Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dce568851670be4286426cd1c6489e4d56d19814.roa
File:                     dce568851670be4286426cd1c6489e4d56d19814.roa (raw, json)
Hash identifier:          94jyOsv3wADiwXFOxZlh1J1krWkzVEIE3OHxhxwCwV0=
Subject key identifier:   E8:74:7F:B3:2C:3E:16:60:B6:80:A4:80:39:C9:79:5A:5D:FD:BC:9C
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       041BB2
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dce568851670be4286426cd1c6489e4d56d19814.roa
Signing time:             Mon 28 Feb 2022 05:38:31 +0000
ROA not before:           Mon 28 Feb 2022 03:00:00 +0000
ROA not after:            Tue 28 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269234 (0x41bb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 28 03:00:00 2022 GMT
            Not After : Feb 28 03:00:00 2023 GMT
        Subject: CN=dce568851670be4286426cd1c6489e4d56d19814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:7a:b4:b6:3a:76:15:58:32:22:34:00:f3:
                    27:dd:dd:28:e5:1e:2b:a0:e1:b7:c3:16:b5:80:92:
                    41:08:f0:29:9b:b3:77:16:e4:a5:db:e7:4a:3c:df:
                    7b:97:10:1b:83:ce:68:1c:54:64:2f:af:2c:77:65:
                    7c:79:09:37:da:65:91:cb:3e:ad:0f:62:ed:04:6e:
                    ec:ee:61:28:52:4d:4f:ac:a6:97:3e:af:f6:f1:6d:
                    07:fb:bb:b8:44:0a:31:e1:a3:a2:32:a2:97:87:c0:
                    ac:37:b7:63:f3:07:71:c9:65:9d:02:e7:bc:9f:18:
                    81:9e:01:9b:a8:c5:66:e0:30:f3:3c:2d:0d:2f:d8:
                    e2:ef:64:37:7d:9b:74:6a:68:e3:09:ef:bc:e0:6d:
                    45:37:03:14:fd:2d:f0:91:21:18:de:10:21:b0:ae:
                    d5:36:50:96:ef:9b:97:20:15:12:cc:96:65:f2:bc:
                    a6:ce:96:7e:ee:85:3e:db:74:0c:6f:8f:4c:a1:3b:
                    fc:db:9f:09:12:d8:89:46:e8:fe:f8:95:9a:8b:ba:
                    37:c2:cb:10:7f:c3:59:03:62:b4:bf:ba:56:74:03:
                    b7:2c:4e:eb:5a:a2:23:0b:4d:06:a4:d1:b2:e7:f4:
                    64:77:78:e3:00:b1:eb:5a:6a:98:6c:b6:0b:a0:c4:
                    78:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:74:7F:B3:2C:3E:16:60:B6:80:A4:80:39:C9:79:5A:5D:FD:BC:9C
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dce568851670be4286426cd1c6489e4d56d19814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         ce:7f:ee:c8:ee:fa:3d:dc:a7:fb:34:5d:b4:57:97:89:70:2e:
         d1:b2:47:de:e1:cc:84:40:99:80:6b:31:e2:93:60:75:1a:b1:
         df:7b:1c:cf:ac:5d:20:96:62:06:68:9c:8c:23:b4:b0:fc:81:
         9b:db:b7:f6:b6:e3:9d:46:42:57:24:a6:fe:39:04:09:cf:29:
         d4:0a:06:f4:58:61:03:a4:96:d3:f0:8d:90:b0:24:ff:ed:c5:
         d7:bf:6e:87:24:db:8a:df:4c:66:2b:83:6a:6f:3e:a8:1c:f6:
         56:1e:59:0f:27:8f:f7:e4:e6:8b:d7:72:53:bf:e4:a0:27:67:
         41:5c:78:01:e6:84:c8:03:12:ac:44:ad:aa:7c:06:91:31:59:
         b6:01:31:f0:cf:11:c1:f6:a8:c6:4c:a3:92:1b:79:d4:2c:a2:
         ed:70:e4:f5:29:68:e9:59:5e:2b:70:2b:2c:90:31:3b:11:46:
         b5:2d:a0:07:54:5a:b4:38:a4:e6:8b:cd:64:7e:93:63:10:35:
         56:c2:52:aa:0d:46:9e:c8:ce:57:fa:62:72:5d:7e:f3:fc:d7:
         9d:9d:92:a1:85:73:fa:13:dd:82:67:fb:29:b7:61:7f:4c:07:
         11:8f:a0:75:38:9e:9d:74:86:2f:c5:7d:be:2e:48:b4:72:07:
         ca:81:15:cf
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDBBuyMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwMjI4
MDMwMDAwWhcNMjMwMjI4MDMwMDAwWjAzMTEwLwYDVQQDEyhkY2U1Njg4NTE2NzBi
ZTQyODY0MjZjZDFjNjQ4OWU0ZDU2ZDE5ODE0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAn2t6tLY6dhVYMiI0APMn3d0o5R4roOG3wxa1gJJBCPApm7N3
FuSl2+dKPN97lxAbg85oHFRkL68sd2V8eQk32mWRyz6tD2LtBG7s7mEoUk1PrKaX
Pq/28W0H+7u4RAox4aOiMqKXh8CsN7dj8wdxyWWdAue8nxiBngGbqMVm4DDzPC0N
L9ji72Q3fZt0amjjCe+84G1FNwMU/S3wkSEY3hAhsK7VNlCW75uXIBUSzJZl8rym
zpZ+7oU+23QMb49MoTv8258JEtiJRuj++JWai7o3wssQf8NZA2K0v7pWdAO3LE7r
WqIjC00GpNGy5/Rkd3jjALHrWmqYbLYLoMR42wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFOh0f7MsPhZgtoCkgDnJeVpd/bycMB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjL2RjZTU2ODg1MTY3MGJlNDI4NjQyNmNkMWM2NDg5ZTRkNTZkMTk4MTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAzn/uyO76Pdyn
+zRdtFeXiXAu0bJH3uHMhECZgGsx4pNgdRqx33scz6xdIJZiBmicjCO0sPyBm9u3
9rbjnUZCVySm/jkECc8p1AoG9FhhA6SW0/CNkLAk/+3F179uhyTbit9MZiuDam8+
qBz2Vh5ZDyeP9+Tmi9dyU7/koCdnQVx4AeaEyAMSrEStqnwGkTFZtgEx8M8Rwfao
xkyjkht51Cyi7XDk9Slo6VleK3ArLJAxOxFGtS2gB1RatDik5ovNZH6TYxA1VsJS
qg1GnsjOV/picl1+8/zXnZ2SoYVz+hPdgmf7Kbdhf0wHEY+gdTienXSGL8V9vi5I
tHIHyoEVzw==
-----END CERTIFICATE-----