Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3a71e826457b7de5faef78ee497c5288c8dd3348.roa
File:                     3a71e826457b7de5faef78ee497c5288c8dd3348.roa (raw, json)
Hash identifier:          I/qxitwB/7gCnpCdWXVLzyXzwjK08ridegJXHIejJo0=
Subject key identifier:   45:F9:AE:2B:41:DE:14:D6:89:59:D3:B3:AD:FC:88:84:BD:F6:DB:01
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       199324
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3a71e826457b7de5faef78ee497c5288c8dd3348.roa
Signing time:             Fri 18 Mar 2022 21:21:18 +0000
ROA not before:           Fri 18 Mar 2022 03:00:00 +0000
ROA not after:            Mon 18 Mar 2024 03:00:00 +0000
asID:                     10620
IP address blocks:        2800:482:4002::/48 maxlen: 48
                          2800:480:ff52::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676068 (0x199324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Mar 18 03:00:00 2022 GMT
            Not After : Mar 18 03:00:00 2024 GMT
        Subject: CN=3a71e826457b7de5faef78ee497c5288c8dd3348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9a:0c:84:cd:b1:87:d7:15:70:12:96:22:e6:
                    76:8a:5e:41:62:67:89:ec:f9:fc:34:81:d1:27:ec:
                    00:15:b2:63:4d:f1:ab:4b:91:ff:c1:30:89:b6:74:
                    2a:71:d1:3a:e7:91:cc:c9:3a:2c:0f:2c:ea:c6:6f:
                    4c:97:ad:2a:a8:59:bf:48:73:97:c7:11:d6:6c:e9:
                    47:7b:8a:2a:fb:1c:de:54:eb:8a:be:fb:5a:df:2c:
                    68:1c:1c:d2:92:bc:6f:eb:70:f3:28:6d:f8:1d:e5:
                    e4:44:cd:7c:f3:79:4c:52:0f:61:e4:3d:5a:4b:49:
                    46:65:bd:9b:e2:d8:c1:06:35:2b:ff:4c:3b:52:2e:
                    a1:b9:57:a9:fd:c7:11:0f:20:a9:b4:38:e4:b8:fa:
                    c6:65:7a:55:17:3a:c3:7c:32:db:50:1c:e7:a5:54:
                    4a:6b:f8:77:d2:44:bd:ef:7f:9a:79:65:f4:64:05:
                    65:9f:d5:e8:dd:d9:33:f7:88:4b:9d:ed:d4:d3:15:
                    86:db:95:10:91:f8:d7:e8:f1:03:fe:5f:52:d5:7e:
                    35:96:3f:d6:c9:47:ee:ff:83:59:a6:ca:73:1d:78:
                    62:77:52:d2:5b:3c:4f:e3:49:bf:c0:b3:b1:d9:10:
                    ce:fd:fc:18:55:76:22:8b:2e:9d:f3:74:5e:ef:88:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F9:AE:2B:41:DE:14:D6:89:59:D3:B3:AD:FC:88:84:BD:F6:DB:01
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/3a71e826457b7de5faef78ee497c5288c8dd3348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480:ff52::/48
                  2800:482:4002::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:e2:90:a6:a1:93:7b:2f:82:6b:60:36:61:8c:ff:6f:90:
         f5:d8:25:ea:46:7f:13:73:d3:c7:c2:3e:18:02:d4:90:1c:9c:
         f4:af:4d:41:55:b5:89:57:5b:19:99:f0:04:c7:e7:2b:5a:43:
         e1:92:d4:c4:9a:88:67:da:13:64:66:97:5b:21:1f:21:44:91:
         cb:18:eb:e0:97:6f:97:97:da:48:fd:2b:49:b4:2a:87:8f:c6:
         d4:72:f2:7e:a9:17:c9:1d:5e:e1:e5:1d:6e:fe:1f:9c:43:41:
         e7:17:07:58:65:7e:d2:46:89:e3:f1:a2:de:f5:7d:ce:81:7e:
         cb:22:e1:e2:a5:21:5e:0a:03:a0:94:19:f3:77:24:8a:12:d3:
         3d:5e:76:40:53:17:02:17:1b:e8:b3:94:40:d1:80:06:d9:a2:
         02:14:f5:71:63:54:53:b7:6a:0c:39:83:50:3d:60:6c:ff:7f:
         68:0b:7e:6c:45:94:cb:58:8c:2c:80:20:75:a9:fa:22:b2:0c:
         9e:61:75:a0:b3:09:6e:93:23:20:88:9a:80:3b:5d:32:7b:14:
         ea:45:5a:28:a0:c0:91:39:a1:cd:d6:b0:80:74:63:de:e0:fc:
         33:1d:5d:60:bf:79:8d:db:41:55:92:e3:ec:88:62:80:c5:c0:
         30:97:44:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----