Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/df87bc6c67c2e2014da0c33b31e92213b3118aef.roa
File:                     df87bc6c67c2e2014da0c33b31e92213b3118aef.roa (raw, json)
Hash identifier:          FT3BHbzKfjHDA+3CmznFqfnfls3PLYiiU4NTGTlo57E=
Subject key identifier:   92:23:38:D8:04:8E:3A:11:9B:D2:F9:B3:8D:3A:63:44:87:E2:64:14
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0690CA
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/df87bc6c67c2e2014da0c33b31e92213b3118aef.roa
Signing time:             Sat 23 Apr 2022 07:21:13 +0000
ROA not before:           Sat 23 Apr 2022 03:00:00 +0000
ROA not after:            Sun 23 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430282 (0x690ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr 23 03:00:00 2022 GMT
            Not After : Apr 23 03:00:00 2023 GMT
        Subject: CN=df87bc6c67c2e2014da0c33b31e92213b3118aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:91:d4:9d:3c:37:fb:4a:0d:30:41:8d:ea:55:
                    d3:72:3a:b4:ba:05:67:65:a3:4f:93:16:76:8b:6d:
                    fa:69:75:d1:4b:16:ff:eb:f6:b5:4e:b7:62:ba:ce:
                    3c:32:c4:a7:af:35:6a:86:64:56:20:e7:73:65:b7:
                    64:c9:0b:f2:a0:c2:c8:68:1a:5f:01:eb:34:e6:33:
                    af:bf:43:56:9d:f3:27:6c:97:1f:ca:f5:22:34:ad:
                    58:7e:dd:18:70:28:39:b7:fb:ab:62:2b:fa:09:bd:
                    63:ad:7d:1d:12:23:70:13:b9:8d:79:ca:9a:14:49:
                    29:55:6f:75:e2:7f:bc:5d:c5:d4:12:ea:ee:50:b6:
                    95:2f:fe:7c:7d:22:d1:f6:9a:cb:07:7b:ff:20:36:
                    b8:e7:b7:39:3c:45:2e:14:3f:1f:ea:24:a8:95:28:
                    6b:19:b0:01:4f:04:88:5f:b2:01:95:1c:52:07:aa:
                    be:b3:c1:67:c6:60:72:ee:91:a2:9c:e8:5a:f0:e4:
                    be:92:e5:61:44:48:e4:0a:6c:0f:2d:bc:7f:db:62:
                    ca:43:43:fd:16:39:60:e9:da:ba:8e:d2:04:3b:f9:
                    78:50:59:4f:34:e9:42:2c:fa:b9:46:a6:e1:9b:5e:
                    ff:14:08:8a:e9:9b:41:e9:21:c8:cd:89:ec:7f:52:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:23:38:D8:04:8E:3A:11:9B:D2:F9:B3:8D:3A:63:44:87:E2:64:14
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/df87bc6c67c2e2014da0c33b31e92213b3118aef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:f4:f9:91:94:fc:1d:01:c9:69:89:86:84:6d:aa:89:44:83:
         74:f3:e5:df:e7:6c:ed:99:c9:7d:05:4e:2b:73:7c:3b:0e:3c:
         b9:d7:5c:66:1c:0b:06:3f:53:15:62:77:a0:bb:dd:0f:dc:e0:
         51:96:56:84:7e:be:79:06:47:3d:48:65:8c:ba:12:6f:0a:b8:
         fc:c3:36:23:53:a3:4f:da:33:60:3a:9c:81:22:52:53:f1:8c:
         61:3d:a6:4d:77:85:b6:9b:b2:8e:af:a2:01:67:49:73:0d:00:
         62:24:3d:4e:4a:90:41:8b:c5:f1:01:92:05:23:d0:e2:fc:ee:
         c1:e8:ed:2d:3d:89:75:95:ed:85:e1:17:16:38:c6:eb:97:aa:
         3e:c6:1d:f7:cc:7a:80:65:f6:29:6e:c4:98:a2:d3:d7:12:1b:
         55:87:34:4f:85:5f:4d:f0:ea:45:ad:a3:dc:83:e7:41:83:30:
         1e:54:8b:6a:00:a9:de:68:81:0c:1d:f7:04:b3:94:da:a3:03:
         bf:64:6e:7d:c7:3f:30:bd:ea:c7:fb:15:4e:c8:13:ca:1e:91:
         c6:6b:dd:89:57:40:19:6d:85:41:cc:1a:8c:37:1f:23:74:6a:
         67:fd:b3:2d:9b:77:d4:96:95:fd:b4:f3:cb:14:b7:f9:ed:74:
         c1:52:57:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----