Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dc49f50013693c9575c07eeeff9120cb18c54fdb.roa
File:                     dc49f50013693c9575c07eeeff9120cb18c54fdb.roa (raw, json)
Hash identifier:          kvl+6IQoY/SRv5W0fQtp37LsSZRAkgPo0hmovqFeCYM=
Subject key identifier:   CF:93:76:C8:73:A2:75:F4:15:B3:6B:AD:35:DC:25:2D:FB:89:F1:2D
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0956EB
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dc49f50013693c9575c07eeeff9120cb18c54fdb.roa
Signing time:             Fri 24 Jun 2022 00:19:59 +0000
ROA not before:           Fri 24 Jun 2022 03:00:00 +0000
ROA not after:            Sat 24 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612075 (0x956eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 24 03:00:00 2022 GMT
            Not After : Jun 24 03:00:00 2023 GMT
        Subject: CN=dc49f50013693c9575c07eeeff9120cb18c54fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c0:6c:cd:1c:a7:ef:ed:4e:8b:4e:b0:23:ab:
                    5d:08:d1:79:5c:8b:4d:d1:0a:96:4f:55:35:8f:54:
                    be:40:6e:ce:1d:5a:c6:9a:93:92:76:9d:8a:f8:03:
                    95:87:81:ba:c6:43:45:f7:b2:7f:61:57:3f:c8:31:
                    6f:68:6f:42:66:c7:45:73:ac:65:32:05:6d:29:f6:
                    1d:92:82:80:b8:73:7d:33:f8:0a:04:10:9e:12:5f:
                    a8:1b:a8:78:f3:79:93:f1:57:fa:fa:d8:e1:a4:0a:
                    78:ea:f7:21:cf:11:17:89:96:4d:1a:b8:50:3f:1b:
                    bb:60:9d:c5:a7:b3:0f:3e:99:4f:b7:4c:71:3f:af:
                    2d:64:aa:db:b5:f7:42:d2:69:11:02:92:ba:aa:08:
                    c0:28:ab:2e:87:5b:37:66:5b:f0:b7:07:dd:f4:f6:
                    53:a2:87:32:66:f8:f3:c0:a8:da:ac:dd:6e:c5:72:
                    c6:40:60:07:d6:5a:2b:47:e4:d9:72:34:ee:02:07:
                    a0:45:39:04:6a:12:3e:e5:04:15:f2:4a:1c:5d:4f:
                    72:7d:a6:54:c4:11:03:6d:c7:e7:f1:ff:f6:13:b9:
                    6d:73:0a:b7:e5:3b:80:8f:b5:3c:83:23:9d:a1:1c:
                    cc:cc:86:41:f2:c9:8d:23:2b:3b:f9:ae:53:0e:e9:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:93:76:C8:73:A2:75:F4:15:B3:6B:AD:35:DC:25:2D:FB:89:F1:2D
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dc49f50013693c9575c07eeeff9120cb18c54fdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:42:ac:e2:37:e2:8e:76:1d:1e:5b:9a:72:01:03:e0:be:ab:
         79:00:28:33:32:5f:31:8a:db:c8:b5:e3:91:32:33:a2:24:3a:
         77:15:a8:c1:24:00:11:91:ce:86:79:fc:3b:dc:0e:4b:bd:a4:
         86:44:16:59:b0:f7:13:ff:dc:fb:db:04:4f:69:11:9f:99:28:
         bd:21:29:e8:21:69:fc:1c:7b:87:ca:2a:96:db:13:35:dc:41:
         d7:67:74:83:82:73:4b:8b:50:32:67:39:1a:9c:b3:48:d7:1e:
         49:4d:7b:c5:c9:d4:e2:ca:91:67:2f:b4:58:eb:69:bf:30:e6:
         77:e5:8f:78:22:00:99:21:37:12:31:03:7c:36:fc:3e:1d:5e:
         f0:1c:2a:40:79:5c:d3:6a:f9:76:dd:c6:6f:c1:ac:21:2f:c9:
         2d:96:7f:95:0e:97:d0:ac:dd:7f:6b:a9:8e:9c:54:69:40:3f:
         fb:d4:89:2f:a8:fd:fa:91:ab:20:e1:f4:0a:99:72:09:66:f0:
         54:38:89:6d:f9:8a:13:04:b9:d6:07:5e:9a:a9:ed:cb:66:43:
         e1:e0:f8:cf:a2:57:a3:dd:cc:09:2c:72:d1:e0:29:3c:a5:b8:
         d1:8e:5d:89:8f:71:98:9d:e4:7a:87:b1:5a:dd:31:2b:e8:af:
         be:f9:e7:3b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCVbrMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNjI0
MDMwMDAwWhcNMjMwNjI0MDMwMDAwWjAzMTEwLwYDVQQDEyhkYzQ5ZjUwMDEzNjkz
Yzk1NzVjMDdlZWVmZjkxMjBjYjE4YzU0ZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5cBszRyn7+1Oi06wI6tdCNF5XItN0QqWT1U1j1S+QG7OHVrG
mpOSdp2K+AOVh4G6xkNF97J/YVc/yDFvaG9CZsdFc6xlMgVtKfYdkoKAuHN9M/gK
BBCeEl+oG6h483mT8Vf6+tjhpAp46vchzxEXiZZNGrhQPxu7YJ3Fp7MPPplPt0xx
P68tZKrbtfdC0mkRApK6qgjAKKsuh1s3Zlvwtwfd9PZToocyZvjzwKjarN1uxXLG
QGAH1lorR+TZcjTuAgegRTkEahI+5QQV8kocXU9yfaZUxBEDbcfn8f/2E7ltcwq3
5TuAj7U8gyOdoRzMzIZB8smNIys7+a5TDumfOQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFM+TdshzonX0FbNrrTXcJS37ifEtMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjL2RjNDlmNTAwMTM2OTNjOTU3NWMwN2VlZWZmOTEyMGNiMThjNTRmZGIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAY0Ks4jfijnYd
HluacgED4L6reQAoMzJfMYrbyLXjkTIzoiQ6dxWowSQAEZHOhnn8O9wOS72khkQW
WbD3E//c+9sET2kRn5kovSEp6CFp/Bx7h8oqltsTNdxB12d0g4JzS4tQMmc5Gpyz
SNceSU17xcnU4sqRZy+0WOtpvzDmd+WPeCIAmSE3EjEDfDb8Ph1e8BwqQHlc02r5
dt3Gb8GsIS/JLZZ/lQ6X0Kzdf2upjpxUaUA/+9SJL6j9+pGrIOH0CplyCWbwVDiJ
bfmKEwS51gdemqnty2ZD4eD4z6JXo93MCSxy0eApPKW40Y5diY9xmJ3keoexWt0x
K+ivvvnnOw==
-----END CERTIFICATE-----