Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/eb743f0b02b77e8780db6cc109c54a6c75b7855a.roa
File:                     eb743f0b02b77e8780db6cc109c54a6c75b7855a.roa (raw, json)
Hash identifier:          6c3Ha1GAbp4Tdo/Uzt5wHR9boLVwvW4LyOGQRicL11o=
Subject key identifier:   97:7E:21:72:D8:40:F8:CA:D0:3C:D3:7A:6D:33:B3:74:6B:50:DE:20
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       069D13
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/eb743f0b02b77e8780db6cc109c54a6c75b7855a.roa
Signing time:             Sun 24 Apr 2022 11:20:50 +0000
ROA not before:           Sun 24 Apr 2022 03:00:00 +0000
ROA not after:            Mon 24 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433427 (0x69d13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr 24 03:00:00 2022 GMT
            Not After : Apr 24 03:00:00 2023 GMT
        Subject: CN=eb743f0b02b77e8780db6cc109c54a6c75b7855a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:38:0b:bb:b6:b3:68:37:5c:ec:d6:c7:e0:e7:
                    3f:c1:16:f3:3a:83:88:a6:89:5e:2b:2e:37:b9:72:
                    22:48:36:d2:a2:19:16:99:0d:66:e9:f2:2f:b7:01:
                    bb:47:5b:c3:0a:44:69:c9:95:8c:57:31:d7:24:15:
                    8b:86:67:99:4d:1a:5d:d2:68:60:4e:ee:d9:18:b0:
                    5b:40:1c:f8:af:18:ff:cc:98:9f:94:26:dc:c8:5c:
                    25:86:e6:2b:e2:f8:86:70:70:a1:ce:c6:c8:63:eb:
                    df:5f:1c:ef:8f:29:05:e4:26:c4:23:50:e1:64:58:
                    23:a9:56:8c:5f:5f:84:f9:a3:43:e0:6a:07:ec:97:
                    58:47:b5:c7:59:c7:e7:2b:7a:45:78:95:f0:f4:77:
                    16:c0:24:ef:ab:e4:cd:e4:75:c2:da:db:f1:0d:1f:
                    89:4c:17:73:f0:7d:ac:93:f6:9c:c1:a2:47:76:0f:
                    5c:3c:fa:c3:71:94:da:7d:24:f6:fd:0a:03:9a:d6:
                    aa:6f:c5:8c:df:ac:b0:ad:a5:d5:39:45:b3:d7:b8:
                    9a:50:99:de:6f:b0:1f:34:8c:6c:6a:76:16:fb:37:
                    3c:d4:33:d8:a6:ad:d3:65:60:ef:90:62:82:8e:ee:
                    e5:bb:a1:d8:0e:05:47:18:72:f8:90:2b:31:ac:c2:
                    ce:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7E:21:72:D8:40:F8:CA:D0:3C:D3:7A:6D:33:B3:74:6B:50:DE:20
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/eb743f0b02b77e8780db6cc109c54a6c75b7855a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:bc:79:04:f4:7f:32:0c:15:f3:18:47:56:1d:2f:48:43:99:
         e7:aa:01:97:8f:6f:6e:61:2b:5c:5d:72:04:cc:6b:fa:a3:12:
         9c:bc:74:2b:dc:ff:96:e0:6c:04:57:10:73:e8:97:6a:72:74:
         8e:18:9b:18:4d:29:75:1b:3c:6e:ca:c3:00:3d:84:79:73:77:
         89:28:d9:e4:80:3c:b0:63:43:3d:b6:8b:41:6d:1a:2b:0d:ed:
         a8:a8:10:d5:7a:24:85:90:75:9e:23:8c:c2:fc:59:1b:e6:4c:
         70:7f:1a:32:42:1a:3b:96:e1:f5:9a:43:a3:0f:f5:12:a5:e4:
         62:ac:a4:f8:a9:37:d5:2f:9a:fd:3d:37:fb:30:8c:e4:30:ff:
         6f:9a:bc:aa:37:3b:88:8f:1b:d2:b3:a2:09:1d:37:a1:60:86:
         cd:1a:0e:ed:aa:c1:ba:88:9c:6f:9e:bb:88:9c:6a:c8:17:60:
         4d:d6:7e:ba:07:6f:20:a1:db:8e:0e:b6:28:4f:0f:aa:32:b7:
         57:33:8d:3c:53:0b:99:78:89:5c:cd:a4:c0:5d:25:ca:e4:6e:
         64:27:2f:00:e8:0a:e7:d0:fc:81:8d:78:1d:56:bf:93:19:66:
         90:49:c9:0d:37:e0:d6:e0:fc:9b:0d:18:58:64:e0:7e:4a:f7:
         57:51:af:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----