Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/3d6ca285964b8e0d3695e96e39042b8bd6fce942.roa
File:                     3d6ca285964b8e0d3695e96e39042b8bd6fce942.roa (raw, json)
Hash identifier:          K/GWZu96Wjs+pXc6q5v/p1Mu2QDH6xGSICadSnrRLa4=
Subject key identifier:   B1:88:8B:3D:DF:D0:42:C8:8C:F7:0A:F1:C1:C0:81:85:C7:C2:EA:52
Certificate issuer:       /CN=39a30dc8d9a2613f485c79d6067d35eef4832f3f
Certificate serial:       0CB79C
Authority key identifier: E1:A9:CE:70:6E:1D:BA:C2:75:F7:8D:5A:CA:2B:75:94:C3:A3:57:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39a30dc8d9a2613f485c79d6067d35eef4832f3f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/3d6ca285964b8e0d3695e96e39042b8bd6fce942.roa
Signing time:             Wed 19 Apr 2023 15:20:43 +0000
ROA not before:           Tue 18 Apr 2023 15:20:43 +0000
ROA not after:            Sat 19 Apr 2025 15:20:43 +0000
asID:                     263170
IP address blocks:        192.141.4.0/22 maxlen: 24
                          2803:2fc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833436 (0xcb79c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39a30dc8d9a2613f485c79d6067d35eef4832f3f
        Validity
            Not Before: Apr 18 15:20:43 2023 GMT
            Not After : Apr 19 15:20:43 2025 GMT
        Subject: CN=3d6ca285964b8e0d3695e96e39042b8bd6fce942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8a:80:5a:81:6e:ae:08:ab:f7:f6:27:c1:a0:
                    4a:b0:e2:9e:2d:0e:77:a1:0b:a1:19:75:b7:e5:69:
                    a6:43:2e:97:f1:04:25:51:ed:02:51:c9:00:4e:17:
                    a4:41:60:53:93:cf:2b:d7:08:c7:fb:6d:30:81:53:
                    df:84:1f:95:fc:02:d8:de:41:10:8b:aa:6a:39:75:
                    ff:b2:7a:da:2a:cf:b5:14:f2:fd:4b:48:a1:60:67:
                    56:cd:ab:73:f4:56:4c:ac:b5:4b:f9:79:8e:ff:16:
                    c7:f0:c1:8b:b5:ce:94:70:7f:ca:c6:07:54:dc:53:
                    f4:a7:42:a0:e6:ef:40:11:6c:77:63:eb:92:fb:40:
                    da:5c:9f:21:5d:17:3d:0c:4e:a0:3d:18:fc:2a:dd:
                    7e:f8:2a:5f:bd:0e:67:16:c4:24:6b:84:a9:19:87:
                    32:1e:4e:d5:a1:00:32:23:90:eb:0f:73:b9:e2:d8:
                    09:33:2a:af:19:9d:48:7b:8a:eb:5d:a8:40:72:9a:
                    1f:86:45:b5:33:56:c2:53:d0:2b:a5:bd:92:66:f0:
                    df:4d:08:bd:57:96:d4:84:f2:c8:dd:e4:f0:39:b9:
                    aa:a2:20:ce:ba:6d:9a:a8:4e:1d:95:1a:39:a4:9f:
                    36:da:fc:d5:7a:25:bc:0e:13:0c:f6:ab:31:29:77:
                    a4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:88:8B:3D:DF:D0:42:C8:8C:F7:0A:F1:C1:C0:81:85:C7:C2:EA:52
            X509v3 Authority Key Identifier:
                keyid:E1:A9:CE:70:6E:1D:BA:C2:75:F7:8D:5A:CA:2B:75:94:C3:A3:57:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39a30dc8d9a2613f485c79d6067d35eef4832f3f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/3d6ca285964b8e0d3695e96e39042b8bd6fce942.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d0e662ff-33b4-44be-8020-9616b2e960d8/39a30dc8d9a2613f485c79d6067d35eef4832f3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.4.0/22
                IPv6:
                  2803:2fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:c6:5f:79:52:9c:71:f2:8a:9e:9c:5f:64:39:d7:a9:a1:57:
         6f:28:9c:fa:18:9c:d9:45:ad:a5:d8:d9:66:ef:b5:ba:15:11:
         34:15:6b:1d:fd:a5:87:94:ff:c6:97:aa:7d:1c:c3:6b:b3:ca:
         38:ba:e5:69:3e:b7:dc:b8:38:46:07:b0:00:c6:0e:a0:7a:10:
         c9:5c:97:27:66:11:f8:45:7a:bb:0d:58:c5:35:a5:7d:98:7f:
         d3:21:44:cf:60:a9:ea:28:20:4f:66:a8:7d:a5:2d:da:5a:e2:
         06:a0:21:e6:57:d1:ac:19:d8:b4:2d:52:4f:54:83:1a:7c:c9:
         5d:10:82:c0:5d:18:28:03:3e:50:c9:65:6b:9b:91:bd:ae:52:
         71:91:6c:bf:6b:dd:75:b6:88:9f:34:1f:4b:4f:f9:51:42:1d:
         8d:37:3e:0e:b1:77:91:b1:f7:53:8c:01:2c:57:10:31:c7:03:
         2b:18:83:ec:b9:8a:87:e6:87:a4:3a:4e:99:18:23:e7:98:d5:
         db:e1:98:85:45:cd:3d:89:96:b1:b7:2b:1b:6d:65:77:e3:e7:
         1c:35:f7:23:ab:79:99:b0:a8:87:c8:9c:d5:c8:24:12:15:e5:
         7a:a8:84:ca:88:82:8b:2b:18:82:53:11:b1:db:f9:ff:67:e9:
         f6:08:3a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----