Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/da4f1c745fd24bb41d54a9ceda4148884fd9d39c.roa
File:                     da4f1c745fd24bb41d54a9ceda4148884fd9d39c.roa (raw, json)
Hash identifier:          tVW5+cHWSMcEzqlCRf4xMtrNgSYLTxJCU916kTfYNCo=
Subject key identifier:   B7:8E:FD:C9:C0:92:57:B6:E1:C7:77:59:F3:5A:94:C3:E0:FF:49:82
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0E5E7B
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/da4f1c745fd24bb41d54a9ceda4148884fd9d39c.roa
Signing time:             Fri 14 Oct 2022 00:33:24 +0000
ROA not before:           Thu 13 Oct 2022 03:00:00 +0000
ROA not after:            Sat 14 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941691 (0xe5e7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 13 03:00:00 2022 GMT
            Not After : Oct 14 03:00:00 2023 GMT
        Subject: CN=da4f1c745fd24bb41d54a9ceda4148884fd9d39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:97:33:9e:99:b9:75:42:63:e0:67:5a:18:74:
                    3f:6f:f0:7a:41:c9:e5:da:01:43:6d:a9:29:11:99:
                    c2:7f:dc:51:33:99:af:b5:82:ed:5d:30:05:6b:24:
                    9c:3d:02:f0:b5:ef:d4:20:35:60:b7:dc:ff:4c:00:
                    10:43:e7:1f:16:05:38:9a:a3:aa:5e:a6:8d:e8:83:
                    6f:a1:82:18:3d:7d:06:bc:bc:87:85:85:88:81:6c:
                    04:6b:7d:bb:6e:0d:f0:aa:4f:b2:6b:db:c3:4b:ae:
                    1d:1e:8f:0e:fa:1d:1c:bd:37:61:7f:f0:f0:60:de:
                    89:5f:95:b3:00:a3:3e:db:ed:3e:2c:62:24:b5:c9:
                    66:af:da:e9:a9:1b:a4:b2:ed:61:ce:1d:72:2e:f5:
                    66:d0:7b:c9:a6:64:77:44:78:a2:ad:5c:b4:75:43:
                    a7:6d:44:c1:78:6d:e2:42:a3:a5:d8:8d:70:de:f8:
                    62:b0:36:03:6c:90:93:0d:68:21:8e:f0:1c:87:32:
                    da:12:91:c8:48:e5:14:4b:1f:32:f9:81:e8:b0:79:
                    c1:d3:57:8e:75:96:c2:a6:fc:65:51:67:6a:e7:17:
                    91:c4:ff:09:87:b4:9e:d5:fc:f9:75:a7:c7:14:7b:
                    35:d6:e8:02:99:2d:5f:8e:61:cb:5d:b2:7e:b2:ae:
                    50:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:8E:FD:C9:C0:92:57:B6:E1:C7:77:59:F3:5A:94:C3:E0:FF:49:82
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/da4f1c745fd24bb41d54a9ceda4148884fd9d39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:65:a2:8e:1a:5d:1c:a3:03:13:d6:47:9f:6c:90:3d:56:a2:
         32:69:ab:e6:18:fe:e5:02:10:6d:01:64:08:8e:49:a6:46:d0:
         e2:2f:26:bd:02:f5:dc:a0:79:d7:85:8c:81:67:0e:fe:fd:de:
         fa:19:88:87:00:d2:96:62:75:1e:74:93:80:2f:0b:e5:0d:b5:
         fd:c3:f4:c8:15:b0:07:82:db:6a:f0:7f:62:da:da:eb:d1:74:
         94:c9:e9:2a:31:75:a8:ee:8c:64:9e:e7:0f:b4:ad:af:c1:40:
         32:8b:90:1f:7c:8f:64:ca:7a:5b:ac:ab:1a:a6:2f:4e:f2:0c:
         4d:56:e4:3d:8f:5d:90:96:bc:d9:66:cd:73:b8:81:b7:bc:ef:
         68:50:24:e0:ad:14:63:af:6f:ae:e0:f0:93:11:c6:45:8c:2b:
         4c:50:53:0c:14:bd:53:de:6a:e4:fd:44:40:ec:e3:8a:71:3a:
         d1:ce:96:7c:b5:a9:da:03:ac:9e:da:0b:bb:e7:27:ff:f7:cc:
         35:e8:43:a8:f7:66:b2:c4:65:f6:bb:f3:af:b3:07:b1:49:a0:
         94:be:01:4f:65:d4:65:f6:48:ee:6a:b5:cb:d8:a5:25:0a:ad:
         44:f0:59:47:b8:6d:88:af:1c:cb:bc:27:0e:e4:34:00:62:2a:
         0e:0e:ff:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----