Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/3e247146998a1a64889e64a3a2f58feeb3fdeeef.roa
File:                     3e247146998a1a64889e64a3a2f58feeb3fdeeef.roa (raw, json)
Hash identifier:          1mJBH/I+uRuV60ctvNM+n7FlcVqCpXQVh4bVih6Hvpg=
Subject key identifier:   80:EC:3F:06:2D:57:ED:5A:59:89:72:EA:35:51:44:76:58:19:CD:89
Certificate issuer:       /CN=003287505ad0145205e27f7baa2a3101a343097b
Certificate serial:       09757A
Authority key identifier: D3:77:44:AB:F0:A5:7F:FA:8E:E3:4C:62:3B:2B:71:63:74:C0:7B:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/003287505ad0145205e27f7baa2a3101a343097b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/3e247146998a1a64889e64a3a2f58feeb3fdeeef.roa
Signing time:             Wed 24 Mar 2021 14:44:36 +0000
ROA not before:           Wed 24 Mar 2021 14:44:36 +0000
ROA not after:            Tue 24 Mar 2026 14:44:36 +0000
asID:                     265530
IP address blocks:        45.168.236.0/22 maxlen: 24
                          2806:319::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 619898 (0x9757a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003287505ad0145205e27f7baa2a3101a343097b
        Validity
            Not Before: Mar 24 14:44:36 2021 GMT
            Not After : Mar 24 14:44:36 2026 GMT
        Subject: CN=3e247146998a1a64889e64a3a2f58feeb3fdeeef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:85:93:1c:d0:3a:98:18:3b:d1:74:b1:c8:
                    40:52:81:ed:00:99:bf:28:e4:a1:ff:22:76:16:6c:
                    47:25:a8:0c:12:85:51:31:e5:8d:2a:1a:62:02:d9:
                    b5:27:40:c0:b9:00:77:f2:e8:fb:87:d7:02:a9:2e:
                    9e:1d:82:51:f1:06:33:c6:a9:15:5c:5b:87:ad:b3:
                    39:c5:44:d5:2b:ef:8b:a6:16:f9:0e:ee:ee:f3:25:
                    35:8b:9d:ad:08:35:7b:93:21:18:3a:a4:71:b7:91:
                    a1:90:75:29:df:8d:9a:58:7c:d9:1f:98:04:d4:50:
                    82:74:7d:5a:2f:d9:05:bb:62:1a:42:f0:5f:87:98:
                    97:b6:ca:b8:b1:c9:96:fb:4d:1d:fa:68:76:41:2b:
                    e3:95:17:31:02:8e:2a:4d:d8:9f:5c:3f:73:89:66:
                    e8:ce:f9:f9:dd:08:ac:d7:48:0a:2b:34:09:8a:13:
                    99:75:8a:07:00:4a:b0:1c:2e:d6:92:b7:63:b0:e2:
                    de:09:5f:74:0a:8d:e0:02:57:cc:45:74:6f:97:2b:
                    6d:39:8f:3c:36:77:f2:eb:87:b6:5a:49:db:a2:99:
                    e7:6c:f7:60:cd:cf:00:84:96:04:70:70:17:7b:e7:
                    04:1d:7c:1d:4e:ae:6f:0b:7f:df:4b:0e:b9:45:e7:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EC:3F:06:2D:57:ED:5A:59:89:72:EA:35:51:44:76:58:19:CD:89
            X509v3 Authority Key Identifier:
                keyid:D3:77:44:AB:F0:A5:7F:FA:8E:E3:4C:62:3B:2B:71:63:74:C0:7B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/003287505ad0145205e27f7baa2a3101a343097b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/3e247146998a1a64889e64a3a2f58feeb3fdeeef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8494b28f-3a0a-41f0-a1a9-47795fa80443/003287505ad0145205e27f7baa2a3101a343097b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.236.0/22
                IPv6:
                  2806:319::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:a2:5d:da:44:e8:55:c8:65:3a:0e:72:08:e6:b0:e6:31:d5:
         d3:c8:27:35:53:b9:e1:47:a5:86:e1:79:7a:01:10:f0:0f:c8:
         e7:4f:4a:80:a7:89:e0:8b:3c:8d:48:46:a1:21:17:45:dd:97:
         b2:34:ed:04:64:4c:63:a6:8f:85:5f:03:00:39:6a:12:ec:4a:
         5c:83:58:96:c5:e8:65:d5:33:1b:fe:1c:19:9e:b0:f4:5a:26:
         3a:4e:ad:71:4a:d2:20:cf:67:5a:90:e7:ef:f5:20:23:b0:12:
         76:15:67:b6:c8:ba:95:54:e2:62:87:ac:9e:d5:66:d7:38:ef:
         05:9b:67:d1:91:4f:71:f3:b0:f1:06:02:2b:9d:9b:85:73:1a:
         bd:d0:8f:23:33:92:a8:0c:9e:07:fd:c6:56:e7:3f:16:c7:1a:
         d2:6c:8b:5d:db:05:8f:6c:df:24:59:08:3d:ef:e0:eb:97:cc:
         42:94:2d:ee:a1:93:cc:30:16:56:ef:bc:f9:99:70:9e:7d:7c:
         39:ad:d4:a6:c9:3c:38:06:e5:cf:29:16:0f:06:6b:8c:e3:4b:
         93:4f:cc:b4:07:07:1c:1e:f5:fa:f6:1a:a4:fb:b0:b3:3e:19:
         c0:45:c1:13:f3:a9:c5:b1:e7:69:42:c6:5b:b7:25:3b:ef:c0:
         8a:72:9b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----