Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d22faf88a1b200dd0983e1a5775ddb131568c280.roa
File:                     d22faf88a1b200dd0983e1a5775ddb131568c280.roa (raw, json)
Hash identifier:          RppjJ2Dp1x6BczyYEgv5Mp6tgUZgy5suINxi3MHBc9c=
Subject key identifier:   17:C2:07:DE:DA:9A:30:32:DD:35:93:88:AF:63:FA:E8:DE:42:E5:FE
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       093950
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d22faf88a1b200dd0983e1a5775ddb131568c280.roa
Signing time:             Tue 21 Jun 2022 03:59:53 +0000
ROA not before:           Tue 21 Jun 2022 03:00:00 +0000
ROA not after:            Wed 21 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604496 (0x93950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 21 03:00:00 2022 GMT
            Not After : Jun 21 03:00:00 2023 GMT
        Subject: CN=d22faf88a1b200dd0983e1a5775ddb131568c280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:74:c8:bf:39:62:be:be:df:63:75:07:00:a6:
                    9f:8e:3d:88:e6:f5:7b:39:2b:5c:ec:f5:b3:97:42:
                    27:18:cf:94:ee:13:24:3c:f3:73:ee:a5:73:f9:7c:
                    88:21:bf:58:77:f3:35:50:14:6a:d4:29:e8:e7:f7:
                    f5:73:f8:6d:71:44:59:a2:7d:c6:fc:5d:5a:10:04:
                    13:55:a8:0f:74:cc:dc:81:45:a0:3e:a1:9f:df:c9:
                    0f:0a:d6:0d:15:8a:91:34:1f:90:58:58:6d:79:2c:
                    93:fe:13:a8:3e:a5:20:ff:99:0a:d6:1f:aa:42:5d:
                    b7:00:46:97:e7:d6:56:4f:26:59:28:4f:8b:b6:7c:
                    ee:ba:ad:f3:59:01:f4:c9:4d:6f:34:35:0a:99:34:
                    5c:eb:bb:71:f9:33:94:f9:7a:60:f2:8c:30:ae:c9:
                    cb:8f:97:49:41:05:38:ab:80:7e:75:22:a8:8b:0d:
                    e1:22:60:8e:41:07:7a:85:99:1b:15:15:98:1d:41:
                    e2:42:2e:b1:5e:ca:30:f7:7d:c3:08:7b:7c:dd:48:
                    9f:5a:db:50:1a:fb:02:d6:a3:47:b9:70:94:47:52:
                    db:63:1f:4e:8a:a5:55:c1:0b:69:00:4c:5b:96:38:
                    1e:6c:29:4b:f6:27:63:e6:0e:43:96:ee:f6:30:4b:
                    46:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C2:07:DE:DA:9A:30:32:DD:35:93:88:AF:63:FA:E8:DE:42:E5:FE
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/d22faf88a1b200dd0983e1a5775ddb131568c280.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:fd:8d:d7:3a:97:7b:41:57:66:95:c8:80:5a:bd:d6:0d:92:
         7d:2d:3e:b2:a0:0f:f7:96:03:0a:d6:f7:64:9d:a1:21:6d:d5:
         d2:54:00:cd:30:fe:d6:5a:8d:71:d9:a8:ef:6a:7f:c2:ec:28:
         e6:6c:c7:48:20:e7:cc:a5:63:80:93:ad:08:9b:7a:e9:55:ac:
         f3:b1:7a:cb:90:04:eb:3a:55:13:a7:c1:c3:f5:cc:bb:48:82:
         d2:df:63:fa:a3:02:65:4d:94:76:90:c5:41:c8:62:d3:62:7d:
         87:bd:0d:ed:f5:00:c1:1a:96:24:82:70:ad:4e:23:16:29:7d:
         d7:57:46:1e:84:c7:f9:ff:89:2a:a8:e7:43:5f:83:36:47:fd:
         27:cd:cc:af:cd:9d:dd:7d:f3:47:21:54:49:33:39:f6:77:8d:
         76:ac:55:16:e4:c5:ce:1c:66:27:60:7a:ba:48:a1:55:a3:04:
         50:5b:be:9b:8a:d4:0c:2d:a8:3c:c7:a6:61:25:b5:ba:a0:45:
         a7:03:5d:b4:91:80:d4:f8:17:93:78:0d:f4:a0:f6:15:f0:a1:
         d3:c4:5a:5e:34:e5:ff:7f:d2:9f:78:34:c1:7b:b0:93:c1:70:
         de:87:aa:a0:38:22:6b:93:fc:fb:f0:ed:5e:35:35:97:e1:a1:
         2c:5c:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----