Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/a3a9e350c84dc2ac3a1c4d1a2a1c18b7aec293c9.roa
File:                     a3a9e350c84dc2ac3a1c4d1a2a1c18b7aec293c9.roa (raw, json)
Hash identifier:          lOwuYQ7weo/EA6+0Bhvw5LoRFZZaquQ4qyr0ZhkBbrM=
Subject key identifier:   A6:1D:63:4B:81:EF:9B:FB:31:04:AC:6A:B4:04:E2:18:1F:EB:BB:CF
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       0FD513
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/a3a9e350c84dc2ac3a1c4d1a2a1c18b7aec293c9.roa
Signing time:             Tue 06 Jul 2021 19:14:06 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     262191
IP address blocks:        138.121.12.0/22 maxlen: 22
                          2800:b70:12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037587 (0xfd513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=a3a9e350c84dc2ac3a1c4d1a2a1c18b7aec293c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:f7:1e:6e:d4:f9:f4:f4:13:09:fc:d6:8c:
                    c3:02:95:3d:61:c3:98:61:51:02:05:da:c8:c0:1c:
                    0d:84:27:37:c7:97:00:a1:1f:91:97:98:ed:aa:4c:
                    ed:54:d6:b5:ce:20:d5:31:c9:10:2f:9e:98:b0:10:
                    b6:33:7f:d3:dd:7c:fc:ce:4c:b4:d7:a7:b8:26:82:
                    2c:85:89:7e:97:59:eb:cd:34:26:86:f8:a8:a5:28:
                    74:0d:5e:d5:25:59:88:9c:48:01:40:31:d7:e3:bd:
                    45:2f:37:50:bb:f4:55:fd:50:37:c7:b0:99:dc:78:
                    3c:f6:6a:f0:10:01:c5:33:a3:af:59:f6:2c:42:8f:
                    dc:ae:25:24:e9:e8:93:6b:12:2e:99:61:9e:54:f7:
                    29:4e:a1:7c:38:07:f5:b3:7d:df:89:8e:fd:e2:70:
                    d5:aa:ad:fb:08:c0:bc:4f:69:05:5c:8d:50:ef:18:
                    d4:c3:c5:88:94:e8:3a:79:83:ad:e0:f5:81:c3:ec:
                    05:21:14:57:38:fb:71:1f:bd:03:33:df:18:24:31:
                    40:a1:93:44:7b:27:5b:6e:98:15:00:81:0a:81:87:
                    08:ce:84:0f:54:77:93:4d:89:65:f3:b5:75:d7:fb:
                    8a:c4:af:8b:ab:c2:09:5f:cf:c0:5f:b5:bb:de:57:
                    9c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1D:63:4B:81:EF:9B:FB:31:04:AC:6A:B4:04:E2:18:1F:EB:BB:CF
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/a3a9e350c84dc2ac3a1c4d1a2a1c18b7aec293c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.12.0/22
                IPv6:
                  2800:b70:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:92:3e:ea:7b:0b:4a:9e:68:b3:8e:1a:c1:e6:d9:19:b7:60:
         61:77:96:5b:3f:4f:d1:18:8c:89:c6:3c:d9:b8:2b:27:2f:ce:
         49:67:e4:12:a9:27:df:af:80:34:30:7c:3c:0f:fa:c2:aa:e9:
         5b:2d:6c:55:b0:3b:94:0a:59:99:c5:a9:3e:45:0c:1f:65:66:
         a4:e1:2a:ce:53:93:ed:57:e0:2f:7c:ea:0a:0e:83:4a:0a:fe:
         86:45:a0:eb:66:ae:ed:7e:de:9d:86:43:75:c3:0c:0d:ce:cd:
         3b:11:e0:a1:16:58:ab:f6:04:fb:72:52:9e:70:1f:9c:68:5a:
         c3:7b:26:f9:39:d6:15:3c:df:4e:44:76:2f:5d:8e:f9:58:ce:
         c1:1f:1c:cf:4a:44:dd:cc:11:1e:32:61:57:c1:3d:56:70:88:
         7d:11:e4:1d:99:5a:60:5e:35:44:90:cb:a6:9f:a9:51:3b:66:
         6a:2a:52:56:d4:7a:2c:6c:7d:30:a9:c2:16:57:ad:ed:20:11:
         4d:1d:9e:ab:df:5c:f6:e0:4b:74:a7:25:75:64:d0:9d:30:7f:
         d1:97:dd:17:1e:58:e3:50:03:00:ef:44:f6:87:65:d6:27:fd:
         01:a9:e0:7f:fc:9c:d6:d8:92:ac:6f:30:b8:0d:df:1b:2a:b0:
         c0:c0:70:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----