Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/997f990306537137f0bdcdf555fd1178bfb77844.roa
File:                     997f990306537137f0bdcdf555fd1178bfb77844.roa (raw, json)
Hash identifier:          h+xMdLmKkqil6kA8/7/XdueCz5R8yRUYSQd4sOrtSps=
Subject key identifier:   E7:65:3B:79:21:C5:92:C5:99:EC:70:A9:B1:23:25:70:03:DC:E0:27
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       03A31A
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/997f990306537137f0bdcdf555fd1178bfb77844.roa
Signing time:             Fri 18 Feb 2022 00:13:35 +0000
ROA not before:           Fri 18 Feb 2022 03:00:00 +0000
ROA not after:            Sat 18 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238362 (0x3a31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 18 03:00:00 2022 GMT
            Not After : Feb 18 03:00:00 2023 GMT
        Subject: CN=997f990306537137f0bdcdf555fd1178bfb77844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:a0:76:c0:e3:6f:03:47:32:63:de:35:8a:
                    9d:00:a3:a8:5f:db:6f:0e:75:3e:4b:6a:e6:f1:9b:
                    03:b8:c6:20:9c:a0:59:1b:2e:eb:4c:06:a4:db:0d:
                    53:ed:cc:55:70:57:f9:a7:77:8d:c0:b3:45:d9:0e:
                    15:71:88:03:07:f3:20:47:aa:66:d8:9c:d1:c7:9a:
                    eb:eb:88:89:25:56:fc:d9:aa:d4:41:80:09:56:02:
                    91:6c:97:b1:52:89:0c:75:36:8d:81:a2:ac:5d:77:
                    17:9e:8a:7f:91:8c:9a:c4:ac:6d:83:ef:0f:42:a3:
                    a8:5e:ba:1b:d5:69:d1:d2:92:e0:fd:97:36:c6:5e:
                    9a:4a:5b:91:14:3b:92:1a:3a:51:22:61:cf:39:1a:
                    1a:61:3a:26:75:43:c4:c5:63:31:94:5e:1c:f7:3a:
                    4e:bd:66:84:fc:92:b5:53:18:9e:00:41:f6:bf:86:
                    09:97:87:54:1e:13:92:09:fa:81:5f:44:53:0d:c4:
                    3d:7c:33:5a:02:c6:45:b1:a1:3e:ca:31:ff:15:b9:
                    52:f4:b8:ce:96:be:3c:4b:71:20:68:64:2a:f2:f4:
                    e9:e7:e2:2f:5f:31:05:3b:a9:ba:a2:f3:5c:f1:0c:
                    f2:62:c8:91:d5:94:55:13:d9:62:8a:c7:fb:a4:f9:
                    55:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:65:3B:79:21:C5:92:C5:99:EC:70:A9:B1:23:25:70:03:DC:E0:27
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/997f990306537137f0bdcdf555fd1178bfb77844.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:03:ae:f7:25:22:16:e4:63:5f:b1:ea:e7:25:05:72:39:d3:
         70:6a:49:57:58:8c:22:7e:4c:27:a1:01:12:2f:d9:aa:8a:19:
         a6:0a:ef:92:6e:03:88:9a:17:b9:ae:a9:ff:cc:fb:95:b2:d4:
         0d:80:20:ea:f5:05:4b:44:2e:bc:ff:b3:a2:27:c1:08:e4:04:
         e6:a7:88:5d:50:2e:3f:83:04:8e:9c:11:bf:bd:a1:c4:db:63:
         69:a3:84:5c:1e:2d:ac:5c:dc:08:87:a2:94:d5:23:92:f1:51:
         31:39:7c:e5:6a:b3:7d:b4:8c:9b:d1:60:cb:a6:9d:63:42:8d:
         f7:00:df:76:2b:9e:a6:2e:38:87:eb:c1:96:58:22:95:37:f6:
         bb:87:31:a2:01:7d:03:e2:30:4f:7a:fd:6d:0a:12:9a:19:7a:
         77:f9:0e:4f:c9:05:26:1e:00:3b:8d:38:44:7f:4b:43:87:a4:
         65:1e:b0:db:15:87:5a:53:37:02:5d:d0:36:23:c4:d1:ce:67:
         37:8e:99:67:2c:20:69:94:ed:7c:4b:9b:d1:c3:d7:f9:d8:1d:
         83:86:64:9b:b0:8d:ba:e4:6b:dc:c2:0a:45:0e:80:65:f4:1c:
         33:35:7a:48:0c:3b:72:66:f7:1a:1e:90:b5:35:5f:aa:92:13:
         65:7b:f2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----