Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/fdfb7853e5b4cf41fdcd095adf323af3675fb5f8.roa
File:                     fdfb7853e5b4cf41fdcd095adf323af3675fb5f8.roa (raw, json)
Hash identifier:          b7ULtZRe2MmTZ5o/tKCgixT6QT1iD+yptXGf5XKTz84=
Subject key identifier:   29:9D:D4:A0:93:F1:17:49:56:B4:4F:D0:2A:24:19:09:3C:EB:24:7F
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       092558
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/fdfb7853e5b4cf41fdcd095adf323af3675fb5f8.roa
Signing time:             Sun 19 Jun 2022 01:26:47 +0000
ROA not before:           Sun 19 Jun 2022 03:00:00 +0000
ROA not after:            Mon 19 Jun 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599384 (0x92558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jun 19 03:00:00 2022 GMT
            Not After : Jun 19 03:00:00 2023 GMT
        Subject: CN=fdfb7853e5b4cf41fdcd095adf323af3675fb5f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:4d:fc:56:da:a7:9a:91:10:8a:24:6b:9c:24:
                    1d:72:e2:52:f6:15:07:1a:60:84:dd:c9:af:f7:0b:
                    1e:b6:6f:c5:61:10:2f:44:e5:1c:f5:39:53:f5:dc:
                    85:1c:00:92:55:2d:b1:65:2c:db:d1:55:5c:47:f9:
                    0f:64:33:6e:8d:3a:37:ab:7d:75:fc:8a:b6:89:60:
                    54:2d:7c:b3:5c:5e:5c:1d:bc:d4:c7:8d:36:0d:92:
                    e6:22:fe:95:42:5a:79:c9:71:24:90:4a:62:10:c0:
                    19:94:69:0e:73:b9:6d:9b:cc:ad:64:1b:6f:9f:da:
                    7d:2d:b4:26:f0:67:ab:ec:b8:27:ef:68:97:48:1d:
                    a6:9e:78:09:12:d3:9a:f3:75:22:b6:1b:79:77:df:
                    30:b2:24:73:31:82:8c:3b:21:6b:7f:ad:55:97:86:
                    ed:7e:af:1c:00:28:09:6d:d6:a7:ca:b7:97:e9:8c:
                    84:e5:c2:d3:a8:c6:ee:fc:3b:50:9f:00:52:d9:0c:
                    f8:f6:e0:4e:c2:a2:11:43:75:7f:ae:97:98:a0:09:
                    14:08:d3:7e:08:bd:aa:c6:6b:21:d4:4f:19:46:e0:
                    b1:d4:f3:c5:d3:05:43:d6:2b:2c:06:51:b4:79:bb:
                    51:f1:e1:d9:de:a4:6e:55:08:1e:23:96:cd:87:4a:
                    59:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9D:D4:A0:93:F1:17:49:56:B4:4F:D0:2A:24:19:09:3C:EB:24:7F
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/fdfb7853e5b4cf41fdcd095adf323af3675fb5f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:05:eb:76:47:be:9d:b5:cb:d5:cb:6f:02:0f:54:22:64:69:
         1c:82:55:9e:4b:4e:43:78:9f:3b:9a:04:e7:82:8e:a2:3e:2e:
         ee:6b:07:70:75:ca:2f:0f:9a:e1:ff:0a:b5:4a:ad:ec:39:32:
         7d:27:ef:b2:55:15:57:29:ac:25:08:5e:5a:c0:ee:23:be:0f:
         28:05:9f:dd:22:86:d0:e5:68:98:f7:c3:65:07:ff:4a:8d:df:
         ec:4e:c7:b4:62:be:ad:e7:9a:42:5a:49:66:85:96:7c:21:ad:
         98:6b:0c:ef:ea:39:33:b1:43:af:d0:34:ce:d0:34:9f:6f:9d:
         46:55:24:6a:25:62:b3:9a:a9:09:6b:da:69:18:96:db:bf:2f:
         d1:88:8a:1d:28:a7:c2:6e:4f:be:c0:00:2c:87:12:5f:09:29:
         fa:9d:0c:7c:10:d3:0b:89:fe:39:fb:86:0e:69:c2:3d:d4:fd:
         23:2c:84:08:50:21:8c:5d:25:6f:94:26:dd:6f:ba:87:79:5e:
         5c:53:79:47:74:96:d3:bd:2d:5c:5f:76:41:df:38:db:cd:4a:
         34:ab:24:d1:c8:b6:41:c2:74:42:42:4b:18:90:c5:81:5e:3e:
         fb:3f:7f:90:fa:ab:a0:85:a0:54:c4:81:52:b7:aa:1a:20:20:
         2f:ce:71:6a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDCSVYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGNm
YTRlNDQ5ZGYwYzI0ZDExOTQ5ZjcxYTljNzJlMDFhM2ExNzI3ODcwHhcNMjIwNjE5
MDMwMDAwWhcNMjMwNjE5MDMwMDAwWjAzMTEwLwYDVQQDEyhmZGZiNzg1M2U1YjRj
ZjQxZmRjZDA5NWFkZjMyM2FmMzY3NWZiNWY4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAv038VtqnmpEQiiRrnCQdcuJS9hUHGmCE3cmv9wsetm/FYRAv
ROUc9TlT9dyFHACSVS2xZSzb0VVcR/kPZDNujTo3q311/Iq2iWBULXyzXF5cHbzU
x402DZLmIv6VQlp5yXEkkEpiEMAZlGkOc7ltm8ytZBtvn9p9LbQm8Ger7Lgn72iX
SB2mnngJEtOa83Uitht5d98wsiRzMYKMOyFrf61Vl4btfq8cACgJbdanyreX6YyE
5cLTqMbu/DtQnwBS2Qz49uBOwqIRQ3V/rpeYoAkUCNN+CL2qxmsh1E8ZRuCx1PPF
0wVD1issBlG0ebtR8eHZ3qRuVQgeI5bNh0pZcwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFCmd1KCT8RdJVrRP0CokGQk86yR/MB8GA1UdIwQYMBaAFHOHpaV9LS6Rx0cn
Xw4PXobtYt9NMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvY2ZhNGU0
NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4Ny5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNWVjYWQyZDUtYzI5MS00YTI5LTk5ZjUtYmZiZTk0
MzU4MWJjL2ZkZmI3ODUzZTViNGNmNDFmZGNkMDk1YWRmMzIzYWYzNjc1ZmI1Zjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy81ZWNhZDJkNS1jMjkxLTRhMjktOTlmNS1iZmJl
OTQzNTgxYmMvY2ZhNGU0NDlkZjBjMjRkMTE5NDlmNzFhOWM3MmUwMWEzYTE3Mjc4
Ny5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgBAB4YATANBgkqhkiG9w0BAQsFAAOCAQEAGwXrdke+nbXL
1ctvAg9UImRpHIJVnktOQ3ifO5oE54KOoj4u7msHcHXKLw+a4f8KtUqt7DkyfSfv
slUVVymsJQheWsDuI74PKAWf3SKG0OVomPfDZQf/So3f7E7HtGK+reeaQlpJZoWW
fCGtmGsM7+o5M7FDr9A0ztA0n2+dRlUkaiVis5qpCWvaaRiW278v0YiKHSinwm5P
vsAALIcSXwkp+p0MfBDTC4n+OfuGDmnCPdT9IyyECFAhjF0lb5Qm3W+6h3leXFN5
R3SW070tXF92Qd84281KNKsk0ci2QcJ0QkJLGJDFgV4++z9/kPqroIWgVMSBUreq
GiAgL85xag==
-----END CERTIFICATE-----