Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/36bddc78b3f7326ec9490ca28cb7d25bf9eb01da.roa
File:                     36bddc78b3f7326ec9490ca28cb7d25bf9eb01da.roa (raw, json)
Hash identifier:          8SMRYbSJhTTZN4ZlXw6zGVUEQYy+gFGi2xdclQM+fks=
Subject key identifier:   EE:6D:9A:5B:AB:1B:06:4C:D9:C4:15:EC:4A:21:90:D8:3C:8C:A6:DC
Certificate issuer:       /CN=4e59ab85356d25d04ce88952ed51cf85fdedace6
Certificate serial:       09C0F1
Authority key identifier: C2:CF:29:05:77:4E:F7:C1:04:16:37:C3:5F:1A:CD:97:1C:CB:55:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e59ab85356d25d04ce88952ed51cf85fdedace6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/36bddc78b3f7326ec9490ca28cb7d25bf9eb01da.roa
Signing time:             Wed 14 Sep 2022 18:52:28 +0000
ROA not before:           Wed 14 Sep 2022 18:52:24 +0000
ROA not after:            Sat 14 Sep 2024 18:52:24 +0000
asID:                     264622
IP address blocks:        2803:140::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 639217 (0x9c0f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e59ab85356d25d04ce88952ed51cf85fdedace6
        Validity
            Not Before: Sep 14 18:52:24 2022 GMT
            Not After : Sep 14 18:52:24 2024 GMT
        Subject: CN=36bddc78b3f7326ec9490ca28cb7d25bf9eb01da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ad:db:c2:1c:f1:5c:4e:25:79:b9:0e:14:b0:
                    64:87:dc:ad:f0:74:0b:1e:93:7e:5a:46:b6:0d:b4:
                    01:59:de:2e:f9:e5:c0:11:a3:dc:a5:31:8b:d1:ac:
                    9f:2d:67:a1:b5:c3:22:e2:97:a2:b8:64:0c:a2:5c:
                    20:e1:7b:e5:15:39:22:32:fe:df:0a:e0:d4:38:a3:
                    4f:2f:85:76:f7:f0:47:21:f8:d3:8c:33:25:3d:f1:
                    da:b8:88:d2:bc:d0:9a:90:77:0b:4f:f2:cc:0b:d2:
                    67:96:50:79:31:cc:0a:b9:df:ac:06:8d:b4:ca:45:
                    3b:63:ca:72:bd:28:98:f8:34:c9:a6:32:72:35:e4:
                    b2:27:de:b4:b0:d3:31:2f:28:bb:a0:bb:ff:47:87:
                    71:52:83:ca:90:0b:0c:f6:6a:b3:48:95:f5:d2:3e:
                    f2:c6:8e:e4:ec:17:b0:53:18:78:5d:33:0b:cb:c3:
                    ba:d0:39:a7:0d:44:33:b2:ef:64:27:33:78:70:d7:
                    ad:e8:27:5e:03:2e:18:f3:9b:66:6a:ef:e6:9b:c1:
                    90:69:98:e8:0e:98:47:55:76:5f:22:03:0f:62:27:
                    54:38:69:a4:5b:ed:40:a6:7d:38:61:a9:f7:65:66:
                    36:0d:dc:44:ca:b0:be:20:26:a7:58:8c:e0:92:60:
                    6e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:6D:9A:5B:AB:1B:06:4C:D9:C4:15:EC:4A:21:90:D8:3C:8C:A6:DC
            X509v3 Authority Key Identifier:
                keyid:C2:CF:29:05:77:4E:F7:C1:04:16:37:C3:5F:1A:CD:97:1C:CB:55:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e59ab85356d25d04ce88952ed51cf85fdedace6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/36bddc78b3f7326ec9490ca28cb7d25bf9eb01da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/4e59ab85356d25d04ce88952ed51cf85fdedace6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:140::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:e6:a3:c1:6d:5f:fb:96:68:3c:59:44:11:5c:43:14:fa:fa:
         5c:49:67:a7:b5:47:12:46:d2:50:b0:e8:91:14:78:aa:23:c7:
         45:d4:4f:96:ba:69:2f:b1:23:81:ed:e1:90:bb:a4:c8:84:ad:
         45:2a:88:d7:38:b6:b7:b8:0b:87:5e:fc:0f:16:a9:fa:13:53:
         06:f0:79:93:50:64:42:84:a3:2c:a0:5b:e7:84:69:77:15:75:
         00:77:05:fa:58:dc:30:d4:08:63:a4:89:0c:6e:6e:b6:67:ed:
         02:52:2b:ce:02:4f:2e:a6:e1:6a:8c:1d:38:6d:9e:86:35:83:
         b0:61:f6:7e:df:d4:c0:3c:27:e9:17:ba:f5:34:01:d6:30:c3:
         84:ae:41:75:3d:3e:2c:ca:92:e3:be:35:5a:c3:41:82:6d:15:
         3e:0f:57:d3:87:f2:8d:1d:ed:06:05:8a:81:ee:50:03:14:e4:
         37:a1:3f:58:21:66:6d:f9:e2:07:8f:8d:e7:2f:a5:73:96:ec:
         41:36:97:a9:20:13:2d:21:db:5c:73:f6:7e:f9:b0:5a:d4:34:
         3c:ca:07:9d:01:c3:94:c8:3a:e8:1e:8a:49:bd:4f:bb:a6:21:
         ce:2c:70:02:12:3f:9d:3e:61:d7:0a:9e:51:14:47:a0:3d:9e:
         0d:91:aa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----