Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/db36503c6582f73c76bce1ce8ef7f6e64007daea.roa
File:                     db36503c6582f73c76bce1ce8ef7f6e64007daea.roa (raw, json)
Hash identifier:          w8M30qUlWvjahDdfyhAc1GMgHoY+VbVHc5EVoMYf5+k=
Subject key identifier:   8D:DD:3C:98:BC:54:71:F1:1E:E2:12:C8:D8:44:7C:06:9B:28:47:29
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0A4EC3
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/db36503c6582f73c76bce1ce8ef7f6e64007daea.roa
Signing time:             Sat 16 Jul 2022 05:36:31 +0000
ROA not before:           Sat 16 Jul 2022 03:00:00 +0000
ROA not after:            Sun 16 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675523 (0xa4ec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul 16 03:00:00 2022 GMT
            Not After : Jul 16 03:00:00 2023 GMT
        Subject: CN=db36503c6582f73c76bce1ce8ef7f6e64007daea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a3:42:33:6a:40:fb:df:0e:c6:98:b8:c2:87:
                    d3:6b:c1:12:c2:10:42:1c:01:04:9e:c3:b9:9d:bb:
                    27:4b:34:28:b6:9f:85:cb:11:c1:09:c0:d5:e7:a0:
                    1b:9b:cc:0c:ab:9d:ca:75:b3:6e:f8:7c:18:04:3e:
                    0e:a5:5d:71:89:d1:c2:91:66:3b:79:99:5e:16:e8:
                    64:e2:3b:9c:d4:3d:5d:de:c3:52:49:5a:98:1a:c6:
                    b0:90:ec:10:7c:fb:76:b5:81:26:23:7e:81:96:17:
                    9e:b7:6e:a8:3a:60:42:05:ff:31:11:83:61:c0:c0:
                    92:f9:66:e4:6f:c7:e1:57:7b:d2:90:3c:6b:6b:42:
                    ff:28:13:e3:b7:4e:bf:fc:e5:9b:3f:94:82:0d:6f:
                    c7:e5:85:a6:20:b4:da:2a:b3:52:32:18:87:24:c7:
                    72:a6:79:2d:74:1f:9d:70:02:36:87:12:7e:1b:92:
                    18:ca:68:98:3a:6e:b2:99:bd:ae:54:b0:12:b3:0c:
                    6b:92:41:73:51:f9:32:e8:3d:28:5a:bb:d7:db:58:
                    9e:94:7b:2f:57:20:e7:bd:cd:e1:c4:e2:5c:28:90:
                    f7:f3:ab:2d:44:5c:4f:f5:2a:ac:90:1c:de:ec:3e:
                    65:5e:18:31:89:99:da:aa:d5:2e:81:92:71:41:1e:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:3C:98:BC:54:71:F1:1E:E2:12:C8:D8:44:7C:06:9B:28:47:29
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/db36503c6582f73c76bce1ce8ef7f6e64007daea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:1e:c5:69:d1:76:67:9f:27:0b:98:db:31:68:6a:25:3d:aa:
         ff:be:36:35:2a:dd:38:24:85:0d:66:13:cd:6e:41:e0:93:46:
         fc:2d:6d:93:e5:44:b2:72:63:6d:a1:85:19:0c:97:c8:8c:cc:
         76:54:22:5b:52:93:34:ec:1b:6c:6e:0b:e3:7c:0a:dc:ab:03:
         6d:c3:66:9e:72:36:f1:f1:b4:dd:8c:08:be:2b:98:5c:d6:54:
         fa:d3:15:49:fa:f2:46:f8:49:fe:1e:06:ea:ed:1b:85:5b:9f:
         32:2e:9f:32:9d:27:cd:28:85:80:09:65:5a:1e:7d:ef:19:ac:
         17:ab:5e:23:b3:02:83:ce:cb:78:c4:72:40:c2:d6:16:35:38:
         32:9e:4b:44:22:06:b2:f1:cd:12:0f:00:60:2e:93:54:02:d8:
         21:19:8b:56:59:be:4c:bd:0c:d7:75:3e:b1:91:5c:56:3d:9c:
         28:16:ca:40:e6:2f:a9:85:71:31:9a:e1:53:6d:5c:f2:d4:84:
         95:08:39:be:bf:95:e9:31:0e:ee:8a:df:f6:ea:51:40:65:cb:
         08:08:ae:b5:8c:3e:35:ba:6c:01:0d:73:af:af:13:a0:2d:d5:
         37:4e:68:27:2b:a1:fe:bc:10:6c:25:4a:02:e5:4c:03:0f:5c:
         02:4b:c1:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----