Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dfff316329ffbab06abcd947008aaeafafda099d.roa
File:                     dfff316329ffbab06abcd947008aaeafafda099d.roa (raw, json)
Hash identifier:          3CzGsyJpC8bgPa5A2s0B3WAFl/fVtOlrArlqHyfeYJI=
Subject key identifier:   E5:B9:2E:D2:0D:32:D1:45:E6:B1:56:F7:91:48:46:C8:EE:29:13:B8
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       096C5A
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dfff316329ffbab06abcd947008aaeafafda099d.roa
Signing time:             Sun 26 Jun 2022 02:42:25 +0000
ROA not before:           Sun 26 Jun 2022 03:00:00 +0000
ROA not after:            Mon 26 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617562 (0x96c5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 26 03:00:00 2022 GMT
            Not After : Jun 26 03:00:00 2023 GMT
        Subject: CN=dfff316329ffbab06abcd947008aaeafafda099d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cd:7e:00:15:2b:9c:68:ed:cf:46:e8:47:d2:
                    7d:c7:b4:92:99:c9:ed:71:7d:ec:ed:6d:6c:4d:1b:
                    4d:a4:45:bb:9a:e1:2d:08:49:c2:f5:09:da:e9:2d:
                    ef:94:ea:71:98:f0:a4:ba:3b:05:e3:3d:3f:84:0a:
                    86:65:cd:c2:bb:ba:54:6c:bb:11:a1:82:6e:8b:15:
                    de:e0:d3:24:8e:5e:5b:20:a0:bc:c1:b3:c6:0b:a3:
                    4f:4b:a5:2a:2b:62:7f:7e:89:b7:fd:9b:84:47:06:
                    7e:16:3a:e9:ec:b1:a5:4f:8b:b8:0f:b0:fa:04:47:
                    20:8f:04:bb:53:64:45:62:01:26:95:d4:87:bb:f3:
                    33:cb:5a:32:33:2d:5b:7d:21:d5:69:5f:49:7e:f2:
                    7e:48:d9:52:63:03:62:b1:5f:09:45:26:f8:d8:35:
                    ef:ba:8f:d2:34:90:5b:aa:fa:09:4d:9a:b4:4b:56:
                    ae:6f:20:19:58:34:67:59:91:0e:df:6c:0c:53:bf:
                    b9:0f:f9:0e:fa:5b:82:43:8b:2e:63:07:78:15:fc:
                    72:c2:ef:67:5a:47:6b:d5:9e:e2:7d:98:b6:98:23:
                    21:e2:e3:94:50:0d:f6:c0:3b:25:2e:5c:4c:fb:ef:
                    5e:bc:69:f0:8d:28:12:f3:9f:ae:e2:aa:d1:46:ce:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B9:2E:D2:0D:32:D1:45:E6:B1:56:F7:91:48:46:C8:EE:29:13:B8
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/dfff316329ffbab06abcd947008aaeafafda099d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:b1:44:40:99:a7:c7:1c:66:cd:66:71:a6:5a:81:df:ba:90:
         63:21:bb:8d:57:c1:6a:ba:86:23:f5:62:6b:56:23:fa:6c:c4:
         75:7a:30:81:e8:af:04:4d:23:62:2e:8c:9c:a0:60:80:cf:84:
         b5:57:d9:af:73:29:9e:3f:ed:9e:38:d4:2a:62:05:05:ed:f7:
         22:73:57:36:39:27:18:2c:47:70:85:3d:1d:dc:70:24:cb:9a:
         66:4c:be:c9:b1:aa:45:65:b6:7a:71:32:a2:88:e9:88:ff:ed:
         69:90:f8:67:99:db:be:95:c5:0a:f6:f0:80:6f:d4:b2:14:d5:
         0f:f8:f3:ad:64:9c:ef:11:64:9d:96:99:97:20:5d:40:bd:df:
         58:94:57:6f:5f:00:5e:d5:ef:d6:53:67:9d:90:25:e6:b1:1d:
         56:25:eb:f5:de:f5:dc:40:d5:39:b6:f8:f3:ff:83:d2:74:31:
         9d:a8:60:23:c5:18:fa:49:b6:73:4f:e7:ac:ad:9a:9a:25:67:
         07:80:55:a8:64:88:51:58:28:21:5c:70:ce:2b:7c:c2:61:ca:
         a7:b1:06:d3:7c:52:8a:ba:d8:ab:ea:d9:06:95:8d:59:dd:e1:
         ab:c6:ee:51:12:3c:d2:92:7b:c3:29:58:7f:f7:8e:bb:3f:cf:
         19:90:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----