Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b9c8ec7805b4337dbaa8c54762d7a618d5a0b697.roa
File:                     b9c8ec7805b4337dbaa8c54762d7a618d5a0b697.roa (raw, json)
Hash identifier:          uqh36rQ7XiyLpTPAtXVv00vIjRJNqMRtOQQO9YkmKxY=
Subject key identifier:   13:14:C9:54:CF:E5:24:97:6D:B6:27:87:79:FC:1C:4C:2E:FF:CD:23
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       076D91
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b9c8ec7805b4337dbaa8c54762d7a618d5a0b697.roa
Signing time:             Tue 10 May 2022 02:34:30 +0000
ROA not before:           Tue 10 May 2022 03:00:00 +0000
ROA not after:            Wed 10 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486801 (0x76d91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 10 03:00:00 2022 GMT
            Not After : May 10 03:00:00 2023 GMT
        Subject: CN=b9c8ec7805b4337dbaa8c54762d7a618d5a0b697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cf:bf:18:83:01:aa:90:6e:2f:0f:a4:b2:0a:
                    b6:09:11:fd:a2:61:9c:86:0b:61:cd:29:6b:8c:00:
                    8d:96:7b:79:e8:e2:24:bb:d2:d1:0f:47:8d:3a:f8:
                    7b:1c:ab:b1:d3:11:ef:bd:3d:fc:44:e0:d7:67:4e:
                    78:81:65:e3:63:34:9b:17:07:cc:3d:53:22:7e:a7:
                    bb:b7:81:1d:cc:43:35:15:d8:63:32:bc:f0:f7:8f:
                    8e:cd:f5:ee:bf:f8:4e:b1:24:67:91:d0:89:74:8f:
                    98:3f:19:99:35:e5:1f:66:1f:e1:74:9d:c3:a8:a7:
                    52:43:df:30:1e:b4:21:65:d2:9b:3b:15:eb:c3:07:
                    37:7a:4b:aa:1e:e9:ae:f5:93:a4:23:05:4c:d7:e4:
                    2d:56:40:6d:a1:e7:4b:d9:e1:c2:31:62:03:55:e4:
                    77:97:b5:f9:ff:a9:28:8e:dd:df:f2:b3:fa:0e:ed:
                    51:4b:ca:f6:c8:68:4a:9c:14:4f:08:80:d8:99:3f:
                    b1:3f:18:2b:99:ad:50:75:bf:b8:1d:98:4b:e5:a3:
                    f9:02:97:15:33:f4:33:72:8e:dc:8d:0a:8c:af:c2:
                    06:58:99:78:25:fc:3c:38:bf:f6:ca:c5:0e:88:8b:
                    92:a7:8d:a2:4f:a3:39:d6:c9:48:54:25:32:ab:da:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:14:C9:54:CF:E5:24:97:6D:B6:27:87:79:FC:1C:4C:2E:FF:CD:23
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/b9c8ec7805b4337dbaa8c54762d7a618d5a0b697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:fa:af:fe:17:66:88:1b:c9:a3:49:a7:0b:64:05:6f:2e:b6:
         64:49:84:99:22:2f:65:90:58:46:20:1a:47:cc:a4:c0:65:48:
         0b:58:81:da:f7:a7:79:30:af:ef:b2:32:9d:9e:cd:75:3d:9b:
         c8:78:16:a6:57:b3:99:50:f1:23:3b:a4:18:ad:c5:49:4f:59:
         cd:f5:7f:1e:25:8f:ba:49:d5:04:1b:92:a3:6b:b3:89:c8:b6:
         c8:4c:0f:bf:1d:4c:e4:2c:9d:cd:a5:a5:a1:d2:ed:79:27:e5:
         13:fc:00:7c:bc:02:7f:9e:4d:23:37:30:c0:1c:e7:5a:e1:24:
         58:7f:45:ab:8a:fd:21:e1:fe:e1:b0:55:ba:3a:8d:51:17:c3:
         8d:0b:94:e7:d6:9e:89:73:65:bb:df:d3:85:4e:2e:7f:e1:54:
         d6:70:2f:8c:db:44:69:24:18:28:6c:f2:e9:2a:74:02:8b:1c:
         26:ee:c9:eb:79:90:60:13:51:01:8a:4e:9d:60:9d:1e:73:79:
         e1:4b:9d:88:70:17:e3:6d:b9:6b:18:0d:ad:ae:82:b0:2a:c4:
         ba:d4:8c:2c:ee:24:eb:08:7f:ac:d3:d1:e0:0d:c3:b9:17:a5:
         60:13:69:7d:8b:cd:6f:21:36:c1:36:32:d0:9a:8f:b7:e3:68:
         e2:e8:78:50
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDB22RMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNTEw
MDMwMDAwWhcNMjMwNTEwMDMwMDAwWjAzMTEwLwYDVQQDEyhiOWM4ZWM3ODA1YjQz
MzdkYmFhOGM1NDc2MmQ3YTYxOGQ1YTBiNjk3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA28+/GIMBqpBuLw+ksgq2CRH9omGchgthzSlrjACNlnt56OIk
u9LRD0eNOvh7HKux0xHvvT38RODXZ054gWXjYzSbFwfMPVMifqe7t4EdzEM1Fdhj
Mrzw94+OzfXuv/hOsSRnkdCJdI+YPxmZNeUfZh/hdJ3DqKdSQ98wHrQhZdKbOxXr
wwc3ekuqHumu9ZOkIwVM1+QtVkBtoedL2eHCMWIDVeR3l7X5/6kojt3f8rP6Du1R
S8r2yGhKnBRPCIDYmT+xPxgrma1Qdb+4HZhL5aP5ApcVM/Qzco7cjQqMr8IGWJl4
Jfw8OL/2ysUOiIuSp42iT6M51slIVCUyq9oCfwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFBMUyVTP5SSXbbYnh3n8HEwu/80jMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjL2I5YzhlYzc4MDViNDMzN2RiYWE4YzU0NzYyZDdhNjE4ZDVhMGI2OTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAOfqv/hdmiBvJ
o0mnC2QFby62ZEmEmSIvZZBYRiAaR8ykwGVIC1iB2veneTCv77IynZ7NdT2byHgW
plezmVDxIzukGK3FSU9ZzfV/HiWPuknVBBuSo2uzici2yEwPvx1M5CydzaWlodLt
eSflE/wAfLwCf55NIzcwwBznWuEkWH9Fq4r9IeH+4bBVujqNURfDjQuU59aeiXNl
u9/ThU4uf+FU1nAvjNtEaSQYKGzy6Sp0AoscJu7J63mQYBNRAYpOnWCdHnN54Uud
iHAX4225axgNra6CsCrEutSMLO4k6wh/rNPR4A3DuRelYBNpfYvNbyE2wTYy0JqP
t+No4uh4UA==
-----END CERTIFICATE-----