Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/f75aa10577e9bd3b938fd5473b0993dd03e617f8.roa
File:                     f75aa10577e9bd3b938fd5473b0993dd03e617f8.roa (raw, json)
Hash identifier:          WUvoIymj4c/RlfaiXLEsrzLPOoyWeMpyTe7vN9dN0Sw=
Subject key identifier:   F7:1D:24:AB:D2:55:E3:83:A5:B4:3F:9D:E6:0E:14:A2:AD:95:51:F0
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       0F071B
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/f75aa10577e9bd3b938fd5473b0993dd03e617f8.roa
Signing time:             Fri 28 Oct 2022 02:27:01 +0000
ROA not before:           Thu 27 Oct 2022 03:00:00 +0000
ROA not after:            Sat 28 Oct 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984859 (0xf071b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Oct 27 03:00:00 2022 GMT
            Not After : Oct 28 03:00:00 2023 GMT
        Subject: CN=f75aa10577e9bd3b938fd5473b0993dd03e617f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f8:74:e2:40:2b:55:51:a3:53:cb:ea:ce:72:
                    3b:96:f7:2d:0b:bb:0f:b4:6b:8c:0e:77:72:11:2f:
                    57:9e:a1:1e:d2:67:b2:e9:09:6e:77:07:4d:16:6e:
                    94:96:2b:47:7f:dd:ad:5b:2b:67:19:a8:b7:30:58:
                    3e:58:8d:d5:d6:2b:31:d9:97:29:be:31:57:4c:30:
                    5e:ed:6a:3e:e8:a7:98:0b:e9:b4:cb:a7:aa:3c:7c:
                    a0:c1:eb:c7:97:12:4c:12:ed:bd:b8:f0:20:86:39:
                    fe:d7:37:3d:01:af:dd:65:e4:a8:34:ab:92:fd:f5:
                    60:1e:f0:7b:d9:81:4f:00:46:35:6a:8a:9a:a0:00:
                    21:bd:56:bb:b3:b0:1e:4e:f8:5b:36:21:70:60:0e:
                    82:38:8a:1e:41:30:cd:fb:25:d5:23:77:41:d2:5c:
                    f7:25:86:bd:cb:d8:02:4d:44:95:88:d5:ae:e0:99:
                    a4:2b:28:37:0b:ef:c2:74:c3:84:89:7f:75:83:6f:
                    c8:d2:cd:69:16:2c:52:93:36:d8:55:2f:3a:7a:ad:
                    ef:09:ff:4d:10:a3:7d:27:ee:ec:be:d5:c6:9d:67:
                    f9:1f:e8:9b:09:59:8e:28:dd:38:14:1e:c0:da:d1:
                    5a:40:82:0b:26:f6:78:5c:72:4a:e7:18:b7:83:64:
                    d2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:1D:24:AB:D2:55:E3:83:A5:B4:3F:9D:E6:0E:14:A2:AD:95:51:F0
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/f75aa10577e9bd3b938fd5473b0993dd03e617f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:80:6e:4f:18:9e:32:a8:8b:e6:98:8b:7c:50:2f:aa:4a:43:
         4b:ab:46:1a:96:ff:c9:85:ef:41:06:e4:45:10:a4:2c:93:6a:
         c1:fa:d7:83:78:cc:df:4f:00:85:47:27:13:e4:c4:27:09:2f:
         15:e4:7e:05:3b:40:69:38:df:a7:16:ab:2e:05:11:28:dd:69:
         41:c7:72:85:01:13:b0:9c:75:e2:06:88:ac:58:13:88:64:ab:
         b3:4f:f6:e1:40:e3:a8:8a:cd:0b:a1:a7:f8:cd:74:e8:b1:47:
         83:f8:e0:e9:2e:26:91:f2:5e:fb:55:47:8e:01:0f:d8:e4:2b:
         93:f9:7d:4f:5b:03:11:b8:58:2d:5a:d3:e6:ee:8e:d3:40:42:
         90:88:a1:0b:41:65:ac:8f:a8:e6:f4:20:19:66:4e:1c:4e:b2:
         33:fc:eb:25:7d:c7:27:a0:96:89:dc:7a:e1:35:50:dd:8d:db:
         31:c0:71:1e:65:b0:18:c3:8e:7b:4b:65:17:a3:41:3c:2b:29:
         1a:3e:da:da:40:ce:8b:5b:0d:26:48:52:cf:a3:35:a7:f2:9a:
         70:e3:8a:23:f8:c7:fe:ed:c7:a1:20:ca:c6:0f:f8:b4:83:31:
         d3:45:8b:2f:4a:5e:3a:cf:63:e9:89:ad:90:98:13:f1:0d:c6:
         48:db:2d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----