Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a514728d4eb6e1be018d0b2e178f6f4c2884dc97.roa
File:                     a514728d4eb6e1be018d0b2e178f6f4c2884dc97.roa (raw, json)
Hash identifier:          mxPPjiUGAkgofAd9z+l76iGnavHgfd2n5W9UqgqCuHw=
Subject key identifier:   59:78:88:3E:D7:73:9E:52:A4:74:C1:BF:4E:EA:AA:5A:48:7A:1F:C3
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0831DB
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a514728d4eb6e1be018d0b2e178f6f4c2884dc97.roa
Signing time:             Fri 27 May 2022 04:11:26 +0000
ROA not before:           Fri 27 May 2022 03:00:00 +0000
ROA not after:            Sat 27 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 537051 (0x831db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 27 03:00:00 2022 GMT
            Not After : May 27 03:00:00 2023 GMT
        Subject: CN=a514728d4eb6e1be018d0b2e178f6f4c2884dc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:10:de:d1:44:c3:70:7f:20:31:c9:4b:1e:59:
                    eb:14:e9:24:9f:7e:e7:ac:69:7f:33:b3:c1:cb:a1:
                    e8:93:45:34:b8:f9:cc:f1:00:97:1d:58:be:78:e4:
                    bb:f5:d5:cf:fd:5d:56:6d:70:dd:77:5f:31:cf:a1:
                    66:d0:ee:c4:07:1d:2d:43:ec:83:88:08:68:66:98:
                    01:7a:3f:5f:a5:2e:72:40:18:d3:b5:d7:56:5c:ee:
                    5a:65:09:9f:16:69:63:dc:91:4e:7d:bc:f4:bd:9b:
                    a7:fa:ab:fc:d4:cd:55:75:bd:71:25:11:d7:48:36:
                    1c:3e:c1:a9:62:94:c8:0b:fc:6a:78:f3:ee:8a:a5:
                    19:b8:19:25:8f:e9:e1:09:81:1d:b3:f8:c2:49:6d:
                    f5:18:f1:69:27:a4:5a:04:f5:64:de:ac:b2:1c:d1:
                    f0:07:e0:85:31:65:ef:8f:dc:db:11:48:e6:61:72:
                    1a:9c:95:0c:33:1a:09:2a:48:a0:1f:78:b4:d7:dd:
                    3a:a5:d0:13:47:6d:a0:8c:30:b7:d7:d3:6a:da:03:
                    13:a6:6d:32:44:41:34:0c:37:33:44:24:fb:3d:02:
                    be:9b:44:84:eb:11:dc:4a:a4:fb:2c:10:3f:17:8e:
                    fb:a1:f0:e5:a9:a9:c2:9e:d6:bf:fb:7b:3e:4e:f6:
                    13:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:78:88:3E:D7:73:9E:52:A4:74:C1:BF:4E:EA:AA:5A:48:7A:1F:C3
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a514728d4eb6e1be018d0b2e178f6f4c2884dc97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:19:7e:ab:18:47:4c:12:a6:91:ab:ae:59:89:55:2e:f8:80:
         de:8f:63:6e:d0:90:a6:76:f5:b9:58:f0:77:c4:f8:a8:08:0c:
         78:b3:b7:9a:a6:2c:85:dc:52:f0:ad:ad:6b:4b:81:e3:44:cc:
         49:c2:b4:99:b8:c6:c6:31:26:02:39:9a:b7:39:74:35:1a:f6:
         8c:d7:e9:89:d5:87:4f:bb:46:fc:50:42:7b:27:36:e5:f8:10:
         ee:a9:4b:c6:cc:6d:f5:d2:40:90:0e:43:ee:2b:9d:18:28:3c:
         c6:d5:ec:ad:15:b9:f7:95:a8:1f:32:33:f1:ec:ef:6c:cc:cc:
         c3:0e:8c:01:1c:4a:32:73:91:ef:3f:92:e1:2d:b6:dd:36:4b:
         bf:36:43:37:4b:c9:c3:fa:55:5c:e5:7a:8c:20:c1:5d:c8:fe:
         dd:18:b2:d8:85:f6:85:51:0c:1b:b5:cd:02:6f:a3:8e:6c:58:
         4b:f6:69:be:16:3f:ad:0d:8e:4d:26:4c:cd:f3:2c:15:70:3f:
         4f:da:67:a7:88:b4:dc:f2:85:7f:b2:ba:43:08:7f:27:0e:7c:
         b9:a2:6b:45:e2:bb:e0:04:23:b4:3b:54:d2:a4:b2:cf:b6:81:
         95:2d:f2:3c:9b:c7:c1:0c:f7:2b:37:f5:a5:9f:95:19:88:9a:
         6a:fa:ac:eb
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCDHbMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNTI3
MDMwMDAwWhcNMjMwNTI3MDMwMDAwWjAzMTEwLwYDVQQDEyhhNTE0NzI4ZDRlYjZl
MWJlMDE4ZDBiMmUxNzhmNmY0YzI4ODRkYzk3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAhxDe0UTDcH8gMclLHlnrFOkkn37nrGl/M7PBy6Hok0U0uPnM
8QCXHVi+eOS79dXP/V1WbXDdd18xz6Fm0O7EBx0tQ+yDiAhoZpgBej9fpS5yQBjT
tddWXO5aZQmfFmlj3JFOfbz0vZun+qv81M1Vdb1xJRHXSDYcPsGpYpTIC/xqePPu
iqUZuBklj+nhCYEds/jCSW31GPFpJ6RaBPVk3qyyHNHwB+CFMWXvj9zbEUjmYXIa
nJUMMxoJKkigH3i01906pdATR22gjDC319Nq2gMTpm0yREE0DDczRCT7PQK+m0SE
6xHcSqT7LBA/F477ofDlqanCnta/+3s+TvYThwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFFl4iD7Xc55SpHTBv07qqlpIeh/DMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjL2E1MTQ3MjhkNGViNmUxYmUwMThkMGIyZTE3OGY2ZjRjMjg4NGRjOTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAeBl+qxhHTBKm
kauuWYlVLviA3o9jbtCQpnb1uVjwd8T4qAgMeLO3mqYshdxS8K2ta0uB40TMScK0
mbjGxjEmAjmatzl0NRr2jNfpidWHT7tG/FBCeyc25fgQ7qlLxsxt9dJAkA5D7iud
GCg8xtXsrRW595WoHzIz8ezvbMzMww6MARxKMnOR7z+S4S223TZLvzZDN0vJw/pV
XOV6jCDBXcj+3Riy2IX2hVEMG7XNAm+jjmxYS/ZpvhY/rQ2OTSZMzfMsFXA/T9pn
p4i03PKFf7K6Qwh/Jw58uaJrReK74AQjtDtU0qSyz7aBlS3yPJvHwQz3Kzf1pZ+V
GYiaavqs6w==
-----END CERTIFICATE-----