Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e143bf5bfb6bba714cea7f1c7f3781220bcfa7db.roa
File:                     e143bf5bfb6bba714cea7f1c7f3781220bcfa7db.roa (raw, json)
Hash identifier:          gW2By6P83TiUqZteACEmuoHZXtK0s5gYnTUfS1tD05U=
Subject key identifier:   9B:6C:AD:06:2E:F4:1A:8E:67:6A:ED:F1:22:2F:FC:C1:0F:E2:E5:C3
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       038BF4
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e143bf5bfb6bba714cea7f1c7f3781220bcfa7db.roa
Signing time:             Tue 15 Feb 2022 04:53:06 +0000
ROA not before:           Tue 15 Feb 2022 03:00:00 +0000
ROA not after:            Wed 15 Feb 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232436 (0x38bf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Feb 15 03:00:00 2022 GMT
            Not After : Feb 15 03:00:00 2023 GMT
        Subject: CN=e143bf5bfb6bba714cea7f1c7f3781220bcfa7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6e:77:6b:78:9a:ec:b6:e3:7a:62:20:b8:29:
                    18:f0:a2:63:a4:1e:a5:15:7a:f5:a3:0a:dd:bd:02:
                    b3:6e:f4:9a:6f:1a:cf:86:25:1b:fa:49:31:86:e3:
                    c0:e9:a1:7b:9c:34:2a:32:3a:de:e9:d5:05:b7:51:
                    9d:d1:32:dc:ee:35:d0:d6:de:17:e5:31:2f:7d:6e:
                    ad:c7:38:4b:6f:05:8f:e3:9d:3a:1b:c1:e6:41:e8:
                    d1:0c:42:59:cd:9c:f5:c1:46:90:6e:3f:d5:17:56:
                    9d:1d:71:6a:fb:5e:52:db:66:6e:7b:e2:d6:85:2d:
                    d5:c8:5e:71:5c:82:25:1a:25:a2:c3:4d:92:70:96:
                    67:b2:a0:e1:c9:72:c4:94:f7:aa:81:a8:0f:de:6f:
                    a6:3f:6d:a3:ec:d2:ad:8e:b5:83:15:7e:cf:45:5c:
                    1b:48:d5:68:30:23:68:d1:66:71:db:c5:e4:b2:26:
                    95:5c:02:bf:ab:f0:49:20:aa:b3:54:b9:b4:65:91:
                    48:80:69:73:23:38:14:d9:4b:18:24:43:cd:df:dc:
                    73:ad:25:ab:30:55:68:8f:7a:29:66:f0:d9:0a:1c:
                    10:56:e2:9a:79:2a:67:47:95:80:0e:a2:09:a0:8d:
                    59:46:54:f2:da:3f:7a:07:fc:05:15:8c:e3:02:40:
                    2c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6C:AD:06:2E:F4:1A:8E:67:6A:ED:F1:22:2F:FC:C1:0F:E2:E5:C3
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e143bf5bfb6bba714cea7f1c7f3781220bcfa7db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         88:79:66:87:fb:89:59:47:4a:5d:f5:4b:58:d0:f3:f4:78:a1:
         8c:3e:c5:f5:16:c7:18:af:59:de:40:20:6e:fa:76:46:49:09:
         03:98:b7:ae:5f:83:57:0c:0c:33:df:9e:45:aa:7b:dd:4a:21:
         9a:0d:72:0f:92:13:7d:1f:70:b1:58:77:bc:61:c2:a6:32:58:
         49:61:de:44:8f:0a:13:dc:8e:77:e4:88:72:b4:cc:2b:68:0f:
         46:cb:8f:03:c5:7d:a9:c8:c8:8e:41:eb:ce:6f:e3:5c:ea:70:
         6a:23:93:98:c9:cc:24:a3:45:ec:50:af:cc:ab:94:ce:34:2a:
         0a:52:74:23:18:79:a0:c9:22:81:28:b9:21:e3:c5:bf:29:5e:
         06:4a:be:ca:f0:f8:ed:ca:e5:91:78:7b:d8:f2:2f:be:b4:c8:
         63:d8:22:e0:51:88:a8:0a:cc:97:53:a5:44:85:12:d4:12:19:
         6a:9b:a5:52:47:65:70:06:77:fb:e7:85:f6:fa:11:60:e1:af:
         b6:f0:0e:09:f3:49:00:b4:5c:ff:09:4d:7a:17:5d:cc:e5:12:
         97:c8:7d:82:36:b7:b9:0b:29:0d:48:a3:cb:eb:c4:96:d6:4e:
         1a:53:2d:d8:69:0f:fa:d8:e1:60:d4:85:eb:10:1e:3a:3f:75:
         41:2c:72:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----