Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9f3fda87d5757a6333d5b83077f529c744a94215.roa
File:                     9f3fda87d5757a6333d5b83077f529c744a94215.roa (raw, json)
Hash identifier:          qXYw+OFCdj3KS7dX7PBV6xDCV8/qtHIu/n1Wl7Lp754=
Subject key identifier:   F2:4B:CA:47:E8:1E:F0:F8:8A:CB:7F:45:2B:C0:0B:3A:4B:EB:19:2D
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       09794C
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9f3fda87d5757a6333d5b83077f529c744a94215.roa
Signing time:             Mon 27 Jun 2022 00:55:19 +0000
ROA not before:           Mon 27 Jun 2022 03:00:00 +0000
ROA not after:            Tue 27 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620876 (0x9794c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 27 03:00:00 2022 GMT
            Not After : Jun 27 03:00:00 2023 GMT
        Subject: CN=9f3fda87d5757a6333d5b83077f529c744a94215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7e:41:5c:2e:9c:9e:31:10:83:84:4d:bd:51:
                    11:16:70:74:1d:89:99:30:68:50:f7:a3:4f:26:21:
                    1a:55:c8:a6:fa:7a:a8:1c:e6:44:96:f7:a4:b0:a5:
                    56:c0:6c:08:f9:21:e9:d0:2a:39:a5:c8:20:55:52:
                    5d:e2:54:dc:68:b7:20:42:cd:1c:66:64:07:e4:2d:
                    93:f8:df:db:05:13:39:5f:7d:f6:97:8d:f6:b3:dd:
                    de:39:d9:a3:f2:68:ae:cd:7e:f6:6c:66:a3:9b:4e:
                    19:40:25:25:a2:9c:f5:7d:11:88:d6:06:42:60:f6:
                    36:32:e4:f7:7c:f4:90:42:0e:2c:9b:e5:39:d3:3d:
                    32:11:b1:07:87:b7:77:39:eb:b8:3e:2d:d9:2e:56:
                    30:1b:e6:bd:1d:8d:c9:df:fe:ec:16:b8:fa:3c:db:
                    b0:15:d1:e3:04:b5:cf:f0:82:60:0d:ab:20:4a:f9:
                    a8:48:a1:3a:c3:63:ee:06:18:73:cf:4d:13:36:3c:
                    3c:9a:41:bb:2e:4a:68:93:39:8a:0f:58:68:81:14:
                    2f:1e:a1:d1:f9:67:b0:76:a8:d8:dc:fa:b9:03:b6:
                    57:df:a2:a8:82:e4:c2:51:23:8a:f5:d7:8e:ff:0c:
                    d5:2e:2c:e9:92:31:b4:4b:e6:82:9d:cf:64:7c:cc:
                    26:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:4B:CA:47:E8:1E:F0:F8:8A:CB:7F:45:2B:C0:0B:3A:4B:EB:19:2D
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/9f3fda87d5757a6333d5b83077f529c744a94215.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:fb:4d:ac:8c:51:e7:14:ed:57:e3:57:32:4e:01:bb:b2:b2:
         c3:0d:f7:7f:44:fd:61:59:81:ee:b8:ad:9f:43:73:fc:a6:01:
         64:bd:ad:74:ba:ec:0c:bf:53:91:ce:b3:a2:67:c1:7e:c8:64:
         ac:41:c5:49:48:1e:74:b8:ff:40:09:ff:5f:ab:cb:4b:0c:d5:
         1b:7f:d9:08:62:e8:44:24:91:f1:bb:87:9e:ef:c7:1d:ac:fc:
         fe:f9:f7:b2:14:9d:a8:e0:60:16:d5:0b:21:a9:80:7a:08:54:
         40:24:7b:f4:41:43:bd:ff:5b:8c:a3:6b:f2:14:0a:7e:d9:c0:
         85:3d:05:53:8f:9e:1e:f8:00:33:b9:60:2d:b3:f3:c8:34:da:
         07:9f:5f:11:29:d6:51:b1:55:dd:42:9e:27:0a:d6:f9:46:08:
         dc:c0:62:55:69:84:9b:e1:47:9b:1e:08:c4:c6:7d:ef:07:ec:
         7c:a0:2c:74:10:5e:07:7a:ed:db:5a:e6:19:cd:1f:7d:ed:70:
         a9:8c:e7:a1:39:51:90:ef:d4:97:0e:96:0e:43:5f:f1:3c:3c:
         ae:7e:9a:10:b6:62:15:db:9a:12:e6:67:91:7b:9b:9f:08:84:
         b6:74:e6:e6:58:c9:1a:73:52:20:eb:32:f8:f9:0b:d7:63:63:
         85:7f:6e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----