Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9824eadfae0f23feb53a52f5c062f0e3f7cd0d2d.roa
File:                     9824eadfae0f23feb53a52f5c062f0e3f7cd0d2d.roa (raw, json)
Hash identifier:          MPNT//dOkD93Bb776lrzb4t+Q8Y9k8h8MQMlf6WKSYA=
Subject key identifier:   E9:6A:5B:72:93:B2:A2:63:F1:46:A7:69:DD:8B:87:2E:12:A3:B4:D3
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       04C354
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9824eadfae0f23feb53a52f5c062f0e3f7cd0d2d.roa
Signing time:             Mon 14 Mar 2022 01:34:30 +0000
ROA not before:           Mon 14 Mar 2022 03:00:00 +0000
ROA not after:            Tue 14 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312148 (0x4c354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 14 03:00:00 2022 GMT
            Not After : Mar 14 03:00:00 2023 GMT
        Subject: CN=9824eadfae0f23feb53a52f5c062f0e3f7cd0d2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d0:23:f7:b1:36:8a:fe:b5:1f:c1:77:09:6a:
                    85:b6:c7:ec:b5:49:4c:0e:23:75:0d:2b:b1:d7:44:
                    8b:2b:a4:2d:b3:88:07:5e:f6:ec:48:ae:c6:cf:9c:
                    14:f1:9c:63:76:d2:23:15:dd:4d:81:b5:22:bf:79:
                    27:ad:50:72:19:37:93:29:df:8a:95:86:96:1a:5c:
                    d4:17:19:41:e6:bc:4c:a3:56:0f:0e:ad:a9:20:6b:
                    c2:a7:b7:21:c1:13:d2:47:e3:bf:a6:66:82:30:a8:
                    91:c2:53:53:c0:10:c5:19:af:55:eb:b1:4f:97:37:
                    68:78:78:69:3a:86:91:26:35:4e:ab:27:39:a4:f2:
                    99:f2:5f:ab:1d:dd:e1:42:7c:d2:d5:dd:8a:98:25:
                    e6:25:38:60:66:37:89:36:f5:f7:fe:7f:46:b1:2d:
                    13:7e:c3:38:b9:e8:1d:39:42:bd:7e:e7:b0:0f:0b:
                    cf:57:fc:fb:b9:03:cb:ea:c4:8e:64:70:fc:56:22:
                    9f:70:7e:3f:9d:77:54:1d:e8:f6:ae:c8:0d:00:02:
                    68:7c:c1:55:1e:f5:17:66:83:be:ae:3f:bc:4b:fe:
                    f1:e7:33:30:8f:65:b1:54:8f:92:30:b2:e6:bb:42:
                    bc:cc:fe:9c:0d:5b:6e:d7:bf:13:00:de:39:43:d0:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:6A:5B:72:93:B2:A2:63:F1:46:A7:69:DD:8B:87:2E:12:A3:B4:D3
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9824eadfae0f23feb53a52f5c062f0e3f7cd0d2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:70:41:d4:eb:30:1d:e2:5d:96:0f:c1:21:ce:91:62:5d:ac:
         46:15:b8:e7:4f:f2:8c:95:d0:d1:66:28:61:6c:61:14:9d:9c:
         b5:11:bc:77:df:ca:3a:82:4d:4a:76:ee:01:2a:08:49:d6:6b:
         5a:2d:c7:d7:91:34:8f:b3:6c:16:42:b7:c7:b9:36:08:fa:2e:
         06:ce:6b:cd:fe:50:a2:95:c9:22:d9:a1:11:2f:8f:f8:90:c1:
         20:a5:97:ae:7b:ed:4d:e4:6a:47:6e:78:e6:fd:fd:61:64:cc:
         cd:d6:42:75:e8:a6:a3:93:02:60:fa:aa:f0:aa:18:06:5f:46:
         d6:da:d2:da:f1:26:46:69:0e:42:47:36:e1:7f:35:17:72:f5:
         7b:0d:31:51:67:b6:51:ca:6d:62:a1:10:cd:72:ce:39:de:48:
         f8:42:66:bc:6f:24:ca:d2:88:c7:ce:d3:1a:34:1b:7c:57:57:
         19:60:22:24:ef:48:5a:69:44:4d:ff:eb:a7:0e:a8:92:b8:b5:
         0b:d3:27:94:ca:26:3e:b9:0c:82:63:c5:04:c6:75:80:4a:0f:
         f4:42:fe:5d:65:6a:26:fa:75:be:cd:11:92:97:10:b6:0d:7a:
         cf:c3:fb:b7:9b:08:05:92:56:21:ff:15:cb:60:af:28:3e:00:
         1e:29:c8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----