Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b19764c7c6bc9ba3ea83acdd1f4b4e7641b2df77.roa
File:                     b19764c7c6bc9ba3ea83acdd1f4b4e7641b2df77.roa (raw, json)
Hash identifier:          4yxw6xEo5YANBHRhtfSb0utX/uuybP2t/veirsmggeA=
Subject key identifier:   D5:26:5F:69:F1:A7:96:FA:60:82:10:9C:27:F0:F6:6D:33:28:0D:C1
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       067CC4
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b19764c7c6bc9ba3ea83acdd1f4b4e7641b2df77.roa
Signing time:             Thu 21 Apr 2022 06:15:02 +0000
ROA not before:           Thu 21 Apr 2022 03:00:00 +0000
ROA not after:            Fri 21 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425156 (0x67cc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr 21 03:00:00 2022 GMT
            Not After : Apr 21 03:00:00 2023 GMT
        Subject: CN=b19764c7c6bc9ba3ea83acdd1f4b4e7641b2df77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c4:92:66:e5:5e:41:ce:40:f9:fc:77:75:99:
                    ed:6d:00:a7:f0:6e:40:cb:7f:d3:27:51:1b:93:68:
                    c8:fa:2f:df:25:b0:fc:0e:57:1e:73:00:48:87:38:
                    00:45:95:e3:58:dd:5e:6b:7e:a5:f4:78:7a:df:91:
                    af:1d:f2:03:f6:03:e6:55:69:88:0a:1c:3f:bd:94:
                    26:d4:05:4b:1f:db:ac:d6:ce:05:67:a6:ab:ec:56:
                    ad:7a:87:94:3a:d1:d7:fa:f2:e1:17:4a:90:38:bd:
                    a6:3e:d4:73:16:d2:b3:12:1e:4a:b4:0e:74:4c:ba:
                    eb:2e:e8:fb:f5:1b:d1:12:75:b1:34:52:b8:e4:d4:
                    b7:69:c2:ce:3c:ac:54:21:38:17:ad:42:f3:94:25:
                    1d:a3:37:f5:dc:95:fe:c3:5d:ae:21:fc:89:89:26:
                    69:64:82:ca:98:4f:9b:89:09:4b:e9:9c:1c:4b:5d:
                    e4:fe:a6:35:26:b4:c7:d6:ae:00:7f:91:8d:b4:5b:
                    55:44:a6:73:e2:39:d5:16:d7:c5:28:ea:b6:57:b2:
                    16:d0:9c:28:bf:2b:ff:c6:ae:df:36:34:af:2c:41:
                    2c:44:bf:ef:f1:fe:28:bd:37:4a:49:7a:a5:8c:1f:
                    28:5a:2a:69:db:45:d8:e6:05:de:9e:0e:2e:2d:1f:
                    4c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:26:5F:69:F1:A7:96:FA:60:82:10:9C:27:F0:F6:6D:33:28:0D:C1
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b19764c7c6bc9ba3ea83acdd1f4b4e7641b2df77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:fd:8f:5f:3e:af:1f:a1:40:8d:3b:a6:26:54:83:a5:74:57:
         d0:51:74:12:64:94:72:0d:3e:88:ef:53:49:0c:f8:a9:06:0a:
         2e:02:31:62:28:02:90:74:cf:4f:0b:3e:e5:a5:64:6b:f2:08:
         20:fa:d5:10:21:50:ae:cf:f1:f8:17:44:8f:89:ff:ea:96:06:
         8b:95:ba:2c:58:e6:f2:3b:b3:94:c3:eb:9a:b4:2e:16:f4:f3:
         b0:c2:34:e6:38:e4:2d:17:03:36:5c:6d:da:a8:24:5f:73:2f:
         de:44:e4:f7:78:68:89:6c:24:fb:6a:5b:57:6d:7e:a0:fa:a0:
         b2:e2:ae:a4:80:00:6f:49:73:5b:65:2f:b1:b3:57:fa:09:dd:
         7b:76:4b:59:7a:63:ac:8c:bf:f6:33:10:b4:df:73:5b:92:00:
         ef:63:50:3f:58:b0:52:64:54:f5:b0:e0:8d:d9:8e:22:87:c5:
         ad:be:6b:bb:73:cb:13:e1:e2:2b:fa:3b:65:14:e0:96:a5:e4:
         b9:4f:ca:b1:a6:e8:3d:90:9f:5b:5b:39:91:78:b6:d5:06:58:
         cb:91:41:39:48:16:ef:05:3f:dc:27:1d:7c:80:55:80:93:76:
         f0:36:34:1b:10:38:c6:35:91:ee:2c:ad:0b:ed:53:64:9e:53:
         d3:af:9d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----