Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b182c48471bb9a8d56d5a61760688ced8a5342ec.roa
File:                     b182c48471bb9a8d56d5a61760688ced8a5342ec.roa (raw, json)
Hash identifier:          D6RP2ZSU5jaQaa1hEi5HD6IzbvkOsI+9MRgEU4S8mAE=
Subject key identifier:   97:96:BD:F2:88:95:DF:C7:DE:B8:88:59:A8:52:DB:3D:67:34:9D:AC
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       052DCB
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b182c48471bb9a8d56d5a61760688ced8a5342ec.roa
Signing time:             Wed 23 Mar 2022 01:36:29 +0000
ROA not before:           Wed 23 Mar 2022 03:00:00 +0000
ROA not after:            Thu 23 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339403 (0x52dcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 23 03:00:00 2022 GMT
            Not After : Mar 23 03:00:00 2023 GMT
        Subject: CN=b182c48471bb9a8d56d5a61760688ced8a5342ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d6:78:ea:0f:f5:2e:c8:e1:e6:83:29:20:a9:
                    b1:bc:a0:55:7c:8e:2c:a1:39:2c:ae:6f:00:99:16:
                    22:22:0d:cf:92:5d:a3:bf:79:12:09:20:de:dd:b2:
                    20:73:bc:83:6c:2d:1d:0f:57:2e:5b:bc:a9:fb:d3:
                    d2:b1:c4:90:c9:f6:a1:07:49:96:72:a2:fb:39:b3:
                    50:dd:e0:be:67:b5:02:fc:98:3b:be:9d:7e:78:b7:
                    c1:40:39:a5:c7:c2:0e:c0:77:76:cd:15:b1:4b:5d:
                    56:f4:70:d4:e2:49:4b:b0:8e:53:ae:90:c6:57:f0:
                    44:04:d1:e8:c7:be:cf:e6:f8:11:c5:0f:75:66:3a:
                    b6:dc:8e:f8:86:2c:eb:2d:d0:52:fe:41:8b:a7:88:
                    b8:27:87:e7:df:b8:9c:ce:02:79:7d:d5:c1:2b:ca:
                    89:b2:c9:c5:2b:14:62:78:f7:9b:3c:2d:73:8b:65:
                    72:2e:ef:d8:3b:d5:be:a6:33:37:b4:4c:07:ff:38:
                    22:ac:7e:64:24:31:97:58:fe:45:50:90:91:9f:99:
                    28:f2:ac:ef:90:49:82:32:fd:81:e9:57:4b:f8:7f:
                    9f:2e:b4:7c:8c:9a:97:3e:c4:a6:f7:59:de:39:58:
                    69:ef:d9:a4:ba:57:17:8a:09:49:33:47:c9:30:0f:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:96:BD:F2:88:95:DF:C7:DE:B8:88:59:A8:52:DB:3D:67:34:9D:AC
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b182c48471bb9a8d56d5a61760688ced8a5342ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:80:5e:d7:1f:22:98:a5:d4:03:31:15:96:b1:e3:00:40:d1:
         6b:b4:71:ba:18:a5:30:02:ef:2d:4d:fe:f2:7e:da:6a:47:d1:
         af:de:dc:dc:e9:7d:3c:ea:26:1a:a1:ca:b0:98:fd:f0:56:4b:
         24:a6:7f:a5:ff:45:9a:f9:1b:8f:14:2b:f1:67:e1:f1:b1:11:
         0d:fd:7b:7c:d8:73:41:52:a1:b1:0d:a7:5c:c9:63:f1:1a:5d:
         57:e9:cf:1e:77:20:d0:a5:23:a0:3e:ce:e4:f2:7c:b6:9f:95:
         49:ec:bc:78:94:c3:5f:5e:f2:65:4a:b6:9a:9a:72:bb:32:49:
         c2:80:95:03:1a:cd:df:8f:cd:23:08:4b:f3:44:45:a9:0f:0d:
         a1:ce:92:40:cd:fb:9f:c5:a5:06:2a:89:79:87:fa:1e:4f:4f:
         56:53:15:e6:5d:93:ed:83:14:eb:2d:ad:41:d3:90:0e:0a:24:
         a2:09:96:3c:98:a2:83:d3:8e:ed:90:72:1a:ed:85:1e:e9:8d:
         fe:c6:69:92:0f:44:7c:68:46:65:b6:31:66:d6:c9:00:1d:03:
         9c:37:c1:24:f9:d0:e7:90:c1:51:43:f0:d3:83:d5:cf:3a:71:
         b8:ae:7b:29:99:0f:26:57:dd:5d:a1:8c:ad:ea:d3:3c:c1:de:
         7e:d5:c1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----