Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b5f30f0-f683-42ec-83d3-8d5e49adba0b/4e5c2f776d67d90280dbe63a21cd7ee986445099.roa
File:                     4e5c2f776d67d90280dbe63a21cd7ee986445099.roa (raw, json)
Hash identifier:          +a1LtGAYepLRcLvtTkj1EDLWaeLhW4dpZViRuqchNNU=
Subject key identifier:   C9:E0:AD:90:30:E0:7C:D6:4F:E8:D4:CF:8D:2C:7A:A9:83:84:44:D3
Certificate issuer:       /CN=82fe4a0135f82eec72b53d9bfbe6e1b67185e211
Certificate serial:       098E
Authority key identifier: C3:4F:58:02:B8:B0:48:ED:2F:53:A1:DA:06:E6:8F:90:E5:B5:A9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82fe4a0135f82eec72b53d9bfbe6e1b67185e211.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b5f30f0-f683-42ec-83d3-8d5e49adba0b/4e5c2f776d67d90280dbe63a21cd7ee986445099.roa
Signing time:             Fri 08 Apr 2022 15:15:10 +0000
ROA not before:           Fri 08 Apr 2022 03:00:00 +0000
ROA not after:            Mon 08 Apr 2024 03:00:00 +0000
asID:                     266865
IP address blocks:        2803:8aa0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2446 (0x98e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82fe4a0135f82eec72b53d9bfbe6e1b67185e211
        Validity
            Not Before: Apr  8 03:00:00 2022 GMT
            Not After : Apr  8 03:00:00 2024 GMT
        Subject: CN=4e5c2f776d67d90280dbe63a21cd7ee986445099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:fa:e1:3a:76:9a:6c:d0:a0:2c:fd:76:94:
                    ea:d5:7d:e3:71:d0:0d:f6:ca:c8:b2:8c:50:3f:ae:
                    c3:3e:fb:b3:b5:3d:1c:23:68:ca:89:82:d1:65:23:
                    fc:f2:f1:7f:02:cb:ac:27:34:57:3a:9f:97:8f:f5:
                    c0:dd:dc:54:c6:1a:27:2c:ca:68:03:b4:a8:10:92:
                    43:5d:0c:be:a1:c4:86:7d:3b:e6:ca:97:22:a7:16:
                    0c:09:e3:e3:ec:c8:2b:6d:2c:dc:7b:c8:ac:fc:17:
                    ef:c4:e1:fe:89:9a:da:a3:fa:86:6f:78:b8:62:28:
                    ad:13:30:d4:44:de:8c:4c:81:c6:d3:f3:b9:ac:5c:
                    fc:e5:76:56:66:91:6c:b5:04:b6:8c:db:c9:d4:9d:
                    70:f2:2d:c4:62:a0:46:57:71:84:8e:f0:25:0d:61:
                    a6:db:53:a9:75:a2:03:58:e6:68:b2:a1:7e:01:b7:
                    c0:d0:54:ed:10:f9:77:c2:9e:10:1a:4d:96:b4:f4:
                    d1:55:8e:85:d3:6c:4b:37:68:f2:56:b0:4a:dd:e2:
                    46:be:f6:80:09:e1:46:18:fa:c0:93:0f:b6:8d:d4:
                    fa:d4:df:ae:b5:b0:1a:8f:e0:fa:cd:18:e4:5b:73:
                    70:af:3d:a9:8e:7c:3c:63:c3:2f:98:c5:a2:ae:a6:
                    b3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E0:AD:90:30:E0:7C:D6:4F:E8:D4:CF:8D:2C:7A:A9:83:84:44:D3
            X509v3 Authority Key Identifier:
                keyid:C3:4F:58:02:B8:B0:48:ED:2F:53:A1:DA:06:E6:8F:90:E5:B5:A9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82fe4a0135f82eec72b53d9bfbe6e1b67185e211.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b5f30f0-f683-42ec-83d3-8d5e49adba0b/4e5c2f776d67d90280dbe63a21cd7ee986445099.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b5f30f0-f683-42ec-83d3-8d5e49adba0b/82fe4a0135f82eec72b53d9bfbe6e1b67185e211.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:31:eb:88:a5:5e:72:eb:16:f7:1c:49:56:31:31:4f:00:65:
         46:d3:4d:a6:a7:f7:fc:07:4d:5a:30:78:f3:47:b5:3d:b3:8e:
         00:75:b4:79:67:de:01:1e:3c:4c:c5:b1:34:42:97:73:a9:44:
         45:24:b9:87:7a:5a:ec:f5:00:26:09:3a:e0:6f:23:ab:a0:46:
         36:72:90:af:84:e8:b5:26:87:f1:1c:11:58:09:05:ef:f2:38:
         9b:b4:3f:a5:00:0d:b3:e6:98:cc:83:a0:03:e8:8c:2b:a6:03:
         37:5f:14:f7:79:84:37:94:81:98:61:d9:9f:4d:8b:fd:bf:e1:
         af:2b:42:22:b7:a0:4f:6e:99:3a:df:89:9b:6d:78:ea:c0:9a:
         d7:21:72:e1:9f:f0:f6:d5:e5:33:a0:07:6c:be:60:58:ba:e8:
         ad:e8:e2:e3:de:c3:3f:f6:6b:65:88:a5:27:9c:84:2d:f0:6d:
         7a:84:37:31:56:8d:e5:cb:bd:f5:a2:ee:2c:ea:91:53:43:dd:
         ae:71:2c:91:85:1c:9d:fb:c7:fb:dc:46:84:6c:50:af:bd:3f:
         ad:6a:60:af:6c:42:7d:1f:8a:9c:c2:48:57:4c:74:8d:0c:cb:
         62:63:43:2e:d7:5d:8a:3e:6a:11:86:b1:f7:70:1a:8b:e2:b6:
         b4:2c:88:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----