Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b5002d74177ba7bcb0faffeb993a951450d619cd.roa
File:                     b5002d74177ba7bcb0faffeb993a951450d619cd.roa (raw, json)
Hash identifier:          kjODLXacX/ANqVQTq7KTWMCNmOIxhiOR7W502uPFd0E=
Subject key identifier:   AA:E5:DC:34:50:C9:A8:D2:E6:FF:9F:D8:D9:4A:1D:2F:EA:FF:07:CD
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0A1A0C
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b5002d74177ba7bcb0faffeb993a951450d619cd.roa
Signing time:             Tue 12 Jul 2022 00:53:50 +0000
ROA not before:           Tue 12 Jul 2022 03:00:00 +0000
ROA not after:            Wed 12 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662028 (0xa1a0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 12 03:00:00 2022 GMT
            Not After : Jul 12 03:00:00 2023 GMT
        Subject: CN=b5002d74177ba7bcb0faffeb993a951450d619cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:8e:3e:ec:72:71:8a:bb:f2:95:5a:c3:88:
                    30:a9:b6:e6:65:7a:82:af:ae:8b:0d:f2:70:ba:8e:
                    a9:d1:9b:95:15:d7:02:c3:a9:c6:30:7b:98:d7:91:
                    49:19:88:c7:e1:6e:4a:30:19:f2:ea:6f:56:51:77:
                    94:aa:81:e9:5f:b6:ba:47:17:b0:f2:9a:27:ab:13:
                    ce:c9:0c:36:d1:42:30:73:63:74:7c:94:3f:59:29:
                    dc:bc:83:2b:09:10:0e:59:88:dc:ca:e7:f3:84:79:
                    b7:00:73:a6:57:27:b9:78:28:6e:71:ac:21:92:28:
                    4e:ef:84:cc:0c:9a:88:35:ff:6b:b5:59:9f:26:ef:
                    4d:47:4a:61:ea:20:db:85:db:a2:7e:33:79:1c:da:
                    33:b9:9f:09:6d:66:8b:e6:ed:22:86:aa:b2:05:2c:
                    15:f4:71:48:01:ed:c9:6e:fe:45:a2:0f:0c:7c:6b:
                    5e:4c:aa:f8:2a:f9:23:11:be:51:43:1d:a5:34:06:
                    a9:b9:e9:f1:fc:c6:fc:93:01:d8:56:70:9e:3f:a9:
                    50:a4:1d:11:48:16:1b:6f:4c:5c:e5:ca:c0:54:5f:
                    70:5f:28:5d:76:5f:b3:97:01:79:4c:46:da:17:f6:
                    0b:21:26:43:4e:4a:be:24:b1:8a:da:23:bf:1f:78:
                    24:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E5:DC:34:50:C9:A8:D2:E6:FF:9F:D8:D9:4A:1D:2F:EA:FF:07:CD
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b5002d74177ba7bcb0faffeb993a951450d619cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:fe:8d:db:c3:04:36:ed:15:b8:5b:de:36:35:68:fb:1e:6f:
         99:30:a1:9a:02:d7:89:8f:1d:f7:44:ec:35:c7:c3:8a:63:28:
         c7:2b:db:51:0c:84:2a:e0:49:a9:b6:fd:71:a1:4a:c7:10:51:
         5b:c7:ff:8b:02:1c:64:7b:82:1c:79:d7:4d:43:71:f9:72:6e:
         1a:cc:c4:0d:0a:d9:a7:0b:8d:9d:4c:27:82:8b:db:53:4a:e7:
         f2:19:95:96:26:9e:76:d7:13:07:ea:20:fe:00:97:d9:87:92:
         82:44:1b:7a:21:ce:c8:d3:b5:ce:5f:48:72:f9:f5:0c:6d:c3:
         65:11:c8:69:62:30:6c:60:77:d7:47:aa:3e:e0:21:20:93:af:
         43:50:10:d0:72:a1:71:c5:56:bd:fe:1c:29:e1:c9:cf:9b:b2:
         2f:d0:74:72:15:cd:59:c0:23:60:df:57:2c:c7:4a:f2:c3:e8:
         1f:40:33:ea:07:0e:89:77:a2:3b:a5:87:44:5a:39:f1:61:01:
         ef:30:45:14:40:6e:9c:7a:ed:e7:4c:cd:7e:b6:e9:5c:7e:e3:
         47:79:f6:0a:67:d9:46:6c:49:66:53:7d:57:13:63:81:c9:08:
         04:d9:79:f2:29:54:1c:22:9b:b3:ef:46:ca:0f:af:84:44:73:
         0d:74:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----