Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a3d6ff749f4df4f5088847cc55c07c90449e7b4c.roa
File:                     a3d6ff749f4df4f5088847cc55c07c90449e7b4c.roa (raw, json)
Hash identifier:          Q0AnHcq3+t8xH1cQ+0M44HSKEac6t6EODhISujUwPwQ=
Subject key identifier:   29:60:3D:CE:A8:E4:6B:06:E4:4A:47:41:F8:3B:A2:16:7B:97:D2:BD
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0A87ED
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a3d6ff749f4df4f5088847cc55c07c90449e7b4c.roa
Signing time:             Fri 22 Jul 2022 00:01:16 +0000
ROA not before:           Fri 22 Jul 2022 03:00:00 +0000
ROA not after:            Sat 22 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690157 (0xa87ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 22 03:00:00 2022 GMT
            Not After : Jul 22 03:00:00 2023 GMT
        Subject: CN=a3d6ff749f4df4f5088847cc55c07c90449e7b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:1e:6a:54:b3:3d:13:fd:e1:b0:3b:b0:eb:
                    11:2c:fa:f4:fc:5f:23:0f:aa:59:78:da:18:37:fb:
                    1e:df:89:2b:02:4f:9b:2d:51:67:7a:87:b6:d1:c8:
                    f2:ba:0f:6d:be:f6:98:46:58:f9:21:df:79:33:9b:
                    3c:d2:04:54:9f:6a:96:2e:26:c9:f0:41:bc:3c:03:
                    de:64:44:fc:c7:f7:4f:4f:f2:39:94:57:27:1e:1f:
                    85:ee:81:2a:55:d1:dd:a3:2c:78:8f:42:c1:d9:83:
                    2d:c6:8d:40:c3:43:8f:b4:e8:3e:67:a5:af:f8:44:
                    0d:84:48:a7:85:34:63:a2:f9:17:82:32:e8:cb:65:
                    c3:51:1f:40:40:b4:fc:24:ca:02:18:5b:ed:e4:eb:
                    81:ac:81:fd:da:87:d1:35:75:11:a9:20:be:60:13:
                    2b:e6:b4:81:9a:59:26:22:33:be:bf:67:09:d3:0b:
                    74:0d:b3:66:ec:5a:38:99:03:54:3f:a2:59:85:0a:
                    fa:dd:43:8f:4f:df:37:a2:22:58:8a:67:a5:29:82:
                    1d:1f:a6:28:e1:31:af:42:57:bb:6f:64:a0:0f:70:
                    98:62:af:8e:ed:75:70:9a:2a:75:5d:f3:79:ee:fe:
                    cd:00:f6:f5:ce:20:cc:b4:3b:f6:f6:83:4d:28:f8:
                    8a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:60:3D:CE:A8:E4:6B:06:E4:4A:47:41:F8:3B:A2:16:7B:97:D2:BD
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a3d6ff749f4df4f5088847cc55c07c90449e7b4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:d6:60:3a:01:8a:68:3c:89:9b:ea:57:65:e0:50:54:e4:60:
         79:1a:69:0d:a5:07:de:ba:e4:69:96:d9:13:5a:34:8c:1c:fb:
         45:06:08:82:61:01:9d:21:38:57:17:36:da:06:6c:65:ec:b9:
         50:04:72:30:9e:78:09:ad:b7:ee:49:29:cd:d6:24:4c:63:62:
         e4:19:45:6c:bb:03:52:b5:c5:3a:9c:bb:a6:2f:b7:24:12:66:
         d2:b8:44:80:a8:30:2f:c8:35:06:50:91:88:d0:ac:9a:7c:17:
         b2:9c:32:cb:c8:96:19:c5:40:f2:72:88:80:cf:c6:d9:22:55:
         27:0f:3a:57:1e:ca:b7:d5:94:2c:fa:64:ab:20:9c:27:9d:5f:
         38:fb:9f:35:0f:2c:a3:76:63:eb:ec:be:65:1b:e0:41:17:cb:
         97:df:c4:33:f9:2a:62:24:29:eb:0a:b6:8b:c7:48:72:d3:af:
         17:81:aa:97:97:1e:28:e5:b1:29:fc:c0:43:93:08:3d:5d:a0:
         cc:b3:fc:9f:c4:4e:d4:8a:d0:b9:ad:f2:b3:cb:a8:f2:8b:a4:
         09:03:1c:9e:ff:bd:cc:ad:a6:a6:94:c2:a9:48:ab:a7:eb:1b:
         b5:9e:3d:1b:1b:a1:fd:ab:89:5e:34:43:21:9b:d0:fa:2f:0a:
         21:98:da:c8
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCoftMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNzIy
MDMwMDAwWhcNMjMwNzIyMDMwMDAwWjAzMTEwLwYDVQQDEyhhM2Q2ZmY3NDlmNGRm
NGY1MDg4ODQ3Y2M1NWMwN2M5MDQ0OWU3YjRjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAi5oealSzPRP94bA7sOsRLPr0/F8jD6pZeNoYN/se34krAk+b
LVFneoe20cjyug9tvvaYRlj5Id95M5s80gRUn2qWLibJ8EG8PAPeZET8x/dPT/I5
lFcnHh+F7oEqVdHdoyx4j0LB2YMtxo1Aw0OPtOg+Z6Wv+EQNhEinhTRjovkXgjLo
y2XDUR9AQLT8JMoCGFvt5OuBrIH92ofRNXURqSC+YBMr5rSBmlkmIjO+v2cJ0wt0
DbNm7Fo4mQNUP6JZhQr63UOPT983oiJYimelKYIdH6Yo4TGvQle7b2SgD3CYYq+O
7XVwmip1XfN57v7NAPb1ziDMtDv29oNNKPiKTwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFClgPc6o5GsG5EpHQfg7ohZ7l9K9MB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjL2EzZDZmZjc0OWY0ZGY0ZjUwODg4NDdjYzU1YzA3YzkwNDQ5ZTdiNGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAftZgOgGKaDyJ
m+pXZeBQVORgeRppDaUH3rrkaZbZE1o0jBz7RQYIgmEBnSE4Vxc22gZsZey5UARy
MJ54Ca237kkpzdYkTGNi5BlFbLsDUrXFOpy7pi+3JBJm0rhEgKgwL8g1BlCRiNCs
mnwXspwyy8iWGcVA8nKIgM/G2SJVJw86Vx7Kt9WULPpkqyCcJ51fOPufNQ8so3Zj
6+y+ZRvgQRfLl9/EM/kqYiQp6wq2i8dIctOvF4Gql5ceKOWxKfzAQ5MIPV2gzLP8
n8RO1IrQua3ys8uo8oukCQMcnv+9zK2mppTCqUirp+sbtZ49Gxuh/auJXjRDIZvQ
+i8KIZjayA==
-----END CERTIFICATE-----