Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a3a45b06437f2a68f4e319f5b5b2629b18546803.roa
File:                     a3a45b06437f2a68f4e319f5b5b2629b18546803.roa (raw, json)
Hash identifier:          clsx2hvxNW9+JnaHKNXy1S/tdAkk62KZQJykI3+bioM=
Subject key identifier:   C2:0D:5F:74:AA:0C:D0:B0:1D:D2:B0:A2:59:4D:8B:CA:ED:6E:F4:46
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0348E1
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a3a45b06437f2a68f4e319f5b5b2629b18546803.roa
Signing time:             Thu 10 Feb 2022 01:18:05 +0000
ROA not before:           Thu 10 Feb 2022 03:00:00 +0000
ROA not after:            Fri 10 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215265 (0x348e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 10 03:00:00 2022 GMT
            Not After : Feb 10 03:00:00 2023 GMT
        Subject: CN=a3a45b06437f2a68f4e319f5b5b2629b18546803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:e6:37:d3:d0:6b:22:2f:05:b9:d4:fd:9b:
                    40:52:eb:b6:94:1f:8d:8f:78:ff:71:21:4f:57:17:
                    1e:2b:6f:ab:7d:e6:ed:f6:70:26:8c:7e:e2:61:42:
                    c0:fd:30:75:7c:16:71:f6:a3:d5:cc:1a:fd:3c:0f:
                    4d:dd:3c:80:a7:9a:8c:a4:eb:d0:ee:0c:01:97:e8:
                    6f:cd:da:6d:21:5f:54:29:71:64:46:ae:4a:b7:47:
                    0b:e9:ff:9d:1d:1c:a2:7d:b0:96:ae:7d:b2:19:be:
                    17:6d:f8:f5:6c:67:32:e3:0b:ad:77:2c:fe:af:74:
                    46:8a:b0:d5:60:63:b4:5a:59:64:c1:62:33:dc:de:
                    a7:9f:6f:b0:f6:c2:1a:a1:d2:d8:62:62:d4:66:b8:
                    1a:0a:07:ad:43:e3:66:aa:cd:81:f5:2e:c4:ff:4c:
                    b4:ac:99:3b:10:46:d3:ce:22:85:77:c7:f5:9b:3c:
                    21:5d:3d:be:83:3a:3e:44:40:f8:69:56:0f:b5:3b:
                    a4:76:a0:ee:c1:94:61:5b:76:c1:69:07:0d:20:eb:
                    5f:0d:c9:13:cb:ed:e9:9e:e8:d1:fd:bb:7d:d9:08:
                    e8:b4:6d:ba:32:cd:28:df:39:72:45:7f:69:85:b1:
                    d4:ca:2e:78:f2:a7:ae:fe:f0:39:77:2f:79:95:09:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:0D:5F:74:AA:0C:D0:B0:1D:D2:B0:A2:59:4D:8B:CA:ED:6E:F4:46
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a3a45b06437f2a68f4e319f5b5b2629b18546803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:cd:c6:96:9e:29:83:a3:a1:fe:8d:46:0c:70:d8:b8:d5:91:
         23:86:a1:89:df:7b:72:55:0a:d2:26:53:02:38:ac:a0:cd:f8:
         bd:2a:d2:0b:59:a9:be:f7:e7:b2:0f:87:94:51:21:a9:2f:f6:
         02:c2:b0:5a:7a:5a:1c:ba:09:73:6f:10:be:07:ce:16:83:ad:
         77:4e:f1:39:d0:2e:3e:c8:6b:dd:8b:ef:cf:cf:00:c2:04:52:
         f9:60:a5:c9:03:ca:08:a9:b4:41:32:03:e6:6a:78:a8:80:c0:
         4a:5f:38:89:31:29:94:27:43:1d:28:fe:14:b7:e6:b6:15:5b:
         22:d6:20:82:e5:3e:26:97:d6:52:01:cd:f2:dd:5c:71:52:53:
         6c:93:dd:42:ea:e0:ab:77:4b:50:ae:5b:3c:60:ab:52:ed:10:
         a4:de:11:c3:97:7d:cd:14:4a:da:d9:02:d1:51:51:f5:e7:ec:
         74:76:25:c7:a5:f1:4e:f5:93:53:38:42:76:c0:e4:ab:9b:d3:
         7b:bd:34:ac:f0:29:1f:82:f9:8e:e4:6c:b7:dc:0b:ae:c6:fb:
         c4:81:c4:73:0e:9c:88:50:03:09:cb:54:69:c6:02:79:af:05:
         f5:48:93:ce:af:2b:9e:ca:41:8f:b8:cc:7b:46:56:0f:f1:5a:
         01:b6:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----