Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/942df6c1aa13131390397868acafffe7f3e8ca85.roa
File:                     942df6c1aa13131390397868acafffe7f3e8ca85.roa (raw, json)
Hash identifier:          3zM2b/e4N3/UlL3/Faq+ZAkQ6VX+Td5orYhWM9onMkc=
Subject key identifier:   0E:6B:C2:44:8B:A7:C7:90:2E:DF:91:B8:D7:70:D2:13:77:F5:65:C1
Certificate issuer:       /CN=3443505eddac7b5aa6eddaedee91340561a130ec
Certificate serial:       079821
Authority key identifier: D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3443505eddac7b5aa6eddaedee91340561a130ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/942df6c1aa13131390397868acafffe7f3e8ca85.roa
Signing time:             Tue 03 May 2022 02:14:36 +0000
ROA not before:           Mon 02 May 2022 03:00:00 +0000
ROA not after:            Thu 02 May 2024 03:00:00 +0000
asID:                     52393
IP address blocks:        2803:8200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497697 (0x79821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3443505eddac7b5aa6eddaedee91340561a130ec
        Validity
            Not Before: May  2 03:00:00 2022 GMT
            Not After : May  2 03:00:00 2024 GMT
        Subject: CN=942df6c1aa13131390397868acafffe7f3e8ca85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:17:6b:a8:42:b4:26:36:62:81:1d:70:c7:52:
                    80:55:04:79:f6:ba:66:ca:bc:bd:8e:db:df:48:dd:
                    56:c7:f1:f8:a8:9b:a9:6c:4a:93:51:c5:5f:6e:e4:
                    fe:d9:36:f2:76:5e:5a:62:e4:f3:54:43:73:b5:c8:
                    5c:2b:80:b9:f7:4d:7c:e8:3a:51:0c:e9:01:b0:32:
                    7d:59:a4:aa:ea:42:53:8a:07:3d:5d:ec:fa:5a:22:
                    a6:66:90:fa:a7:89:f6:48:f8:83:10:60:32:a6:5f:
                    ed:b3:83:03:e7:4c:13:a1:a2:f9:43:7c:8b:01:4f:
                    ad:d5:11:fc:55:08:0a:ee:92:46:ed:dc:27:ea:9e:
                    fe:57:72:41:5c:37:50:bb:d3:bf:b8:87:b7:f7:00:
                    7f:c2:bf:be:a9:6a:8a:84:37:b0:9c:fb:dc:01:91:
                    cd:df:d3:22:70:a5:0a:c8:25:7a:3b:9c:5e:5b:d2:
                    57:aa:35:02:58:d5:d0:df:1b:01:69:8e:03:b7:6d:
                    17:a1:da:24:3c:46:35:d3:f0:3b:e0:bb:db:a1:1e:
                    ab:c7:a5:84:2a:0b:c5:f8:30:c8:d5:4a:d3:38:cf:
                    72:fb:7b:b2:e5:03:c0:af:f7:07:da:1e:3b:4a:25:
                    ba:fa:1f:1f:ec:ed:94:bc:f2:0d:3a:f1:a7:5a:5f:
                    3c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6B:C2:44:8B:A7:C7:90:2E:DF:91:B8:D7:70:D2:13:77:F5:65:C1
            X509v3 Authority Key Identifier:
                keyid:D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3443505eddac7b5aa6eddaedee91340561a130ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/942df6c1aa13131390397868acafffe7f3e8ca85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/3443505eddac7b5aa6eddaedee91340561a130ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8200::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:fd:4c:f4:84:ea:1a:e8:6a:d5:f2:e1:22:d7:9e:e7:f4:fc:
         c1:ec:a1:71:39:64:69:f5:ed:1b:b5:ae:d3:44:56:c6:4a:f5:
         f6:6e:f4:39:ad:f8:03:1a:0c:42:93:06:dd:dd:d0:47:b2:9e:
         fb:9b:5f:fe:d3:a9:f1:76:fa:0a:d3:0f:8b:a5:22:1c:f6:48:
         2b:09:71:e2:b7:ee:71:91:1f:b9:d5:73:95:46:dc:f2:c5:0c:
         a7:33:b0:0f:32:09:de:b7:23:2e:f3:3d:3a:0d:38:b9:5f:7d:
         2a:1b:27:2b:97:72:94:f0:79:ec:5f:1f:2c:06:74:a8:76:02:
         70:c2:b6:f8:16:1a:0e:22:32:d2:0e:e0:c1:2c:16:85:d7:a9:
         6d:3e:42:12:89:6c:b3:67:e2:ec:54:53:78:cc:88:56:67:ad:
         9f:d4:8c:49:50:c8:87:7d:9d:fa:3a:ff:75:5f:21:b5:6e:b6:
         e7:c5:24:cd:9c:2d:24:84:0f:cd:d1:d6:df:ba:0b:5e:98:1b:
         50:2b:75:0c:00:20:08:c7:db:72:bd:bb:ac:c6:64:cb:d7:7e:
         00:0c:18:af:7f:3a:42:9b:d4:97:7c:d9:1b:4f:fb:fa:1f:44:
         2b:f4:e1:4d:fa:8a:d0:07:c8:d1:35:f7:4b:02:9c:23:3f:24:
         cd:d3:b9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----