77:c5:05:76:55:65:d6:ab:09:cb:7a:8d:2e:cf:33:47:
         33:20:50:27:a5:01:d0:d1:fe:b9:cd:53:50:62:34:ea:46:ad:
         0e:fc:5b:f1:e8:f3:5c:91:79:7e:91:20:7e:9e:94:7b:35:09:
         f6:c7:e7:49:b0:e4:47:d3:94:8b:b7:2d:9f:b9:59:1c:f8:be:
         a4:7b:22:01:b0:83:e0:33:39:9f:01:ac:f2:4a:f9:30:c2:e0:
         87:85:6f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----