Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a91428fb858e796d6b1fdfa527b303e70b7c426f.roa
File:                     a91428fb858e796d6b1fdfa527b303e70b7c426f.roa (raw, json)
Hash identifier:          UdbPs4CT1ofwlhWCaSMX57Dw+13fjywOTy4KEKXrJlc=
Subject key identifier:   EF:8C:61:06:81:D3:E2:88:2C:3F:52:C1:B4:F9:C6:86:CF:79:C0:09
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       08361B
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a91428fb858e796d6b1fdfa527b303e70b7c426f.roa
Signing time:             Sat 28 May 2022 00:39:04 +0000
ROA not before:           Sat 28 May 2022 03:00:00 +0000
ROA not after:            Sun 28 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538139 (0x8361b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 28 03:00:00 2022 GMT
            Not After : May 28 03:00:00 2023 GMT
        Subject: CN=a91428fb858e796d6b1fdfa527b303e70b7c426f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:73:ee:21:eb:a9:0f:4a:4f:05:1b:45:97:87:
                    54:97:b8:f6:21:4b:1f:36:c1:3a:ae:aa:a6:97:85:
                    fc:bf:cf:30:d5:8f:38:e8:95:16:70:a7:84:8d:48:
                    3e:ff:34:e4:1a:e7:2f:8b:1b:ee:40:8a:43:62:f1:
                    c3:c6:2a:a2:6c:65:44:96:40:85:d6:9d:7d:66:ea:
                    74:eb:a2:37:77:08:0f:0c:8e:2f:46:91:60:7b:9d:
                    7c:bc:d4:5c:00:12:91:2d:58:8f:7d:96:6a:40:b4:
                    19:43:82:f3:c9:a3:b3:b4:f5:65:44:98:8f:d7:93:
                    6e:19:71:55:ef:4c:8b:44:84:07:47:30:17:ea:ee:
                    52:3f:ad:a3:b3:9b:55:12:c0:05:ad:c1:0e:a3:8f:
                    bd:27:29:0f:9b:96:2e:cb:03:c2:6c:85:b3:a7:47:
                    22:ea:ce:7a:71:0b:15:eb:1c:d1:33:03:b4:b1:7b:
                    02:69:82:b3:54:31:f7:4e:b9:23:3f:e4:3c:75:8f:
                    98:75:a3:a6:4e:bb:19:aa:2c:c0:4d:73:89:6a:f0:
                    b1:c7:71:56:77:c3:7a:8c:e4:98:e6:06:eb:ad:cd:
                    7a:5d:be:9a:e2:93:c0:a0:19:69:eb:c3:b7:7e:2a:
                    ba:5d:51:5c:93:26:bf:a4:19:d1:b9:41:19:65:81:
                    89:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8C:61:06:81:D3:E2:88:2C:3F:52:C1:B4:F9:C6:86:CF:79:C0:09
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/a91428fb858e796d6b1fdfa527b303e70b7c426f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:65:ee:68:86:3c:c0:52:09:85:9b:36:3f:c0:18:97:a8:27:
         08:f0:eb:39:d3:b1:6d:5f:7f:4a:a3:51:c1:e1:34:3c:a4:2a:
         1b:83:8f:04:35:b4:a1:5d:33:e6:6b:bb:e4:f2:37:93:c1:4f:
         36:b8:11:77:23:76:5d:f7:7c:a9:38:14:6a:c8:68:20:7e:08:
         56:40:cc:fc:e7:6f:44:c5:47:ec:64:8c:e7:16:aa:27:11:02:
         ba:a7:f4:4d:7a:20:5e:04:ce:d8:79:22:10:ba:0b:dd:1a:45:
         83:36:33:a3:72:1e:3b:9d:73:a3:b0:d5:6a:89:bc:12:c9:cb:
         57:03:b0:91:e4:90:a9:5a:8c:24:34:e3:97:42:f8:24:78:c5:
         e6:60:39:a6:0a:72:f5:4c:28:21:75:a9:1a:b2:d1:cd:47:bd:
         57:1b:6d:c0:c5:49:4d:27:bd:7d:d2:fb:64:f0:dc:07:fe:6a:
         71:ad:95:68:91:18:07:cc:41:46:7c:44:31:85:56:01:c5:d1:
         2d:ec:33:f3:5f:13:98:85:54:f7:15:1f:ba:54:01:63:e7:2a:
         4b:22:25:c1:d2:38:44:3b:2a:ef:46:76:93:5c:3c:72:48:ec:
         90:a9:f4:22:0d:cd:df:9e:d4:01:e7:e7:e3:96:4b:5e:c7:e0:
         d6:34:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----