Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b3d69ce0f10fd668a4f3eff5538a1824ea9632c3.roa
File:                     b3d69ce0f10fd668a4f3eff5538a1824ea9632c3.roa (raw, json)
Hash identifier:          UW0k9GLBQ27jqtt1Tflr9aY94EBtQqQWwB/ZTZT75GQ=
Subject key identifier:   FB:7F:77:51:AE:8D:B0:D5:F6:A4:7F:79:60:EE:27:EC:C8:58:8E:64
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0D9126
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b3d69ce0f10fd668a4f3eff5538a1824ea9632c3.roa
Signing time:             Mon 26 Sep 2022 01:09:58 +0000
ROA not before:           Mon 26 Sep 2022 03:00:00 +0000
ROA not after:            Tue 26 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889126 (0xd9126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep 26 03:00:00 2022 GMT
            Not After : Sep 26 03:00:00 2023 GMT
        Subject: CN=b3d69ce0f10fd668a4f3eff5538a1824ea9632c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:85:21:ce:97:fd:c7:46:92:22:f2:fa:17:
                    4d:98:98:ff:e5:84:de:36:e7:77:19:93:98:ca:89:
                    c3:89:fb:8c:23:19:f9:0c:43:05:04:e3:06:d9:11:
                    4b:74:e3:05:58:fd:07:26:24:cf:0e:88:2b:7e:cd:
                    1c:e4:67:4c:d6:46:cf:5f:5a:ad:63:3f:39:9e:ee:
                    3d:0f:66:5e:a5:9c:4d:8f:76:21:fe:3c:12:50:9b:
                    5f:a5:6d:6f:87:ce:45:de:43:d4:bb:e0:56:12:5e:
                    da:12:be:13:6b:88:91:48:df:fc:76:0d:95:8b:63:
                    c8:d5:a7:bd:7c:01:6c:da:37:f3:c6:b6:5e:84:37:
                    ed:50:05:8a:16:96:16:d3:f1:f7:50:30:f6:cb:b5:
                    16:8d:e1:23:3f:80:bf:82:ff:d5:8d:8b:92:11:3d:
                    c4:d6:96:17:40:00:a1:75:4c:0e:22:7c:df:1e:84:
                    66:59:a1:22:b5:c2:ea:6c:0e:fc:ed:e4:d3:41:7d:
                    52:92:06:cd:62:4c:df:a0:1e:2e:d4:72:86:b5:61:
                    30:be:9d:11:f1:1c:b9:57:bf:81:21:bc:51:c5:f4:
                    7a:45:e5:68:f7:7c:6b:56:bf:dc:8b:66:d1:03:08:
                    98:ef:13:1f:e1:0e:ce:51:da:6e:12:36:91:9f:3b:
                    06:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7F:77:51:AE:8D:B0:D5:F6:A4:7F:79:60:EE:27:EC:C8:58:8E:64
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b3d69ce0f10fd668a4f3eff5538a1824ea9632c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:dd:41:2b:af:c3:5d:e9:dc:ea:b1:7a:b3:d3:ef:63:f5:80:
         6c:c7:f9:43:1f:9a:34:8c:6d:70:64:22:31:f3:7e:e7:fe:7c:
         9e:0d:c8:4f:c9:45:46:7f:50:dc:d6:92:e2:67:5a:b0:10:15:
         05:46:2f:69:c0:e3:47:1a:7f:16:4e:85:67:74:9c:b5:db:53:
         70:de:31:22:07:e7:d7:f2:e9:5d:6f:76:97:2b:37:95:15:1b:
         21:a4:fa:ce:2b:c6:c3:e4:bb:63:c9:1b:f1:f8:2e:2b:60:7c:
         2c:3b:e2:bb:e3:b8:05:e7:e8:cc:98:59:93:c6:28:cf:f5:19:
         48:cd:0c:59:91:07:81:0e:6c:fa:c2:75:91:43:89:49:f5:59:
         db:63:bd:0e:68:77:34:f5:cb:0b:9f:66:5d:10:27:33:cc:0c:
         11:4e:b6:4c:fa:da:69:ba:a1:49:ea:34:13:54:b6:a9:31:4b:
         19:2b:b5:a4:76:32:47:4c:b6:0a:70:da:39:98:96:0f:9b:56:
         60:56:fe:5b:f9:13:da:a8:8d:46:31:64:4f:f6:49:eb:40:07:
         16:b1:76:8a:4d:12:43:5e:21:ae:c4:17:a3:3b:67:c8:dc:d7:
         dc:30:ca:b6:e7:70:c7:d9:a6:4a:97:51:e7:ad:7a:dd:ad:39:
         24:ce:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----