Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/feb077c480ea463b350999c5598b0e662c9b1376.roa
File:                     feb077c480ea463b350999c5598b0e662c9b1376.roa (raw, json)
Hash identifier:          K0xWucxR9xwW2io07hfBj9SqPYw18ccaOCes/tMsSqc=
Subject key identifier:   68:3F:BE:CC:6B:3E:AA:C2:4E:8E:DD:23:D0:A2:C4:44:B0:6E:7A:28
Certificate issuer:       /CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
Certificate serial:       09C423
Authority key identifier: 73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/feb077c480ea463b350999c5598b0e662c9b1376.roa
Signing time:             Mon 04 Jul 2022 05:18:19 +0000
ROA not before:           Mon 04 Jul 2022 03:00:00 +0000
ROA not after:            Tue 04 Jul 2023 03:00:00 +0000
asID:                     3970
IP address blocks:        2801:1e:1801::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640035 (0x9c423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfa4e449df0c24d11949f71a9c72e01a3a172787
        Validity
            Not Before: Jul  4 03:00:00 2022 GMT
            Not After : Jul  4 03:00:00 2023 GMT
        Subject: CN=feb077c480ea463b350999c5598b0e662c9b1376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c1:d0:c6:42:77:25:95:29:7f:75:5a:b7:68:
                    ee:9a:af:9a:d6:ff:1a:77:58:d8:b2:06:e6:33:f2:
                    23:f9:1d:79:a9:8e:8b:0b:e3:47:48:24:f5:99:ab:
                    a2:08:6f:86:4f:f9:ff:f1:3c:d8:3b:ae:79:50:16:
                    73:a7:82:7e:8e:ab:7a:1f:02:05:ed:e6:d7:57:aa:
                    94:fb:5d:64:fb:ac:ea:20:0d:44:3e:10:b7:56:ef:
                    c0:46:70:bb:d9:f2:e8:be:80:7d:4d:df:71:fc:13:
                    71:6a:03:99:a2:7b:ed:b2:34:16:da:fe:1c:e7:fc:
                    e9:b8:36:7d:9d:43:12:60:27:2b:ba:fc:96:7f:fe:
                    58:71:09:7b:95:08:1b:53:eb:d1:23:5c:8e:99:9c:
                    f3:bc:17:b5:6a:c1:54:27:a5:af:71:41:46:0a:27:
                    29:1b:62:23:2e:a0:ae:d5:61:ad:35:0d:54:e0:03:
                    d7:c7:31:e3:90:08:15:23:09:9b:68:17:5e:dc:e1:
                    2d:e0:ee:e8:8a:4b:7a:04:04:70:48:56:79:ec:97:
                    5c:af:cf:8f:18:19:6b:47:3c:ec:4d:b2:1a:5f:63:
                    a2:75:d9:6d:bf:6f:83:26:de:0c:b7:ae:6d:a8:ba:
                    da:33:c8:bd:7c:ea:62:b2:6c:c4:3b:ce:44:12:92:
                    93:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:BE:CC:6B:3E:AA:C2:4E:8E:DD:23:D0:A2:C4:44:B0:6E:7A:28
            X509v3 Authority Key Identifier:
                keyid:73:87:A5:A5:7D:2D:2E:91:C7:47:27:5F:0E:0F:5E:86:ED:62:DF:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfa4e449df0c24d11949f71a9c72e01a3a172787.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/feb077c480ea463b350999c5598b0e662c9b1376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ecad2d5-c291-4a29-99f5-bfbe943581bc/cfa4e449df0c24d11949f71a9c72e01a3a172787.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1801::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:e7:5f:95:3d:e2:69:b0:dc:02:a4:9f:46:d8:00:7d:84:56:
         10:b0:f5:49:98:60:79:bc:34:40:87:99:a7:5e:37:1d:ac:5d:
         5b:76:1b:6f:dc:71:02:a3:54:a7:7e:05:12:0b:41:fb:a8:e9:
         68:fb:61:44:06:b5:72:75:c8:bd:5a:89:cb:63:f7:e1:e8:62:
         fb:b9:06:9e:d0:31:3f:66:ac:4b:93:8e:17:8a:9d:ae:14:6a:
         4b:ef:ed:10:07:e1:3a:c7:83:0f:8b:87:3e:4d:27:63:df:67:
         8c:53:fa:0e:30:d9:49:47:2c:10:48:49:61:09:3e:f2:13:ac:
         5f:9d:2c:23:21:e0:e7:97:9f:88:cd:41:0a:09:26:60:e5:7f:
         30:36:f9:65:e0:68:88:df:98:b2:b9:f9:3d:48:d4:03:57:f7:
         24:07:1b:8f:56:c4:b4:6c:e1:b7:78:26:d5:ce:e9:1c:a0:b7:
         a7:74:81:89:4f:fc:22:95:5f:bd:19:2e:7d:9e:42:06:0e:23:
         08:1f:e0:b3:53:d8:b6:fc:8b:c4:5c:70:58:5f:8b:66:46:49:
         16:ff:2c:52:40:1e:56:76:75:ab:1b:f4:d6:a7:d7:9e:75:1e:
         86:21:f0:05:a8:c7:35:5d:48:d0:49:49:60:52:79:cd:69:69:
         74:b8:b5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----