Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ad0c0a8d2e99cd912bee50a13c89d1e83e5cf9bf.roa
File:                     ad0c0a8d2e99cd912bee50a13c89d1e83e5cf9bf.roa (raw, json)
Hash identifier:          zi/n8upJTHpCIH8svBxgZ8wvI/FQMDsGe79VSBhTD6c=
Subject key identifier:   B3:47:4A:8E:FC:78:25:DC:2C:BB:22:F9:19:85:88:F6:D7:33:B5:3D
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0E4CF2
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ad0c0a8d2e99cd912bee50a13c89d1e83e5cf9bf.roa
Signing time:             Wed 12 Oct 2022 01:49:24 +0000
ROA not before:           Wed 12 Oct 2022 03:00:00 +0000
ROA not after:            Thu 12 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937202 (0xe4cf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 12 03:00:00 2022 GMT
            Not After : Oct 12 03:00:00 2023 GMT
        Subject: CN=ad0c0a8d2e99cd912bee50a13c89d1e83e5cf9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fb:d3:a3:44:78:2d:6b:aa:dc:dd:a8:8d:f9:
                    a9:0d:42:47:37:cc:b4:12:ae:83:93:e1:6c:04:37:
                    21:b9:02:4c:f5:4f:4b:72:a2:f2:12:ea:f9:04:68:
                    ee:87:30:66:71:95:9f:9b:39:6f:1a:a7:28:d9:a3:
                    82:ee:31:02:f7:bd:6f:46:2d:43:bf:b9:92:54:0f:
                    fb:22:a0:07:65:ab:77:ab:87:ee:7d:94:4c:98:ad:
                    1b:e2:f1:e6:67:d3:ea:0c:12:b3:e5:c7:6d:31:a3:
                    77:e0:8b:15:94:bf:cc:a1:47:d9:cb:33:ff:3e:a4:
                    f4:a1:6e:4e:02:8a:6b:09:24:db:dc:f4:72:7a:c5:
                    2c:1f:e7:b1:23:01:ed:d1:56:5a:3c:59:e1:63:ab:
                    9c:92:50:97:7b:a9:53:88:14:fb:d7:52:07:8d:44:
                    3f:9a:38:34:4b:b0:99:ac:c0:90:b1:3f:4e:e5:34:
                    e1:7d:4c:c3:09:18:53:69:a1:46:67:4e:a5:ae:1d:
                    8f:aa:45:71:d8:76:03:4e:2d:93:5e:e4:a2:d9:71:
                    58:3b:b9:7e:2f:38:53:1f:f0:13:a2:07:27:ae:b0:
                    28:92:27:1d:5b:93:c2:6e:25:7d:0c:6f:f4:3b:6a:
                    a4:de:34:4c:7f:1f:b2:47:71:89:e0:41:96:f2:86:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:47:4A:8E:FC:78:25:DC:2C:BB:22:F9:19:85:88:F6:D7:33:B5:3D
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ad0c0a8d2e99cd912bee50a13c89d1e83e5cf9bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:a8:51:c3:c8:51:ed:89:93:2d:5e:f1:12:e0:c3:85:a4:7d:
         a2:43:c3:cf:b1:56:13:20:da:cc:9d:67:d1:3a:7d:a6:46:56:
         cf:f1:86:e9:61:d5:07:f1:77:6e:b6:52:e4:1a:2c:af:ca:78:
         bb:25:86:c3:cb:59:d2:9f:ab:a2:6c:5b:66:2c:74:6e:cc:ab:
         87:78:22:2a:bd:eb:72:9b:ce:48:5e:13:f5:79:ba:e5:60:82:
         e5:cd:24:d3:3e:05:1a:66:50:75:6c:66:30:75:dd:fd:14:30:
         26:8f:39:0a:98:e2:b0:da:41:31:a0:4c:e8:bd:08:df:89:a6:
         d8:44:d3:64:62:92:f4:42:82:42:d5:bf:3d:42:99:6e:ce:7f:
         ad:de:9e:47:e5:19:81:47:a1:cf:c7:1e:45:61:12:3b:86:1d:
         9b:45:ec:fe:af:ac:5f:fd:61:00:9c:6a:7c:b7:0c:96:3f:f1:
         2b:a8:9c:c2:f2:f3:5a:65:bd:51:92:5a:3d:3b:45:a1:b1:1c:
         68:e8:e1:b3:8e:ae:28:f3:5b:ff:c5:a1:86:65:1b:75:5e:c8:
         dc:76:1d:c3:8d:c5:9a:b2:64:7b:58:38:89:c0:1c:b6:2d:a4:
         3c:14:b8:f5:c7:01:64:ee:34:ff:c7:f1:15:07:9b:3c:12:eb:
         11:e6:9a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----