Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/aa4070458c906f969a7939049587163e594ce4db.roa
File:                     aa4070458c906f969a7939049587163e594ce4db.roa (raw, json)
Hash identifier:          oOTP+qJRvLBcA3vUkSwbFLXsUu3NY+L5THM9yDt8Xyo=
Subject key identifier:   31:F3:50:7A:C9:7C:B5:49:53:22:3A:41:3F:3C:5C:AB:4B:BC:AF:7B
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0591A5
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/aa4070458c906f969a7939049587163e594ce4db.roa
Signing time:             Thu 31 Mar 2022 03:43:52 +0000
ROA not before:           Thu 31 Mar 2022 03:00:00 +0000
ROA not after:            Fri 31 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364965 (0x591a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 31 03:00:00 2022 GMT
            Not After : Mar 31 03:00:00 2023 GMT
        Subject: CN=aa4070458c906f969a7939049587163e594ce4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:47:17:c9:98:74:76:49:86:26:69:4a:78:72:
                    cc:1c:e5:4b:e6:8e:77:01:a0:97:6e:18:40:85:db:
                    48:33:a8:fe:a6:13:fe:80:0e:f7:b2:c1:d8:5b:86:
                    01:6e:75:f4:82:7c:fc:95:9e:26:f4:85:e1:24:e2:
                    92:ee:85:91:32:f2:00:36:9c:fb:88:cc:4a:d1:ce:
                    6b:b0:ee:b6:e5:93:5e:ef:a9:b0:4a:b0:1f:4d:db:
                    b3:3b:3a:95:25:53:48:f7:0d:36:6a:35:19:97:c9:
                    22:30:ac:25:04:eb:e6:4b:bd:56:36:9e:20:d5:16:
                    7c:96:41:2f:1f:ae:df:6c:81:76:bb:8e:90:60:89:
                    6b:26:ba:62:39:65:2c:d7:37:d4:01:b1:1e:cf:02:
                    07:13:e8:18:8b:18:ea:fa:b7:9e:55:4b:d3:e2:f2:
                    33:03:76:f1:20:c8:b0:a4:52:39:4c:d3:34:bd:9d:
                    3a:59:82:a8:bb:51:6d:c9:1d:1c:29:23:cb:c9:54:
                    99:bb:9a:e7:72:3c:3f:c7:7f:27:25:9e:ba:e4:3e:
                    ec:b1:7e:77:3b:d8:2e:cf:5e:05:6d:4b:47:78:07:
                    5c:21:a0:c7:4f:a2:46:59:1e:8f:84:c1:d9:27:a7:
                    1e:3b:b9:81:81:a0:82:2f:0c:c1:42:93:ef:b9:09:
                    77:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F3:50:7A:C9:7C:B5:49:53:22:3A:41:3F:3C:5C:AB:4B:BC:AF:7B
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/aa4070458c906f969a7939049587163e594ce4db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:ed:3a:1b:d2:58:d1:67:ee:0a:78:e5:f5:3d:9f:23:f1:8d:
         33:23:f3:5a:c5:cc:f7:97:a7:92:f2:e6:82:25:43:33:a6:47:
         44:8e:9d:68:63:cc:b9:47:37:41:21:df:39:e1:72:43:be:01:
         49:ba:d1:d5:a7:e0:1e:bd:d1:10:19:ce:0d:6c:0c:46:11:d5:
         0a:d8:93:e5:b9:72:af:57:2d:2d:96:31:0b:1f:42:d4:d7:cd:
         db:5d:66:8a:50:d9:37:d8:af:80:d7:3f:fb:dd:ce:29:41:25:
         97:29:85:a0:f6:78:9e:2c:27:a1:7c:a8:ed:ab:c8:1e:e7:5c:
         8a:88:41:c0:c3:0e:56:fc:68:a7:9b:d9:95:0c:d9:90:e4:00:
         e2:07:c4:f6:a4:43:6c:80:1c:32:87:1d:6c:a4:26:44:2a:6e:
         60:81:a9:c0:37:ea:86:34:10:f7:c1:18:29:fb:c2:bc:0a:41:
         41:9b:fe:b6:59:91:63:15:fa:4c:f1:a7:e4:4c:f1:9b:df:08:
         20:1d:61:43:7b:15:fc:ff:c4:68:ee:c7:23:b0:87:59:e0:8b:
         5e:f4:62:09:6d:4d:f4:38:2c:d8:69:5b:d1:b4:12:eb:ca:4b:
         ad:62:df:ad:08:a2:2e:a9:6e:64:f2:b4:2f:4e:31:17:05:36:
         a7:e9:b7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----