Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/d95c9469e34186a6c418d92ec9d71a8e137f0d1b.roa
File:                     d95c9469e34186a6c418d92ec9d71a8e137f0d1b.roa (raw, json)
Hash identifier:          D02IuDpgc/Y4+AM89NBSSBgY76adYCIvPA2LpAJ/2pI=
Subject key identifier:   FB:80:C0:0D:DB:8B:D5:B4:FF:CD:E7:7F:E3:2C:A3:D3:49:7D:15:28
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1ACD73
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/d95c9469e34186a6c418d92ec9d71a8e137f0d1b.roa
Signing time:             Fri 26 Aug 2022 16:24:17 +0000
ROA not before:           Fri 26 Aug 2022 16:22:08 +0000
ROA not after:            Mon 26 Aug 2024 16:22:08 +0000
asID:                     262589
IP address blocks:        2800:310:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1756531 (0x1acd73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Aug 26 16:22:08 2022 GMT
            Not After : Aug 26 16:22:08 2024 GMT
        Subject: CN=d95c9469e34186a6c418d92ec9d71a8e137f0d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:82:00:00:62:df:83:c3:ef:29:72:0a:64:9d:
                    c2:14:45:7a:30:dd:b5:a0:35:e1:9a:69:88:f5:ce:
                    65:f5:50:42:a1:59:0c:fe:a4:21:e3:d2:59:e6:e7:
                    b3:60:e4:b3:8f:f1:12:5f:d3:e3:f0:78:0d:c4:b6:
                    39:0a:f1:11:ea:19:26:86:e5:66:8b:83:a2:be:e0:
                    87:e5:ad:26:67:6c:cc:43:9f:8c:1f:8c:d0:82:4e:
                    6e:57:00:4a:8e:a0:ab:69:63:00:65:f0:60:03:4a:
                    f6:d1:c1:9d:eb:15:a6:e7:7f:11:94:ec:2b:70:55:
                    e8:58:fe:f7:a5:15:36:36:be:c9:71:77:a3:aa:55:
                    31:c6:ca:64:3d:26:06:7b:eb:f8:3f:94:83:94:1b:
                    9c:55:45:71:4b:30:d6:5f:b4:98:15:85:f4:aa:c3:
                    c3:72:0e:c0:87:23:dd:df:f9:36:4d:d3:1a:d4:e3:
                    7a:07:86:e8:e7:6c:40:e1:d2:fb:c3:30:0a:13:80:
                    f4:81:71:fe:da:2d:a4:1b:70:7d:cd:fd:ff:36:4f:
                    5f:da:1b:79:e5:ea:53:4a:b9:5d:22:40:53:d7:c6:
                    0d:90:fe:95:64:d2:b7:f2:01:f8:73:31:71:18:f6:
                    a6:bd:03:05:4a:81:fa:a8:f5:cd:b3:e7:15:f4:ce:
                    38:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:80:C0:0D:DB:8B:D5:B4:FF:CD:E7:7F:E3:2C:A3:D3:49:7D:15:28
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/d95c9469e34186a6c418d92ec9d71a8e137f0d1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:d5:58:55:7a:23:6e:24:d4:1c:26:6f:43:a6:35:75:0b:0f:
         dc:d3:67:27:d0:75:79:f9:85:42:88:69:fa:3d:c3:01:1d:25:
         ad:81:bd:4e:42:5a:0d:67:a1:76:74:b0:4b:34:d6:d3:c6:95:
         5e:09:0b:c6:f2:8e:c3:b1:3e:30:fa:a3:4c:22:76:86:4b:58:
         25:b5:33:e9:6f:31:4e:0c:e7:12:41:39:c6:3f:b0:11:30:3c:
         78:f5:d6:03:0b:26:03:ca:c1:18:f7:1f:ac:80:ef:5e:4f:b9:
         1a:96:44:60:da:e6:05:f2:93:41:1a:01:f6:53:2d:9d:84:aa:
         43:ec:58:b5:2e:97:4f:d2:12:f7:43:b8:e2:95:ed:8c:65:f0:
         c8:e3:81:35:f4:14:0a:f1:62:4d:44:b0:07:03:d6:75:d5:60:
         12:0b:8a:28:9c:90:9d:a6:b8:34:ab:73:48:84:1a:92:57:e3:
         84:95:e4:b3:23:9e:43:9f:ed:ee:ab:a1:08:c4:85:79:3a:67:
         fe:df:92:ee:4e:7b:01:53:2b:dd:9d:16:88:60:7f:6b:d2:b9:
         f4:4f:a2:51:56:52:5b:f1:9c:03:10:24:59:ad:8e:6a:2a:d6:
         a2:36:f6:f6:0f:9c:0e:cc:43:3f:cb:66:2a:b3:65:ed:e8:77:
         7e:81:3d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----