Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9e95942fb1eb4ab088456c0fdf7a295255b54e29.roa
File:                     9e95942fb1eb4ab088456c0fdf7a295255b54e29.roa (raw, json)
Hash identifier:          36F4CBV7FK6aZhB9nRp1uDaUk3pIbDFDwSgiEYEUT+c=
Subject key identifier:   F0:A7:D3:27:47:04:A0:49:3F:18:69:B3:86:54:43:9B:7B:DB:56:75
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       05540A
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9e95942fb1eb4ab088456c0fdf7a295255b54e29.roa
Signing time:             Sat 26 Mar 2022 02:43:15 +0000
ROA not before:           Sat 26 Mar 2022 03:00:00 +0000
ROA not after:            Sun 26 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349194 (0x5540a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 26 03:00:00 2022 GMT
            Not After : Mar 26 03:00:00 2023 GMT
        Subject: CN=9e95942fb1eb4ab088456c0fdf7a295255b54e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:49:f4:8d:0b:69:59:ff:57:7b:a4:60:38:1f:
                    2e:e0:24:46:ff:93:2f:fb:ec:c0:b3:9e:b9:73:89:
                    e4:1c:68:dd:de:11:b9:b4:9a:73:db:8d:2e:bb:8d:
                    b9:e1:d7:5c:04:3d:30:12:46:72:d6:39:cb:4e:1f:
                    2b:4e:6d:d4:d3:97:39:75:31:6d:6d:1d:62:a5:2f:
                    9d:9c:fc:10:1f:13:1d:f7:5f:ae:d2:26:f3:c4:99:
                    da:3a:6e:c1:af:ad:3e:82:e9:a4:30:cf:19:08:4b:
                    a1:c5:37:d2:26:ca:18:3a:ad:af:79:ed:4c:50:f6:
                    99:68:c1:33:37:81:ad:ff:47:dc:1f:f8:9a:51:9d:
                    2e:d1:af:64:2d:a4:62:65:87:fd:97:07:da:f0:02:
                    73:0b:72:ab:51:74:5c:7e:d5:25:d2:06:11:fc:06:
                    0e:71:71:af:83:4f:b9:87:f6:a9:8a:7f:2f:6e:63:
                    f7:e8:07:d4:30:74:87:20:23:da:ac:27:d1:53:2b:
                    d8:23:7d:8e:74:e4:88:50:49:b1:8b:29:02:54:e2:
                    b7:78:7b:01:ec:38:f2:d4:38:8e:13:c9:26:7d:cc:
                    b0:b1:0b:ca:c0:56:2c:a2:9f:97:f4:8c:35:e9:67:
                    51:4b:53:81:4a:73:00:f2:21:fe:31:ad:56:26:62:
                    f1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:D3:27:47:04:A0:49:3F:18:69:B3:86:54:43:9B:7B:DB:56:75
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9e95942fb1eb4ab088456c0fdf7a295255b54e29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:6c:fe:82:31:53:93:ba:d9:63:1b:82:cd:a4:04:ac:c2:da:
         b3:7d:bc:d7:2e:54:86:86:e4:9b:de:84:ca:c2:17:e0:b7:f1:
         92:84:47:76:e4:b9:76:91:56:ea:14:e9:16:50:d1:2c:73:0e:
         8a:2a:12:7d:68:21:d3:7f:60:86:cd:08:35:23:d8:83:77:8e:
         54:48:0c:35:8e:06:74:e2:3d:f9:d8:c1:8a:fa:d0:98:cb:bd:
         94:be:93:75:ee:a8:a4:22:46:be:e1:00:6a:7e:8a:fe:d7:ae:
         11:57:53:ec:a8:e6:c9:7e:71:a2:ec:79:c3:3d:de:6b:f2:e2:
         a3:3c:06:c9:42:46:4c:1b:f8:d2:8b:05:2f:23:4f:3c:5d:e9:
         9d:f9:c4:ee:8a:34:71:a6:3c:54:77:11:de:fe:6e:2d:2e:9c:
         ee:e5:ac:24:c0:79:92:57:50:11:7f:93:c9:b0:b9:10:02:09:
         73:06:25:e0:57:76:5e:98:94:ac:53:b4:ad:37:c7:b6:49:db:
         c1:df:67:cc:13:8d:f0:a1:a0:71:19:fb:89:9c:bb:66:23:41:
         7a:b0:2e:4a:2b:38:7b:1d:9d:d2:5d:b8:c1:08:c9:b7:90:e9:
         34:62:52:c9:ee:b6:82:03:b1:d9:d2:71:a3:8d:f6:bf:88:71:
         dd:37:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----