Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c47cf1a7ca23260087575494cbf651625ca8d5b9.roa
File:                     c47cf1a7ca23260087575494cbf651625ca8d5b9.roa (raw, json)
Hash identifier:          2aCNeqTN9NIgDm+95i7M/BBBO8ugDUCSjyy5I+xVJ3w=
Subject key identifier:   1C:85:8C:73:15:07:2A:99:35:06:DD:2D:D0:1E:20:CA:7D:85:BD:16
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0D6292
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c47cf1a7ca23260087575494cbf651625ca8d5b9.roa
Signing time:             Thu 22 Sep 2022 00:23:11 +0000
ROA not before:           Thu 22 Sep 2022 03:00:00 +0000
ROA not after:            Fri 22 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877202 (0xd6292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep 22 03:00:00 2022 GMT
            Not After : Sep 22 03:00:00 2023 GMT
        Subject: CN=c47cf1a7ca23260087575494cbf651625ca8d5b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:ea:a5:6e:a5:e0:c5:84:9a:3e:a0:be:92:
                    7a:9e:7f:8e:dc:e5:6f:ca:d7:9f:d1:53:72:dd:b6:
                    94:a9:5e:2f:1e:2a:ab:b2:8e:9b:65:c2:10:8b:79:
                    29:d2:94:29:7a:1b:3e:01:b7:e2:cf:bc:b3:1e:89:
                    23:fc:5c:37:7c:24:17:1d:66:69:19:a4:59:ac:1b:
                    6f:6a:98:76:ef:1b:a7:13:f7:46:3c:34:15:c8:17:
                    8c:9e:a2:e8:31:ff:b9:9d:c9:c1:fc:d4:9b:4d:3b:
                    6d:fb:73:35:6f:dc:c0:ad:0e:84:74:fa:3f:68:5b:
                    6f:c0:a5:46:21:f1:f5:16:62:c2:15:59:c6:b6:46:
                    3e:9a:2e:7e:df:63:31:d7:88:1e:56:fc:6a:ed:ee:
                    9c:5e:0f:d5:2c:fa:2c:2a:7d:bf:85:5e:66:ff:b3:
                    d1:bc:1c:57:45:eb:f6:e7:61:65:cb:37:b5:95:e9:
                    35:d1:46:c9:85:f6:a8:2b:ed:3f:34:3e:13:99:db:
                    34:f9:bc:44:e8:93:cb:56:27:95:92:8d:5e:b3:15:
                    92:37:1e:67:75:ba:00:59:02:2e:41:06:e0:d6:ef:
                    af:3b:19:33:18:73:c4:e8:4c:0a:35:85:41:0e:f3:
                    bd:75:2a:09:8a:70:b7:d5:6e:74:eb:0c:c9:ac:fb:
                    b1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:85:8C:73:15:07:2A:99:35:06:DD:2D:D0:1E:20:CA:7D:85:BD:16
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c47cf1a7ca23260087575494cbf651625ca8d5b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:04:ae:51:a9:95:46:26:eb:b6:26:10:c1:6c:38:9e:7e:4d:
         99:a1:e1:5b:da:86:50:f9:56:ad:de:2a:d1:96:f5:57:fd:4a:
         60:39:f3:c8:d7:21:a1:9c:73:6f:fe:d6:3d:c7:eb:c4:85:9a:
         56:a8:d0:40:e6:cb:f1:c8:74:f4:64:f3:0c:f5:83:f9:69:ce:
         c8:05:c4:91:b0:5f:07:c7:66:dd:48:90:bf:a2:e9:36:be:7c:
         ee:26:da:9e:55:6e:cf:07:4a:bd:e0:8a:cd:1d:36:7a:f2:d9:
         a0:c4:cb:1a:0f:fa:a1:43:28:67:47:df:f5:3c:e3:3e:de:ce:
         d2:f4:7b:e4:2f:be:ea:a0:f5:d8:8f:de:19:27:e1:25:d7:e5:
         c4:20:a5:df:d1:45:1e:f0:44:0a:af:42:8f:cf:4b:28:e5:59:
         3f:0b:e2:a6:8a:fb:3f:d6:10:9b:60:da:9e:e7:42:a1:bf:c4:
         e2:e6:a3:e7:24:0b:36:1b:65:41:db:43:0c:2e:18:c0:64:9a:
         05:56:c8:0c:45:b6:58:d8:09:22:ef:54:bf:8c:b6:14:95:64:
         10:b0:98:41:5e:0b:b4:b3:29:18:8a:dd:a0:c8:d6:cc:ac:de:
         c6:30:c2:bb:0e:c1:c1:8c:28:e2:c9:a3:d9:bf:01:ec:de:fd:
         e1:c4:20:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----