Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ab553755f840aef6640b34c6c4af6e93c90f0ce6.roa
File:                     ab553755f840aef6640b34c6c4af6e93c90f0ce6.roa (raw, json)
Hash identifier:          7c+BrZ1wjslgGqcCYrvPw7ffDQ3wgvhAitHxmSh7Tgw=
Subject key identifier:   96:1C:8C:48:BE:E8:EA:E8:34:CB:08:43:64:86:75:1B:DC:2B:B4:DD
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0EB253
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ab553755f840aef6640b34c6c4af6e93c90f0ce6.roa
Signing time:             Thu 20 Oct 2022 04:55:53 +0000
ROA not before:           Wed 19 Oct 2022 03:00:00 +0000
ROA not after:            Fri 20 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 963155 (0xeb253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 19 03:00:00 2022 GMT
            Not After : Oct 20 03:00:00 2023 GMT
        Subject: CN=ab553755f840aef6640b34c6c4af6e93c90f0ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:c7:05:b7:15:dd:dd:48:2f:b2:b5:d2:95:
                    21:a7:ad:09:61:44:a8:53:52:76:5c:8b:e8:3a:62:
                    1e:30:1f:de:2d:e3:52:52:35:33:40:48:a0:0e:26:
                    2f:af:bd:2d:e9:7a:e6:76:d1:46:85:44:65:45:e4:
                    87:09:84:08:e9:cd:37:0c:c0:ae:d7:4c:09:bd:a2:
                    01:60:3b:ba:c9:e3:34:86:ac:7e:bc:fb:a5:a5:f7:
                    29:cc:e5:58:ce:0e:2c:8c:c7:1c:b7:c6:34:e5:5f:
                    19:6d:c6:c8:d7:4b:34:57:96:8f:80:8f:56:87:4f:
                    85:b8:e6:6c:26:d0:8a:ae:8a:59:21:0f:e2:4b:ca:
                    af:22:03:70:c5:af:5c:d4:c3:14:d4:17:06:8c:c6:
                    73:ff:0a:cb:e0:97:8a:9f:f6:82:d4:0f:f7:c0:4b:
                    cd:20:d6:a0:52:b8:61:ba:e3:81:02:74:0b:2e:81:
                    ea:62:fc:2c:bd:d3:0a:1b:73:87:28:79:77:0f:ac:
                    e0:3e:a0:b1:17:91:33:05:dd:e1:ba:3e:ac:73:4c:
                    c1:fc:97:9e:00:7c:4b:14:df:f2:f6:1e:5f:af:91:
                    5b:0e:3e:ad:9f:d5:5e:af:bd:81:38:e7:73:86:52:
                    6f:87:f9:a2:83:1b:f5:ef:7b:06:be:6a:25:93:08:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1C:8C:48:BE:E8:EA:E8:34:CB:08:43:64:86:75:1B:DC:2B:B4:DD
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ab553755f840aef6640b34c6c4af6e93c90f0ce6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:b6:c8:52:65:d9:83:88:70:9d:f7:60:78:c0:e8:bb:80:d6:
         05:14:4a:4d:5d:e6:9d:41:12:b8:85:b3:0d:9b:5f:34:c6:cd:
         c9:ee:47:f2:a2:ad:9f:dd:87:0d:28:62:50:ba:fa:3d:5b:65:
         ea:1e:dc:a9:3a:88:f8:34:e0:bb:87:80:fd:bc:da:26:5e:d6:
         40:5f:84:2d:fc:aa:b8:78:2e:24:d5:6c:7b:14:3c:fc:59:f1:
         d2:1d:cd:2c:67:7c:32:a7:4d:00:e1:c5:6b:67:96:75:28:43:
         76:00:ab:19:da:3e:88:a2:b0:3f:3c:a8:5e:2f:a0:43:b9:23:
         0d:7b:7b:b6:6c:14:ca:d3:e8:f1:b6:36:10:58:e7:fc:fe:40:
         ca:a5:e5:c1:f8:6d:77:a4:83:65:0d:93:bb:1a:e2:f4:04:72:
         4d:78:4e:7e:ce:29:78:5b:c8:c2:02:2a:a8:84:25:ce:10:d7:
         af:22:ff:03:56:49:8e:0e:ad:4e:98:1a:76:05:a7:ad:f8:c4:
         e7:0c:75:f3:7e:a2:60:3b:69:67:57:48:97:4a:0a:70:ec:1e:
         1b:e5:6b:5a:da:c0:19:ee:53:87:d6:f9:3c:bd:a2:e1:f3:13:
         c8:26:21:93:bc:b3:9e:53:9b:75:b7:c7:68:da:43:01:4e:80:
         6c:89:98:53
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDDrJTMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIxMDE5
MDMwMDAwWhcNMjMxMDIwMDMwMDAwWjAzMTEwLwYDVQQDEyhhYjU1Mzc1NWY4NDBh
ZWY2NjQwYjM0YzZjNGFmNmU5M2M5MGYwY2U2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAtlPHBbcV3d1IL7K10pUhp60JYUSoU1J2XIvoOmIeMB/eLeNS
UjUzQEigDiYvr70t6XrmdtFGhURlReSHCYQI6c03DMCu10wJvaIBYDu6yeM0hqx+
vPulpfcpzOVYzg4sjMcct8Y05V8ZbcbI10s0V5aPgI9Wh0+FuOZsJtCKropZIQ/i
S8qvIgNwxa9c1MMU1BcGjMZz/wrL4JeKn/aC1A/3wEvNINagUrhhuuOBAnQLLoHq
YvwsvdMKG3OHKHl3D6zgPqCxF5EzBd3huj6sc0zB/JeeAHxLFN/y9h5fr5FbDj6t
n9Ver72BOOdzhlJvh/migxv173sGvmolkwhFlQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFJYcjEi+6OroNMsIQ2SGdRvcK7TdMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjL2FiNTUzNzU1Zjg0MGFlZjY2NDBiMzRjNmM0YWY2ZTkzYzkwZjBjZTYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAOLbIUmXZg4hw
nfdgeMDou4DWBRRKTV3mnUESuIWzDZtfNMbNye5H8qKtn92HDShiULr6PVtl6h7c
qTqI+DTgu4eA/bzaJl7WQF+ELfyquHguJNVsexQ8/Fnx0h3NLGd8MqdNAOHFa2eW
dShDdgCrGdo+iKKwPzyoXi+gQ7kjDXt7tmwUytPo8bY2EFjn/P5AyqXlwfhtd6SD
ZQ2Tuxri9ARyTXhOfs4peFvIwgIqqIQlzhDXryL/A1ZJjg6tTpgadgWnrfjE5wx1
836iYDtpZ1dIl0oKcOweG+VrWtrAGe5Th9b5PL2i4fMTyCYhk7yznlObdbfHaNpD
AU6AbImYUw==
-----END CERTIFICATE-----