Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/f9240fc1af55ec98ff873132a6c2b7555878671d.roa
File:                     f9240fc1af55ec98ff873132a6c2b7555878671d.roa (raw, json)
Hash identifier:          pK0u9ptaGeCPy47pte4Xb4AxfLl0oKbXgKY/ImkiRAY=
Subject key identifier:   8A:B4:99:47:AE:91:F8:CE:57:76:CC:6C:05:B6:DA:E7:D5:C2:89:AE
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       06368C
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/f9240fc1af55ec98ff873132a6c2b7555878671d.roa
Signing time:             Thu 14 Apr 2022 10:25:25 +0000
ROA not before:           Thu 14 Apr 2022 03:00:00 +0000
ROA not after:            Fri 14 Apr 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407180 (0x6368c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Apr 14 03:00:00 2022 GMT
            Not After : Apr 14 03:00:00 2023 GMT
        Subject: CN=f9240fc1af55ec98ff873132a6c2b7555878671d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:da:2c:db:4b:4e:4e:b0:cc:c5:67:4f:4e:ec:
                    0e:2c:9b:2d:66:5e:8b:18:2e:b8:63:61:fd:e3:ee:
                    c2:e5:7e:65:08:4e:e9:8a:5a:1f:dc:7f:1b:eb:ee:
                    c0:4f:1a:b7:8f:29:d7:27:55:d6:36:74:d2:5a:c8:
                    de:04:01:4c:34:59:f5:fd:dd:a3:4e:e0:f7:7b:a6:
                    f3:25:8c:38:bf:84:04:c5:63:80:bf:c2:6b:f5:b0:
                    51:00:a7:e9:dd:75:7e:a0:a8:24:37:bf:77:ed:c2:
                    91:53:06:66:33:2a:53:1b:be:3b:24:e6:72:bf:69:
                    46:2d:f7:13:7f:9e:b3:be:74:43:4a:bf:6f:0d:fd:
                    20:54:e8:35:c7:b0:3b:93:c5:64:e5:93:63:29:b5:
                    ae:6f:9f:77:42:b8:c9:33:94:a9:b4:d4:72:10:c9:
                    36:2d:55:ff:09:b8:bc:e8:e7:c2:eb:16:d3:30:17:
                    a4:61:47:a1:43:ef:16:1b:f3:0d:5f:58:3f:18:cc:
                    96:42:3d:8d:c2:c4:c5:3f:8b:05:10:0e:83:1b:36:
                    93:60:0f:14:03:05:d6:a0:16:34:0b:d4:a5:60:78:
                    a8:8e:5b:ed:ff:ec:1f:e5:ca:f4:56:a3:a2:81:ba:
                    f9:9d:34:fa:8b:68:f2:fe:63:98:ee:ab:e2:d7:5c:
                    20:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B4:99:47:AE:91:F8:CE:57:76:CC:6C:05:B6:DA:E7:D5:C2:89:AE
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/f9240fc1af55ec98ff873132a6c2b7555878671d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:e5:dd:2b:f5:f4:7c:40:4c:ce:06:3f:03:b7:eb:69:2e:2d:
         ec:6a:e1:f2:67:a6:9f:8d:3a:f0:10:47:8a:dc:5b:f3:46:4c:
         9a:c0:ea:c5:19:d8:a6:95:15:44:19:ef:b8:dc:77:54:79:7b:
         b4:9a:41:68:5b:b4:a6:d5:fc:f8:49:e8:c1:96:e4:42:84:e0:
         c8:05:c8:b7:b4:25:1d:48:fe:a2:4e:5c:6d:39:5a:b1:0c:9c:
         40:45:dd:7b:ae:1c:46:9f:c3:2d:46:63:50:70:04:78:3e:21:
         7c:df:22:35:88:24:4e:c9:81:41:a7:e3:57:60:60:82:6c:28:
         25:c9:cf:2f:85:65:f2:f9:09:f3:f0:ea:be:28:13:0b:65:3c:
         aa:2d:d0:e6:e2:79:91:a0:43:9d:7a:25:2b:3b:1d:21:ca:f1:
         30:dc:c6:e9:01:77:6f:b6:55:b4:53:c4:0c:62:00:67:51:ce:
         a5:a5:8d:5a:17:0d:a7:69:97:4d:af:b5:8c:fe:0d:17:f7:0c:
         1e:ce:ee:b8:00:53:bd:6b:d4:d2:81:20:a8:11:4c:d2:dc:ca:
         c0:4e:75:f4:e3:42:9c:c5:6d:99:9a:16:ce:81:32:89:ad:22:
         9c:3e:37:19:cb:b1:18:05:58:a9:16:d7:34:24:ce:cc:7a:ac:
         ce:2a:ed:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----