Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/f0a322ee2d6212fe1de5b8ba2544740f93d8f1df.roa
File:                     f0a322ee2d6212fe1de5b8ba2544740f93d8f1df.roa (raw, json)
Hash identifier:          E3RcRT91AuCYwpo7fY1zd78Ja5zNMWTCSr3hcAPGekw=
Subject key identifier:   0F:6F:7F:93:FE:9C:2C:DC:10:93:0E:4A:03:1C:9E:72:09:38:4B:5B
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       05892C
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/f0a322ee2d6212fe1de5b8ba2544740f93d8f1df.roa
Signing time:             Wed 30 Mar 2022 00:11:45 +0000
ROA not before:           Wed 30 Mar 2022 03:00:00 +0000
ROA not after:            Thu 30 Mar 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362796 (0x5892c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Mar 30 03:00:00 2022 GMT
            Not After : Mar 30 03:00:00 2023 GMT
        Subject: CN=f0a322ee2d6212fe1de5b8ba2544740f93d8f1df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:82:71:4d:47:09:30:13:5b:89:87:d3:2f:d2:
                    1e:4b:70:1d:b4:95:70:c5:79:1c:fd:f6:aa:c0:a0:
                    93:67:6f:f9:64:4d:60:a5:6f:c8:28:9f:d4:10:54:
                    62:b3:87:41:92:68:7b:09:f7:2b:3b:3f:9a:02:ac:
                    98:59:6d:50:54:d1:56:c4:1a:95:89:fe:c6:b8:4e:
                    37:0a:d5:b8:4d:72:56:00:ed:eb:0e:0e:5d:3b:07:
                    1f:78:84:2f:d7:cb:ac:21:4a:11:f1:0c:d1:95:d3:
                    b0:b6:94:88:36:12:29:b1:83:65:4a:a6:7c:22:28:
                    c4:74:e6:80:52:b4:93:e0:04:b6:47:0f:72:39:94:
                    8d:64:09:a4:99:a8:98:c4:89:52:db:c7:db:97:50:
                    fc:f3:3f:99:c1:ae:a7:04:9f:08:c4:1e:6f:16:12:
                    44:a9:7a:63:fc:b2:d6:4f:67:5e:15:57:28:40:93:
                    30:78:88:f8:b7:ee:6d:d5:04:03:28:cc:1c:c1:d5:
                    15:a2:86:a7:c8:e0:52:d6:1a:3e:7b:77:19:35:16:
                    64:43:13:87:a7:f8:38:6d:8e:a5:d3:c7:c3:7a:1d:
                    11:8b:8a:8c:3c:1e:53:c3:24:7e:ba:ff:d2:55:71:
                    ab:37:81:90:1c:9d:5d:ac:20:c9:91:3f:9e:1e:f3:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6F:7F:93:FE:9C:2C:DC:10:93:0E:4A:03:1C:9E:72:09:38:4B:5B
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/f0a322ee2d6212fe1de5b8ba2544740f93d8f1df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:0d:20:85:c7:c1:8b:25:7d:65:82:c5:43:9c:ef:48:6a:c4:
         66:da:01:bf:9c:cb:7a:5d:34:7c:f9:97:d2:14:f4:0a:a0:67:
         b3:30:d4:6f:64:62:3f:f2:81:c6:ca:c4:7c:d8:b9:f1:3d:43:
         a6:d1:24:c6:d1:4b:5d:23:c0:f6:12:09:3d:f5:c8:2e:73:65:
         d7:0c:b4:43:b2:b5:52:4f:9a:5d:d0:91:bf:c1:8b:57:23:50:
         96:b8:8b:85:bf:bd:d4:a9:f7:10:b1:11:9f:67:c3:45:21:e7:
         01:d6:b7:0e:eb:41:8b:fc:3e:f7:03:15:bb:64:68:bd:9e:bf:
         c7:19:ed:a0:b0:a0:92:a5:de:69:05:5a:4a:40:4f:d6:5d:41:
         22:66:0f:44:bd:a8:68:f2:b6:26:c0:b9:8f:33:b9:09:b2:fd:
         48:bc:80:cc:3d:4d:a1:08:3b:9b:03:e3:db:42:fc:e0:de:0b:
         b8:35:dc:ee:87:56:16:b2:0d:08:e4:39:a6:92:21:1c:86:9b:
         b6:9b:f1:36:25:ec:2a:f1:25:5c:8a:dc:07:29:2b:d0:28:be:
         d3:ff:5a:fc:dc:26:e4:a6:14:a1:fb:29:ef:cc:22:f5:56:c0:
         e3:ee:8f:cd:b4:7e:3c:5c:99:50:4f:80:20:53:67:dc:63:c5:
         32:c4:74:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----