Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ec5e7406-512d-40a0-9e35-224270cd1c91/004475641138c32680a445210e108c3e1d1493c8.roa
File:                     004475641138c32680a445210e108c3e1d1493c8.roa (raw, json)
Hash identifier:          ivClU7H/XCQ63Sm5V04a/zTCz7wv9fdtSmQjytf4upk=
Subject key identifier:   D4:52:8E:A2:BF:5A:F1:3A:73:F2:56:C1:0D:B5:7B:FC:F2:0F:EF:0C
Certificate issuer:       /CN=5b7146c3e3e3bf5adde231a7c701d0d97fff5cbd
Certificate serial:       191C86
Authority key identifier: 71:DF:AD:5C:AD:F2:87:3F:3B:5F:A1:00:4C:89:FC:B8:90:3F:DB:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7146c3e3e3bf5adde231a7c701d0d97fff5cbd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ec5e7406-512d-40a0-9e35-224270cd1c91/004475641138c32680a445210e108c3e1d1493c8.roa
Signing time:             Mon 12 Sep 2022 14:45:32 +0000
ROA not before:           Mon 12 Sep 2022 14:45:24 +0000
ROA not after:            Thu 12 Sep 2024 14:45:24 +0000
asID:                     27855
IP address blocks:        2803:70a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1645702 (0x191c86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7146c3e3e3bf5adde231a7c701d0d97fff5cbd
        Validity
            Not Before: Sep 12 14:45:24 2022 GMT
            Not After : Sep 12 14:45:24 2024 GMT
        Subject: CN=004475641138c32680a445210e108c3e1d1493c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4e:38:62:e1:cc:dc:80:42:f0:e5:78:f5:0e:
                    e4:9c:b9:5b:c2:25:75:df:ba:86:69:5e:40:b4:42:
                    c0:ae:96:19:91:cc:b9:1f:06:6b:a9:7f:8f:da:37:
                    a9:0f:b9:e3:11:f6:f1:21:d6:62:91:b7:21:2c:dd:
                    f4:86:e8:6a:de:1a:49:5a:46:70:2f:6a:a1:a2:f8:
                    b0:24:24:d3:2f:f9:40:d3:66:0f:08:59:e4:a7:23:
                    66:c7:69:72:2f:3a:aa:93:42:ce:9f:23:15:ff:1d:
                    42:da:3f:1c:3e:8f:d2:d5:df:01:2b:25:f5:29:25:
                    ce:c5:e8:e2:9d:85:b9:84:db:a3:67:17:33:e5:66:
                    59:8e:5b:b7:dc:9d:f3:50:56:f1:20:70:2d:c2:82:
                    c2:c2:2b:f9:da:13:55:f8:d1:89:74:e3:69:01:5f:
                    44:4a:9e:21:7f:6d:e9:e8:fc:79:cb:bb:af:5a:68:
                    af:e5:6f:d9:15:fa:de:8e:d5:ad:27:35:86:bb:d1:
                    8f:d7:4a:8f:91:d0:b9:ae:15:d3:93:dd:75:4b:31:
                    51:22:33:1c:d4:cd:bd:e5:5e:d0:67:41:db:3b:a5:
                    ee:97:71:f4:8e:5a:ba:ee:0f:cf:08:fe:f1:0a:51:
                    81:37:50:f4:3d:3f:78:15:bd:0d:ac:92:03:b4:3c:
                    b6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:52:8E:A2:BF:5A:F1:3A:73:F2:56:C1:0D:B5:7B:FC:F2:0F:EF:0C
            X509v3 Authority Key Identifier:
                keyid:71:DF:AD:5C:AD:F2:87:3F:3B:5F:A1:00:4C:89:FC:B8:90:3F:DB:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7146c3e3e3bf5adde231a7c701d0d97fff5cbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ec5e7406-512d-40a0-9e35-224270cd1c91/004475641138c32680a445210e108c3e1d1493c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ec5e7406-512d-40a0-9e35-224270cd1c91/5b7146c3e3e3bf5adde231a7c701d0d97fff5cbd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:70a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:18:2c:f2:cf:e4:1b:a7:ba:45:45:33:76:be:02:f8:db:
         f0:7f:b2:23:31:a3:82:3d:10:a0:c6:6f:1c:a2:fe:9c:62:b5:
         2e:73:47:31:93:ef:52:21:bb:52:3e:26:c6:09:75:1d:08:11:
         b3:c4:45:4d:4f:6c:d6:cc:3e:9b:8a:b0:d4:cf:fa:90:b6:07:
         54:ce:7a:1b:7b:51:87:3c:f0:7d:b8:bb:4f:0e:e1:09:9b:cd:
         f2:92:02:41:cd:89:fc:3f:16:f4:b4:7f:47:c1:91:ef:ec:78:
         2c:58:8d:bb:cf:56:05:b7:7b:56:f5:0a:53:10:e5:3e:e0:35:
         27:b6:72:3e:00:f8:08:86:a5:30:78:e3:08:da:80:ba:0b:89:
         e4:b9:ab:84:33:f8:73:db:e9:d2:0a:6b:a2:04:49:e8:87:0d:
         09:d0:e1:80:7b:5c:a7:47:a7:fc:91:40:b3:9e:cb:fe:4c:51:
         79:1a:9f:b0:8d:1f:51:90:f4:26:52:97:25:77:da:34:25:e7:
         2d:49:61:da:c5:7e:db:5d:65:c4:e2:18:43:01:31:fa:94:69:
         94:28:4a:11:98:01:eb:3a:e9:8f:07:4b:bf:14:e5:e9:33:89:
         02:05:cd:6b:50:22:57:79:1e:ce:a4:8e:31:02:10:d1:ad:bb:
         46:9d:81:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----