Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/90dcad883cb96fd8f4860bfc719ac74b839856dd.roa
File:                     90dcad883cb96fd8f4860bfc719ac74b839856dd.roa (raw, json)
Hash identifier:          RI00JbfckMOmn4KT5FdQ2RoxfaFqAeSAiYnLqki8FoI=
Subject key identifier:   7C:86:25:DB:16:30:7A:20:CE:68:59:56:07:A4:EE:20:1D:69:41:E6
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       1E312F
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/90dcad883cb96fd8f4860bfc719ac74b839856dd.roa
Signing time:             Sat 27 Aug 2022 01:17:59 +0000
ROA not before:           Tue 12 Jul 2022 03:00:00 +0000
ROA not after:            Fri 12 Jul 2024 03:00:00 +0000
asID:                     10620
IP address blocks:        2800:482::/32 maxlen: 48
                          2800:485::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1978671 (0x1e312f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Jul 12 03:00:00 2022 GMT
            Not After : Jul 12 03:00:00 2024 GMT
        Subject: CN=90dcad883cb96fd8f4860bfc719ac74b839856dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ae:58:3c:cf:9f:8b:4d:6d:2a:da:48:3e:0f:
                    de:3b:90:a9:13:04:c0:7a:7b:5a:08:08:6b:48:2c:
                    f3:51:28:f1:51:28:62:c0:16:fb:d5:c1:53:7c:95:
                    09:74:45:02:e4:99:c5:6b:9a:8d:a2:2e:a3:c9:bb:
                    57:21:72:6c:d3:aa:b2:af:dd:77:fe:aa:94:cd:67:
                    71:f8:dc:4f:86:70:8b:f6:e4:7f:85:89:b5:39:8e:
                    96:48:f6:06:53:f3:b9:ac:1d:31:8a:e6:93:3f:db:
                    f6:43:85:11:53:f0:70:17:14:4e:1c:ed:06:b3:58:
                    eb:29:89:be:0a:b1:0a:f4:07:b8:ef:ba:90:62:d5:
                    2f:0f:c6:02:4f:af:17:e2:8b:86:b9:e8:2a:96:82:
                    90:28:3b:c7:4b:f6:50:27:f5:93:d2:34:fd:97:40:
                    1e:07:c1:82:63:9d:bb:6d:cb:4c:cd:ec:af:13:00:
                    99:12:c0:25:ba:d7:43:12:a6:58:96:d5:cc:8e:31:
                    c7:f1:4e:4f:43:24:fb:3d:8f:52:d2:66:8f:e5:ef:
                    19:76:fb:23:82:00:0c:0a:b9:3e:ee:5a:85:e9:97:
                    96:f5:a1:35:9d:9a:f7:5a:99:5e:0f:a2:51:39:ba:
                    8c:dd:2f:53:9f:e3:a3:64:23:a1:0f:1e:e0:82:3f:
                    90:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:86:25:DB:16:30:7A:20:CE:68:59:56:07:A4:EE:20:1D:69:41:E6
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/90dcad883cb96fd8f4860bfc719ac74b839856dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:482::/32
                  2800:485::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:25:e5:c1:67:f7:c7:ca:2f:0a:ed:06:ad:55:ff:94:77:98:
         2e:3c:d1:d6:81:14:61:2a:97:6d:92:cc:cd:96:e8:16:4c:e0:
         12:f9:0f:65:bb:e8:82:90:0b:28:55:36:e4:ae:aa:07:81:cd:
         ad:c9:24:11:a7:2b:df:2a:2b:df:cd:b2:43:56:28:9a:f0:31:
         be:e5:44:ca:60:fa:3a:e7:28:a4:79:d9:df:45:c4:22:b0:89:
         42:a0:f3:c4:70:a5:f9:6e:98:0c:72:b1:06:ad:f6:4a:79:7e:
         f0:de:57:91:10:40:29:f9:56:63:f8:53:be:cf:fa:e7:1a:45:
         b9:6d:44:2b:f0:5b:bb:63:87:02:de:41:32:a8:a0:cf:2e:e3:
         a6:5c:21:3a:70:6b:e3:37:9e:5f:34:93:13:2e:fc:7d:0a:8e:
         d2:fd:c2:78:85:28:ad:52:cb:2f:bc:05:42:92:4a:38:0c:2e:
         35:d5:3a:c5:12:ba:4c:ad:19:37:50:c6:ba:b6:e0:62:42:2b:
         55:43:e2:b4:5b:f6:b9:6a:18:b0:e5:e5:1b:6a:5a:48:cc:85:
         bb:24:fc:16:34:88:dc:8b:77:71:ae:f9:a2:e9:b1:78:4b:3f:
         07:d9:d5:bf:ca:cf:42:d4:8c:ae:49:e9:eb:a5:ae:3b:76:b7:
         4a:d4:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----