Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c8d20c54cc863295964646b6148690bd01353cb6.roa
File:                     c8d20c54cc863295964646b6148690bd01353cb6.roa (raw, json)
Hash identifier:          oBF3AR0i7HFfBHRGzF+/nnmarS4aBNItoLV64B/EZxA=
Subject key identifier:   EA:02:99:E3:22:3F:DC:B4:19:41:1E:E5:05:8C:7E:39:51:12:5A:46
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0432A4
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c8d20c54cc863295964646b6148690bd01353cb6.roa
Signing time:             Wed 02 Mar 2022 02:46:53 +0000
ROA not before:           Wed 02 Mar 2022 03:00:00 +0000
ROA not after:            Thu 02 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275108 (0x432a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar  2 03:00:00 2022 GMT
            Not After : Mar  2 03:00:00 2023 GMT
        Subject: CN=c8d20c54cc863295964646b6148690bd01353cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:32:36:e8:4a:3e:f8:ca:fb:c5:d8:b1:01:a4:
                    22:b3:ea:26:e6:a0:75:c3:5a:02:51:27:e0:e6:65:
                    34:37:74:74:e1:02:52:06:6d:32:67:5c:ab:ba:72:
                    ff:33:27:c5:2d:fd:4b:5f:de:c5:6f:d3:f4:be:de:
                    89:03:a5:98:f8:f5:4b:3c:6b:7d:62:b7:7c:3c:0b:
                    d4:7f:8d:de:ba:6c:cb:46:d6:10:a2:31:f3:bb:30:
                    ab:a3:49:11:81:9c:04:85:dc:38:c2:e8:8a:c6:c8:
                    7d:fc:23:9f:f6:78:88:83:93:b2:61:0f:43:65:a6:
                    d3:fc:53:80:0d:1f:49:b7:dd:0d:c0:6a:ce:29:cd:
                    75:e8:39:3a:e5:e8:4a:5f:57:42:fb:e9:3f:da:0b:
                    0b:75:ad:eb:36:a7:72:15:33:79:bb:cf:ed:11:52:
                    73:f9:46:6d:6f:e8:b0:1a:69:2e:a1:46:b1:e4:41:
                    6f:25:e3:ec:56:72:c1:f0:1f:c4:0d:47:1e:11:a3:
                    79:e7:64:20:f3:a5:5a:a3:4a:79:63:d9:71:ab:d5:
                    6b:fc:fd:38:44:43:d7:7f:40:c0:87:68:cf:ed:6e:
                    38:16:4c:62:81:78:b5:ac:40:f2:6b:bb:50:ab:bc:
                    c9:22:7f:02:fb:90:2d:51:9d:db:71:88:35:80:98:
                    50:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:02:99:E3:22:3F:DC:B4:19:41:1E:E5:05:8C:7E:39:51:12:5A:46
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/c8d20c54cc863295964646b6148690bd01353cb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:c0:75:9d:40:01:6c:ec:94:22:a2:a7:49:ef:3c:28:64:33:
         ae:49:5d:1c:0e:33:d7:b1:07:f0:4c:ff:03:41:c8:aa:b8:93:
         95:03:64:8c:0c:62:f0:3f:11:dd:5d:c6:51:64:4a:ef:94:73:
         31:39:40:61:34:9c:c5:79:22:2e:40:ad:ad:c9:44:6a:c4:e9:
         79:d4:0c:d9:0d:e1:5c:94:b1:25:95:fb:4e:3d:62:e7:15:26:
         66:f2:f8:6a:f0:f6:22:01:d9:a2:7c:81:15:52:b4:0e:c5:01:
         a5:de:a9:ee:8e:5b:ae:a0:0c:27:30:89:44:45:f2:e8:d0:80:
         bd:d4:0f:95:9e:29:18:56:02:c0:3f:e4:1d:94:4a:da:49:e1:
         03:2b:77:c3:f7:79:1e:b1:65:11:2a:a6:40:d1:f9:90:86:13:
         03:f5:69:31:47:da:15:7d:a5:aa:11:ec:d7:5e:a8:25:ee:63:
         2d:a5:bc:9e:1c:cb:b8:7e:7b:1b:d3:1f:46:6a:25:4f:7d:99:
         73:2b:2a:95:fd:16:dd:35:4f:74:cd:53:d8:18:d0:18:aa:8c:
         19:ed:18:33:1e:00:3c:47:23:0a:60:e5:aa:61:91:7f:57:a7:
         4e:70:4f:67:df:ca:e3:69:f1:47:b1:16:e8:86:ce:dd:a4:cd:
         01:9b:eb:10
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBDKkMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwMzAy
MDMwMDAwWhcNMjMwMzAyMDMwMDAwWjAzMTEwLwYDVQQDEyhjOGQyMGM1NGNjODYz
Mjk1OTY0NjQ2YjYxNDg2OTBiZDAxMzUzY2I2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEApDI26Eo++Mr7xdixAaQis+om5qB1w1oCUSfg5mU0N3R04QJS
Bm0yZ1yrunL/MyfFLf1LX97Fb9P0vt6JA6WY+PVLPGt9Yrd8PAvUf43eumzLRtYQ
ojHzuzCro0kRgZwEhdw4wuiKxsh9/COf9niIg5OyYQ9DZabT/FOADR9Jt90NwGrO
Kc116Dk65ehKX1dC++k/2gsLda3rNqdyFTN5u8/tEVJz+UZtb+iwGmkuoUax5EFv
JePsVnLB8B/EDUceEaN552Qg86Vao0p5Y9lxq9Vr/P04REPXf0DAh2jP7W44Fkxi
gXi1rEDya7tQq7zJIn8C+5AtUZ3bcYg1gJhQBwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFOoCmeMiP9y0GUEe5QWMfjlRElpGMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjL2M4ZDIwYzU0Y2M4NjMyOTU5NjQ2NDZiNjE0ODY5MGJkMDEzNTNjYjYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAecB1nUABbOyU
IqKnSe88KGQzrkldHA4z17EH8Ez/A0HIqriTlQNkjAxi8D8R3V3GUWRK75RzMTlA
YTScxXkiLkCtrclEasTpedQM2Q3hXJSxJZX7Tj1i5xUmZvL4avD2IgHZonyBFVK0
DsUBpd6p7o5brqAMJzCJREXy6NCAvdQPlZ4pGFYCwD/kHZRK2knhAyt3w/d5HrFl
ESqmQNH5kIYTA/VpMUfaFX2lqhHs116oJe5jLaW8nhzLuH57G9MfRmolT32Zcysq
lf0W3TVPdM1T2BjQGKqMGe0YMx4APEcjCmDlqmGRf1enTnBPZ9/K42nxR7EW6IbO
3aTNAZvrEA==
-----END CERTIFICATE-----