Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/bb788bd1eb2da13330f3c72c352c11a4a995194f.roa
File:                     bb788bd1eb2da13330f3c72c352c11a4a995194f.roa (raw, json)
Hash identifier:          9ArwvURas5WZXQLMDjNkcT5Qfq2rNHKsDjhbxdi3zFw=
Subject key identifier:   16:6F:23:8F:26:89:B8:FE:F5:80:4E:90:E6:32:3F:CB:09:52:26:16
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       079278
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/bb788bd1eb2da13330f3c72c352c11a4a995194f.roa
Signing time:             Fri 13 May 2022 02:49:45 +0000
ROA not before:           Fri 13 May 2022 03:00:00 +0000
ROA not after:            Sat 13 May 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496248 (0x79278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: May 13 03:00:00 2022 GMT
            Not After : May 13 03:00:00 2023 GMT
        Subject: CN=bb788bd1eb2da13330f3c72c352c11a4a995194f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:62:12:60:e3:67:a8:b7:93:76:c5:a2:30:fa:
                    7e:2a:0d:bf:1e:ea:bf:12:a6:c0:65:bd:aa:aa:0d:
                    da:5d:c8:1d:e2:17:a5:1d:97:d6:b4:f1:df:64:50:
                    63:c3:5d:90:0a:00:8b:43:16:ce:0d:70:7e:9d:ea:
                    52:3d:ae:47:6e:d2:ba:47:3e:dc:4a:f4:6d:fa:dd:
                    df:09:aa:d3:a8:1a:c9:68:c5:90:e9:33:3a:40:7a:
                    4b:ee:eb:b4:79:d0:e4:e6:4e:7d:44:e3:68:63:75:
                    00:34:ed:14:11:2b:af:e4:fd:a0:b6:02:32:fe:3f:
                    f7:85:6b:66:c2:bf:69:f7:e1:d7:ca:61:b3:4c:ea:
                    e3:70:d8:96:4b:a2:af:54:cc:1b:b0:43:2f:77:96:
                    12:ac:1d:05:d7:fb:a6:aa:35:bf:8d:90:3d:a6:f5:
                    7f:02:26:91:47:ea:78:74:49:00:f0:8b:9a:e1:52:
                    22:65:68:1f:b8:98:98:a5:6a:80:4e:32:e4:1c:02:
                    6a:65:fe:59:21:f9:df:b2:9c:ec:e7:a6:46:c9:dc:
                    d4:b3:3b:c7:c0:43:1f:f0:90:7a:cd:c9:ca:5e:36:
                    93:f4:03:e5:c3:c4:35:2c:06:10:60:9c:43:8f:22:
                    38:07:f4:fa:bc:f9:80:53:b2:0b:5c:ff:fd:16:88:
                    27:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6F:23:8F:26:89:B8:FE:F5:80:4E:90:E6:32:3F:CB:09:52:26:16
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/bb788bd1eb2da13330f3c72c352c11a4a995194f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:4b:bf:8f:6b:c7:bf:fc:08:06:b6:6f:bf:47:30:fa:ee:16:
         40:cf:9b:bc:a6:28:f0:38:d7:76:ad:87:62:d1:9b:c0:57:9c:
         cc:d2:5c:e9:a7:70:e4:9e:42:ef:31:c9:48:64:a4:61:64:85:
         77:dc:cd:80:7e:0e:09:d1:51:13:65:d7:16:4c:eb:7d:38:1f:
         1f:8a:f6:67:b1:47:a2:9b:ba:51:81:19:9f:e9:da:47:ab:e4:
         fe:3b:e0:dd:18:de:9f:2d:00:74:3c:74:76:b3:81:dc:5c:72:
         a0:6d:4d:c1:07:09:f7:f7:8d:66:5f:ed:7b:21:a6:33:ee:8b:
         b4:1d:c2:72:93:74:14:6c:35:e3:95:c3:fb:bc:7a:3f:68:99:
         ed:2a:89:70:ed:c5:cc:a3:24:07:b9:fe:3d:39:5e:99:84:ea:
         19:51:7b:dc:1e:b1:dd:56:c4:97:e5:75:83:95:8b:3c:af:37:
         fb:a4:2b:8f:fa:d2:50:e6:11:1c:d1:5f:cc:59:9a:95:5b:fc:
         62:df:d7:15:ff:b4:50:68:9a:a3:df:b2:c5:cb:e8:fe:f2:47:
         2f:45:be:5a:9d:4e:27:78:98:22:0c:79:62:aa:22:93:64:54:
         1f:b0:c4:03:74:a0:98:b4:2b:67:95:1c:65:8b:fc:99:37:08:
         df:8c:ba:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----