Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ef8033ee632b24458b1c2870d5b00a5419506f50.roa
File:                     ef8033ee632b24458b1c2870d5b00a5419506f50.roa (raw, json)
Hash identifier:          UpgLda9k1xU+dwyBMWMjD4H/3Ugbhkp3ezv//vUyZ7I=
Subject key identifier:   D9:C0:FD:61:01:31:E2:6A:9F:77:82:26:43:7D:CF:4E:3B:F9:DE:AF
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       04DBE1
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ef8033ee632b24458b1c2870d5b00a5419506f50.roa
Signing time:             Wed 16 Mar 2022 02:41:39 +0000
ROA not before:           Wed 16 Mar 2022 03:00:00 +0000
ROA not after:            Thu 16 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318433 (0x4dbe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 16 03:00:00 2022 GMT
            Not After : Mar 16 03:00:00 2023 GMT
        Subject: CN=ef8033ee632b24458b1c2870d5b00a5419506f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:43:43:09:67:eb:1c:e4:85:9b:14:35:31:
                    50:92:24:3b:79:a2:6d:e6:f2:8a:54:ac:67:e6:d1:
                    86:6e:e1:1e:04:81:27:fe:d6:4c:2e:ee:8b:60:ed:
                    0d:69:00:61:8f:9b:8f:aa:f1:46:b5:95:98:ad:47:
                    49:6a:19:2f:56:cb:d0:49:15:e5:79:0e:94:0d:98:
                    9a:fe:99:42:8b:69:ab:5b:ff:a9:67:3a:2c:f4:aa:
                    ce:7f:c7:18:db:07:24:bf:90:37:c7:db:95:03:ba:
                    96:8e:22:a8:44:24:ff:90:28:f2:d7:4e:b8:f4:01:
                    cb:16:3f:1b:89:fb:1f:b4:2c:65:cf:39:05:f5:e1:
                    ca:9b:0b:e1:7e:ab:cb:88:43:e0:a0:e6:44:99:40:
                    b9:16:d5:c3:e7:d1:1e:43:49:28:21:64:b9:d9:0a:
                    04:95:15:52:7f:11:6b:4d:6d:6f:e3:a3:5d:90:a9:
                    65:f5:13:ee:25:45:2e:67:48:a6:74:ca:a9:9d:e6:
                    cf:86:87:f8:97:c1:55:36:69:dc:35:32:fb:57:b9:
                    c5:88:39:5e:14:69:47:ce:ac:b8:dd:92:6f:99:ce:
                    8d:b9:4f:78:1e:d2:66:15:a4:28:a0:be:35:7d:87:
                    ad:41:ca:d9:51:f3:20:81:dd:c3:1f:9b:41:1a:ff:
                    93:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C0:FD:61:01:31:E2:6A:9F:77:82:26:43:7D:CF:4E:3B:F9:DE:AF
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/ef8033ee632b24458b1c2870d5b00a5419506f50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:d6:a2:ba:54:b4:04:c5:a9:2e:58:2a:5a:9c:66:f6:8b:58:
         84:4d:6d:2c:61:7b:7a:8d:86:90:12:46:8b:b5:05:bb:15:82:
         e1:d4:00:e1:0f:31:6d:9f:2e:d3:54:f7:fe:30:9e:f9:4c:50:
         68:57:2f:a5:4b:f9:4d:00:ab:00:7f:25:8b:a0:4d:ae:be:57:
         1c:f0:ea:06:e8:7b:aa:8a:51:05:61:a3:96:f6:1f:5c:1d:32:
         53:65:e5:dd:17:90:75:1d:d7:ec:6f:7e:a2:c3:e2:e7:f3:c9:
         be:77:d0:f1:65:d0:b9:a1:77:82:84:be:a2:ee:7e:4f:c1:e5:
         2b:73:08:3e:28:9a:57:1e:ee:73:88:a6:cc:76:9c:22:4f:3f:
         80:21:88:8a:1b:4f:e0:10:e1:28:15:25:e3:5f:8f:9c:bd:da:
         de:74:9b:6d:67:07:15:52:a2:b2:a5:00:7e:98:6b:f8:cb:88:
         41:42:f9:2f:a8:73:f6:a0:63:c9:97:01:e9:c7:e1:96:ee:27:
         92:81:ec:7c:66:ab:d9:02:2a:3b:f1:78:31:2e:91:2b:39:6d:
         7c:20:7b:09:c2:35:c8:9d:f2:76:82:86:27:bb:f1:8b:25:98:
         1d:2e:f7:ba:44:9e:fd:d0:9e:99:fd:ac:f0:84:71:f2:a9:9c:
         60:85:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----