Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/e93c3ad90c79a312695c165e5d2806c8399d4870.roa
File:                     e93c3ad90c79a312695c165e5d2806c8399d4870.roa (raw, json)
Hash identifier:          x/J3PFA852/AvJatlbSJKWv4hhLgm8rQk4PeZadjUbg=
Subject key identifier:   A7:FF:A3:28:3D:46:37:B4:BE:96:2A:BB:CD:82:3F:FD:6E:D4:52:7B
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       1C4D9E
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/e93c3ad90c79a312695c165e5d2806c8399d4870.roa
Signing time:             Wed 28 Sep 2022 14:24:56 +0000
ROA not before:           Wed 28 Sep 2022 14:23:38 +0000
ROA not after:            Sat 28 Sep 2024 14:23:38 +0000
asID:                     3816
IP address blocks:        2800:680::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1854878 (0x1c4d9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Sep 28 14:23:38 2022 GMT
            Not After : Sep 28 14:23:38 2024 GMT
        Subject: CN=e93c3ad90c79a312695c165e5d2806c8399d4870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:42:19:cc:dc:51:b5:2b:16:67:22:63:cf:
                    85:3e:08:26:d5:6f:17:fe:f9:76:33:12:fd:8f:ad:
                    f9:f3:a7:b7:25:96:e8:4e:8e:e5:27:77:69:67:84:
                    93:ff:8a:d5:67:40:92:b7:76:4d:33:22:3f:d0:75:
                    e8:67:c9:8d:43:80:fc:84:fb:82:b8:a4:c8:db:52:
                    f1:04:8e:d4:3f:ac:72:5f:7a:91:8f:a0:3c:6d:a9:
                    01:93:60:5d:2c:7f:45:04:7d:fd:58:28:6c:94:9f:
                    f2:0b:12:e9:e4:88:c8:a5:6d:cc:8d:ff:c3:54:89:
                    1c:40:7a:38:3d:40:1c:1a:af:d0:54:6e:29:b9:9a:
                    a8:62:89:f9:d0:22:e7:0c:e0:26:3e:53:14:a6:81:
                    5a:4b:5b:9b:db:a6:fb:07:f7:93:92:cc:36:10:a6:
                    d9:17:45:38:6a:39:0c:b5:a1:54:aa:b6:cb:63:9e:
                    fe:b7:d3:40:56:01:b7:10:59:f1:d2:c1:61:96:8a:
                    f4:5c:b8:a9:6e:0b:66:eb:bc:33:ac:54:64:8a:33:
                    84:97:4d:e0:f7:f3:6f:7b:c9:cb:bb:c3:bb:3d:4e:
                    63:ee:16:a3:ea:cf:b0:47:a3:30:b8:0d:3b:f4:da:
                    31:48:0f:7f:c4:4b:01:a6:63:0e:e8:d0:2b:c4:b0:
                    8f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:FF:A3:28:3D:46:37:B4:BE:96:2A:BB:CD:82:3F:FD:6E:D4:52:7B
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/e93c3ad90c79a312695c165e5d2806c8399d4870.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:680::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:68:fe:d6:4a:be:18:64:af:91:f5:64:77:76:4e:34:a0:a1:
         40:e8:43:51:f5:e6:ff:1c:80:36:75:35:9f:c1:31:77:96:f0:
         59:ba:7c:20:61:23:86:05:6b:fe:91:68:10:a5:da:32:11:ef:
         7c:d2:1e:f8:6c:34:d5:c9:34:b5:63:2d:62:29:dc:98:f3:b4:
         ac:73:70:da:64:ea:fd:6a:a2:06:7b:68:7a:6d:99:f0:2c:ea:
         d2:70:81:59:17:a4:d8:27:f9:4b:71:65:ac:d3:d1:d2:7d:56:
         e6:db:53:08:ab:45:42:ec:b9:3f:64:43:85:d3:bf:b6:0b:f6:
         d1:9a:a0:62:c2:70:a8:fe:e2:4d:49:54:39:db:57:41:6d:f2:
         53:cd:04:1a:70:4e:64:26:be:a3:94:68:e3:60:08:3c:71:1b:
         17:3a:50:12:cd:2c:95:5f:7f:fc:ab:8b:33:7b:fa:02:e8:04:
         77:91:0b:8c:ca:63:98:dd:31:63:87:1b:aa:af:6e:f7:53:47:
         a8:c4:11:45:c7:1e:8e:0a:e4:2d:85:4b:7d:30:b9:7b:60:81:
         3d:31:f2:35:db:65:d9:96:04:a1:29:b9:66:87:e3:f3:44:94:
         22:84:6f:44:23:e9:e3:ce:57:74:d7:da:df:11:89:95:fe:f1:
         2c:3a:cd:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----