Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e2a1db1f6d18469c396c4f43d3c7507cc5fed434.roa
File:                     e2a1db1f6d18469c396c4f43d3c7507cc5fed434.roa (raw, json)
Hash identifier:          xYTn6KlpN8u75/LjR+pE6v3DT4mK/3oDkJPm1O2qOt8=
Subject key identifier:   FB:89:EC:B6:EC:6C:A5:6A:82:F9:B7:F6:F0:D6:8E:88:C6:3E:B1:9E
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       04A710
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e2a1db1f6d18469c396c4f43d3c7507cc5fed434.roa
Signing time:             Sat 12 Mar 2022 01:38:15 +0000
ROA not before:           Sat 12 Mar 2022 03:00:00 +0000
ROA not after:            Sun 12 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304912 (0x4a710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 12 03:00:00 2022 GMT
            Not After : Mar 12 03:00:00 2023 GMT
        Subject: CN=e2a1db1f6d18469c396c4f43d3c7507cc5fed434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:a6:ff:c5:10:30:7e:9d:54:37:0f:96:d6:
                    41:55:90:09:45:ac:43:2c:74:4c:60:b8:71:69:2b:
                    ca:6d:9d:9f:9a:5f:50:7c:47:21:c5:9e:aa:31:c4:
                    c3:75:9a:12:c3:b5:63:e7:46:cf:bc:8e:50:5e:d5:
                    b8:9b:b2:15:2c:1f:69:78:e9:e9:93:89:59:67:79:
                    b2:03:8b:93:37:db:ae:ea:44:e6:19:de:b8:8f:4f:
                    7d:87:f8:a5:df:ba:8f:8e:50:21:fb:bf:d1:cf:da:
                    7c:ba:8d:0c:8c:53:48:06:81:f7:b6:41:74:40:ec:
                    b6:ad:02:70:e1:db:bd:3a:c8:4b:cd:e5:43:9e:43:
                    69:e2:bc:aa:11:18:c6:ce:54:73:e8:32:00:17:92:
                    c2:59:96:8d:1d:b0:eb:d7:ff:de:14:b0:be:5b:9c:
                    cf:06:2e:70:94:ff:ec:7c:82:b0:d1:42:54:a0:db:
                    c0:af:2d:18:12:f0:41:f2:30:b5:ba:53:40:78:44:
                    32:3f:0d:8b:7c:04:21:63:42:4e:1b:69:4e:89:cf:
                    21:13:29:ab:88:23:22:ee:d3:5d:9a:b3:29:14:3e:
                    9c:80:36:6a:fa:44:7a:f8:83:87:56:9b:e4:a9:49:
                    52:ad:3b:23:ab:74:22:ff:52:d5:0e:66:43:e7:aa:
                    84:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:89:EC:B6:EC:6C:A5:6A:82:F9:B7:F6:F0:D6:8E:88:C6:3E:B1:9E
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e2a1db1f6d18469c396c4f43d3c7507cc5fed434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:e8:0a:e7:b3:f4:41:66:75:81:59:c3:6f:fd:3f:49:ca:22:
         57:57:e2:cf:ea:da:da:5d:10:91:e4:e6:0b:3c:d4:0e:ec:46:
         1f:c5:c4:d8:d8:f1:f1:01:fa:4f:93:94:86:a3:a9:ce:44:41:
         6b:7a:76:5b:e7:34:83:a0:fb:16:a0:05:0d:8d:5a:c7:9f:e1:
         a8:91:4c:f6:73:07:97:fb:3a:c1:c3:4f:15:4d:05:23:8d:4c:
         85:e6:be:4a:0b:17:42:b3:1c:22:20:6e:eb:22:a4:25:5a:0f:
         4e:bb:88:4c:82:6a:3b:d3:51:7d:44:11:0d:d2:b9:51:0a:90:
         d0:b2:8d:e4:a7:85:f7:b2:fc:66:a7:8e:63:12:a8:de:b0:35:
         df:b9:e5:82:d5:80:1d:7b:a6:f9:6c:03:b1:22:0b:a9:36:ba:
         b7:69:da:70:5f:59:94:fb:ec:ec:88:10:72:99:a8:f3:7e:fd:
         94:b8:7d:50:ce:a0:a1:39:31:8a:00:96:58:2a:a2:a7:75:34:
         57:c4:3a:14:e3:ce:02:de:ba:fc:bd:ce:34:6f:a7:d3:45:b5:
         ca:f3:49:d2:44:57:93:2a:dd:20:ac:6e:e8:70:98:38:07:8c:
         c4:ac:05:c2:97:81:1e:8c:27:2a:cf:96:83:49:9d:01:f1:78:
         1a:e8:4b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----