Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/4e258d7e33c97271095bfd87766c3b03f749b76f.roa
File:                     4e258d7e33c97271095bfd87766c3b03f749b76f.roa (raw, json)
Hash identifier:          q3Je8DHUpv1Yaq1E95Hf0dQNraDL7ktb9p5Wu/nhcJA=
Subject key identifier:   A4:0F:38:B8:05:1F:2A:D0:3E:F0:3C:F6:A8:E3:C8:33:EE:18:76:F5
Certificate issuer:       /CN=38edaf5613c2262fc6910e377ea3f09ce2474e6b
Certificate serial:       15349D
Authority key identifier: C2:9E:9D:75:F7:01:5A:BA:4A:79:AA:3C:79:EB:96:CB:3B:FF:F5:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38edaf5613c2262fc6910e377ea3f09ce2474e6b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/4e258d7e33c97271095bfd87766c3b03f749b76f.roa
Signing time:             Sat 14 May 2022 11:38:21 +0000
ROA not before:           Sat 14 May 2022 11:38:21 +0000
ROA not after:            Fri 14 May 2027 11:38:21 +0000
asID:                     265695
IP address blocks:        2803:9c0:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389725 (0x15349d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38edaf5613c2262fc6910e377ea3f09ce2474e6b
        Validity
            Not Before: May 14 11:38:21 2022 GMT
            Not After : May 14 11:38:21 2027 GMT
        Subject: CN=4e258d7e33c97271095bfd87766c3b03f749b76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:75:f2:48:43:5e:ec:55:9a:a4:83:7f:ee:
                    39:29:38:e4:c2:b2:8e:18:62:44:fb:ba:fe:f9:4e:
                    ff:af:3b:ec:b0:ec:cb:a9:9a:d1:e2:dd:1e:06:6f:
                    e5:78:b1:77:97:14:25:a5:31:71:0b:b7:b8:60:89:
                    65:4f:8f:ab:76:12:cd:0a:05:65:96:23:ab:db:a4:
                    64:41:b8:5c:36:52:c7:3c:3e:21:e0:0b:e1:4b:99:
                    b7:4b:f1:7c:49:41:b9:4a:d5:e6:34:16:5c:9e:82:
                    f6:0e:06:2c:fe:1b:99:b2:cf:f1:07:22:52:f3:86:
                    d9:a3:2e:04:b0:57:f4:49:f6:ba:90:70:7c:be:7d:
                    8b:71:a9:dc:d0:93:ad:29:7d:0e:20:82:05:59:36:
                    16:6c:87:31:e6:87:61:74:bd:50:61:0e:5e:86:a0:
                    13:71:5c:ff:39:54:31:85:c4:9d:8a:a6:aa:5a:8c:
                    dc:16:15:98:e3:13:b9:14:d6:c1:9b:77:13:c4:f0:
                    ba:d7:d0:6a:d1:d7:a7:f3:54:6f:aa:49:eb:ea:a9:
                    71:6c:c4:a1:78:18:51:96:f8:99:02:c2:d9:02:b1:
                    a4:24:24:a4:3e:0c:bd:43:6e:39:54:c5:1c:28:8b:
                    d3:7a:b7:50:e2:09:c8:e7:a6:e3:63:6a:93:e4:11:
                    ee:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0F:38:B8:05:1F:2A:D0:3E:F0:3C:F6:A8:E3:C8:33:EE:18:76:F5
            X509v3 Authority Key Identifier:
                keyid:C2:9E:9D:75:F7:01:5A:BA:4A:79:AA:3C:79:EB:96:CB:3B:FF:F5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38edaf5613c2262fc6910e377ea3f09ce2474e6b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/4e258d7e33c97271095bfd87766c3b03f749b76f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/38edaf5613c2262fc6910e377ea3f09ce2474e6b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:c8:73:1e:c6:f1:d0:d0:c0:62:33:40:43:53:ea:d4:06:3a:
         87:58:72:21:b3:ed:10:b5:e5:89:11:c5:93:ec:50:36:6a:42:
         78:d3:fc:d7:dd:5b:de:4d:39:49:59:44:7c:41:0d:2e:29:68:
         18:0b:f7:90:4d:fa:eb:0f:41:59:64:26:d1:85:b7:39:81:b9:
         a6:58:07:98:79:2f:a0:79:26:a6:a1:c4:08:ac:a3:58:dd:88:
         4a:98:fb:ab:90:cd:e7:82:20:cb:b3:b2:da:2b:c4:fc:70:9e:
         b6:d2:df:f2:9a:2b:8f:ea:46:7d:7d:0f:17:0d:31:5d:44:48:
         1a:03:25:05:44:34:11:98:d8:6f:88:7b:74:19:a0:ca:68:71:
         0f:72:9c:de:12:6b:cb:49:89:d3:9a:d4:d9:79:00:65:ea:ab:
         09:64:d5:e0:b7:37:6f:0b:f7:be:6b:f4:6b:8a:7d:85:60:b2:
         d3:68:9b:75:c4:de:be:c5:e8:84:87:6a:53:1f:83:4e:73:25:
         bf:c6:bb:76:9f:3c:28:dd:ea:5a:df:93:87:68:fd:70:a6:6b:
         b3:33:73:68:1c:3c:46:d0:66:6b:fa:0c:90:0a:b1:06:1b:6f:
         0b:85:98:b3:89:07:df:e3:5f:28:78:53:39:05:30:2a:ee:1b:
         f2:46:c0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----