Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9b21ce070803dfa8a647d77a770af5d99bd59203.roa
File:                     9b21ce070803dfa8a647d77a770af5d99bd59203.roa (raw, json)
Hash identifier:          XM828p6zEWoFunPo4Yk2sST6o7x9EIbJ8x5GOTMZRLU=
Subject key identifier:   15:83:BD:FC:2F:62:B3:42:1D:90:46:24:68:52:FA:54:A7:96:7E:CF
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0BA68E
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9b21ce070803dfa8a647d77a770af5d99bd59203.roa
Signing time:             Tue 16 Aug 2022 01:26:52 +0000
ROA not before:           Tue 16 Aug 2022 03:00:00 +0000
ROA not after:            Wed 16 Aug 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763534 (0xba68e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Aug 16 03:00:00 2022 GMT
            Not After : Aug 16 03:00:00 2023 GMT
        Subject: CN=9b21ce070803dfa8a647d77a770af5d99bd59203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:23:71:c5:6f:e8:04:d1:c8:93:89:4f:bf:77:
                    82:f4:c0:e3:e1:c3:0b:3d:ca:aa:7a:4e:04:c9:76:
                    88:89:90:53:6e:02:90:3c:f4:85:7c:1a:1f:b8:99:
                    d5:b0:ba:ec:65:44:cb:ae:02:ad:a2:2b:50:7f:38:
                    03:f2:99:f5:8c:5e:f2:66:d4:07:d6:3a:5e:9d:15:
                    57:95:49:c8:81:6b:8d:80:e0:50:ad:7f:88:34:9a:
                    4b:92:b5:c9:5c:25:f5:1d:70:a5:eb:fd:42:70:41:
                    42:44:02:83:79:0b:fa:a4:10:f0:a9:31:be:40:68:
                    29:5a:25:e0:24:b2:7f:34:ea:56:13:bb:3b:cd:c9:
                    a1:d0:65:80:3c:33:5f:10:a2:c6:3e:3f:09:d4:b3:
                    c1:ad:2e:8a:c0:b4:2f:17:4a:a1:0d:20:c5:20:c2:
                    7d:cc:ba:d7:0b:55:3c:40:29:b9:a5:5c:4d:fd:28:
                    53:a6:32:99:d6:ee:33:6b:a9:32:63:76:ef:ef:c3:
                    93:31:43:4b:34:06:8c:08:48:5a:47:c6:05:71:bb:
                    2a:1b:4c:8b:de:74:19:18:61:45:1d:16:95:57:97:
                    a9:bb:5b:e1:c6:ad:8c:01:77:8b:19:17:86:c6:05:
                    be:13:09:7a:8f:5b:2c:b0:90:6f:02:e5:dd:ac:7a:
                    27:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:83:BD:FC:2F:62:B3:42:1D:90:46:24:68:52:FA:54:A7:96:7E:CF
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9b21ce070803dfa8a647d77a770af5d99bd59203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:cd:a6:d9:17:ee:08:f9:d1:9a:df:e8:ae:a3:d6:ee:25:5d:
         5e:29:7c:50:66:c0:8b:04:38:c2:84:83:ef:53:d3:fb:49:bf:
         36:c5:c8:38:25:a6:ab:70:61:e0:ea:1f:4b:94:cb:da:de:1e:
         dd:f2:91:0d:1f:2e:72:19:49:6f:6f:99:cc:fa:78:cc:9a:1b:
         50:4f:ad:f4:e6:ea:fd:fd:53:67:75:5e:b1:1d:48:8e:04:64:
         19:d3:56:67:a7:74:db:7c:66:00:71:08:bf:75:55:c7:25:37:
         da:83:ce:13:6d:2e:ec:41:f9:a6:b3:4d:ee:44:de:0c:b3:b1:
         ef:76:14:4c:c6:e6:74:d0:04:f3:88:37:11:9d:38:4c:0c:b8:
         0f:2f:7a:85:56:f4:17:80:6e:ec:90:e9:96:68:d8:6a:4c:85:
         6b:58:34:ad:32:d1:79:1a:46:06:6a:a1:9e:46:c4:db:c0:cd:
         a4:7d:3e:95:ef:5d:21:70:99:c9:e0:3b:ce:4c:0a:e9:a3:85:
         3b:64:be:74:7e:0a:a9:4e:70:6f:cb:74:0b:0a:2e:5a:7e:a3:
         12:74:fa:db:28:53:67:3b:ff:28:94:ea:6c:9f:4c:79:a5:7e:
         cb:63:08:cb:c5:33:77:90:ee:1c:8c:f3:c0:06:4e:87:c1:d2:
         20:99:25:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----