Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e79431997a4232d269a7afc34c271077d28f63b4.roa
File:                     e79431997a4232d269a7afc34c271077d28f63b4.roa (raw, json)
Hash identifier:          rVD6JL3qngWxdxhzDxIEnfd4gbm+F7AhjUJepX/1bX0=
Subject key identifier:   DF:0B:BB:0A:60:1A:F1:76:8F:D7:51:C9:56:E4:53:39:86:43:3F:B2
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0DA3F5
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e79431997a4232d269a7afc34c271077d28f63b4.roa
Signing time:             Tue 27 Sep 2022 03:10:20 +0000
ROA not before:           Tue 27 Sep 2022 03:00:00 +0000
ROA not after:            Wed 27 Sep 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893941 (0xda3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Sep 27 03:00:00 2022 GMT
            Not After : Sep 27 03:00:00 2023 GMT
        Subject: CN=e79431997a4232d269a7afc34c271077d28f63b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:eb:e0:92:20:ae:b4:1f:2d:bd:59:41:df:7f:
                    a0:82:27:d4:6a:b5:8f:db:2c:28:26:6f:f1:4a:dc:
                    9b:60:9a:96:3e:dc:bd:c0:26:c4:37:e1:5e:1a:7e:
                    d8:3f:9e:80:51:a5:44:80:58:bc:fd:a6:a9:31:b1:
                    84:71:3b:27:6b:0f:81:27:dc:8a:85:42:4e:09:1d:
                    bd:0c:36:38:8d:aa:8b:9b:a2:5e:57:fd:bf:09:e8:
                    60:33:32:15:68:0b:ae:94:b4:f9:33:3d:44:62:09:
                    93:72:5f:a6:81:6c:f1:09:c5:75:74:da:ef:da:35:
                    ba:15:e6:d3:60:d0:86:52:14:82:b0:fc:38:85:a4:
                    67:ff:50:b8:92:6e:77:51:b5:77:f0:82:45:44:33:
                    f7:33:d5:ab:33:8f:01:08:7e:94:09:04:97:e5:bd:
                    69:51:11:d0:4a:3f:0d:be:af:3b:9e:69:9c:9a:67:
                    b0:2e:47:ba:32:2a:0d:de:84:b1:86:48:10:b4:fd:
                    15:59:6c:6a:e8:a3:2c:01:11:e3:ff:0d:13:42:f9:
                    43:11:20:1a:bc:db:0a:91:c8:92:16:de:1f:f3:5e:
                    9a:47:7c:22:a7:26:04:23:99:89:9d:4f:46:8f:54:
                    13:77:2e:cc:e1:fd:8e:6e:62:4d:9e:8c:58:f2:78:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0B:BB:0A:60:1A:F1:76:8F:D7:51:C9:56:E4:53:39:86:43:3F:B2
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/e79431997a4232d269a7afc34c271077d28f63b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:86:99:a9:88:32:aa:39:fd:1e:47:e8:b0:a0:dc:db:98:23:
         b7:c4:a9:39:80:a3:14:72:17:77:fa:a3:d2:d1:8d:aa:e1:e8:
         54:ea:84:7f:3f:72:99:2c:92:32:a3:21:f4:57:e5:a3:b1:04:
         47:11:a8:96:a9:78:4e:da:23:05:53:a1:b6:39:eb:0b:0a:6b:
         ed:b2:4b:d8:02:a5:aa:17:07:43:5a:55:4c:0f:dc:e8:c6:ae:
         96:d6:5f:23:2d:d9:f3:1f:58:53:ce:a1:31:61:ee:7d:01:17:
         19:56:b7:43:22:b7:05:df:c3:75:29:aa:0e:ab:d0:b2:6a:e7:
         fc:5f:08:20:9d:44:49:52:f1:49:36:52:bc:87:a1:e8:ae:41:
         c5:6d:f8:54:e6:49:a6:84:0c:50:eb:ea:b5:e8:fd:77:4c:dc:
         9d:9c:5d:e4:dc:da:0b:d2:5a:b0:38:6b:ed:4c:d6:d0:e7:19:
         0e:a1:c8:b7:80:d0:b4:3c:f0:02:9c:04:ea:ef:c4:99:6a:93:
         d4:cb:1d:0e:a9:d5:42:e0:fb:da:c9:67:17:99:3f:02:49:c4:
         30:ac:c3:5f:11:18:54:ec:7b:e3:e0:d0:14:e4:87:9c:4b:b3:
         ae:01:19:88:44:4c:aa:7d:8e:df:13:3b:6f:d6:c5:14:9b:3e:
         34:a8:94:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----