Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/3cfbb7e7186d1f87013177bbd26ad075a13c4463.roa
File:                     3cfbb7e7186d1f87013177bbd26ad075a13c4463.roa (raw, json)
Hash identifier:          a+0L9+HV9NgDljpmrpzXfVjmd99c4kAwVJHrN8FL1os=
Subject key identifier:   6A:1A:F8:C4:2A:7B:D3:D6:FD:B5:2B:35:25:21:94:9F:DD:27:75:F8
Certificate issuer:       /CN=2741c4b95ce4e26190e9cd3600e7acc3be164b12
Certificate serial:       039A
Authority key identifier: 9E:3E:A2:A6:AF:27:BB:E3:FC:18:69:8C:1C:27:0E:13:CD:1C:5E:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2741c4b95ce4e26190e9cd3600e7acc3be164b12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/3cfbb7e7186d1f87013177bbd26ad075a13c4463.roa
Signing time:             Mon 25 Jul 2022 20:08:45 +0000
ROA not before:           Mon 25 Jul 2022 03:00:00 +0000
ROA not after:            Thu 25 Jul 2024 03:00:00 +0000
asID:                     270083
IP address blocks:        200.23.159.0/24 maxlen: 24
                          2803:2be0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922 (0x39a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2741c4b95ce4e26190e9cd3600e7acc3be164b12
        Validity
            Not Before: Jul 25 03:00:00 2022 GMT
            Not After : Jul 25 03:00:00 2024 GMT
        Subject: CN=3cfbb7e7186d1f87013177bbd26ad075a13c4463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:03:f6:08:a6:89:a9:65:f4:74:ac:64:8b:be:
                    df:85:97:9d:37:5e:e8:ea:b5:b9:a3:d6:c6:23:2b:
                    4d:00:36:16:9c:78:1e:a7:25:f6:2a:47:41:5f:5c:
                    a8:18:39:c3:ed:e5:eb:19:7b:0a:17:48:08:9a:3b:
                    48:7f:6d:d4:e8:01:b9:06:18:5a:83:e1:33:b9:a3:
                    93:dc:86:61:72:81:79:8b:c5:c3:22:09:81:9c:e8:
                    d5:d2:4d:b2:e6:ff:ee:38:68:be:05:3b:2d:a4:62:
                    4a:72:de:5d:6d:d7:7b:ad:3f:e9:78:ed:78:01:21:
                    83:90:e2:53:24:05:d4:fa:8f:59:09:04:0d:c8:f0:
                    95:30:91:b7:90:7d:d9:8f:01:fa:a8:15:5d:1b:0b:
                    60:eb:35:59:d5:cb:4f:e2:a3:cf:11:68:d6:e9:f9:
                    80:fd:09:7a:0e:ff:44:e7:d3:4f:3d:e1:c0:e5:b6:
                    3c:7d:d6:57:95:0c:92:d2:66:ac:2a:a0:c2:fd:71:
                    eb:61:13:a9:6a:95:cf:89:b6:4c:13:c4:05:00:88:
                    ce:a9:60:9d:1a:e4:ab:4c:b7:6d:7e:ae:eb:e8:8f:
                    56:d1:19:8f:de:07:90:07:11:69:6c:06:64:34:cc:
                    f6:51:1d:96:4f:3a:e5:f9:5c:1a:dc:ef:76:1d:8b:
                    e3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1A:F8:C4:2A:7B:D3:D6:FD:B5:2B:35:25:21:94:9F:DD:27:75:F8
            X509v3 Authority Key Identifier:
                keyid:9E:3E:A2:A6:AF:27:BB:E3:FC:18:69:8C:1C:27:0E:13:CD:1C:5E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2741c4b95ce4e26190e9cd3600e7acc3be164b12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/3cfbb7e7186d1f87013177bbd26ad075a13c4463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1980e981-810a-41fe-9d73-f1c36894c51b/2741c4b95ce4e26190e9cd3600e7acc3be164b12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.159.0/24
                IPv6:
                  2803:2be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:3a:0c:9b:a0:5f:8b:0b:ba:cc:3b:d4:78:06:50:b6:13:06:
         22:1e:2f:60:b2:d3:22:f1:4f:6d:8c:a2:b6:d8:97:64:40:8c:
         f0:c4:e9:c5:9f:3e:ef:40:03:0e:6b:7f:f6:42:37:b2:24:28:
         47:2d:69:1c:ea:6d:8a:cb:77:99:7c:8c:92:51:a0:c6:7e:6d:
         b5:50:5f:7c:d1:8b:82:67:eb:1e:5f:77:4e:e2:f9:c0:57:3b:
         1b:22:27:01:06:1d:ed:62:14:e2:0b:27:db:a9:d5:69:2f:96:
         1f:ad:c8:4e:c5:6a:c8:42:30:20:c0:f5:84:0e:ad:42:d0:63:
         bd:30:cf:4c:cb:e7:25:3e:4c:72:c3:cd:4d:15:7c:a2:0f:26:
         b5:14:da:4f:bc:4b:09:da:f2:12:ea:f6:14:ba:2c:78:08:14:
         bf:4e:91:25:b7:d2:dd:97:21:39:22:3f:38:3d:c9:4b:68:76:
         44:db:35:e5:82:ed:2d:28:28:55:e5:45:94:45:60:d9:f3:39:
         a4:a0:d8:f9:bb:98:10:36:df:bd:45:f8:ca:2e:38:8c:0a:91:
         1a:41:0d:4c:46:4a:45:01:78:bc:50:6f:35:f7:2d:13:46:65:
         c3:e4:54:38:ff:e6:1b:b7:4c:fb:41:bf:d1:00:c0:06:da:61:
         a2:98:7a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----