Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f68a32443ecc9d3963a97996e8a7109293ca00ef.roa
File:                     f68a32443ecc9d3963a97996e8a7109293ca00ef.roa (raw, json)
Hash identifier:          dM/Emk3aIo2F8HKawTsC7RtUmmVZ0jLKbBS2XdkhqoA=
Subject key identifier:   DD:20:87:15:AE:CD:8C:FB:7F:DE:57:96:B0:07:B1:F8:78:24:1B:08
Certificate issuer:       /CN=d85da304334fb36204a370e950487689e811a2c8
Certificate serial:       0E5283
Authority key identifier: 95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f68a32443ecc9d3963a97996e8a7109293ca00ef.roa
Signing time:             Wed 24 Mar 2021 14:45:12 +0000
ROA not before:           Wed 24 Mar 2021 14:45:09 +0000
ROA not after:            Tue 24 Mar 2026 14:45:09 +0000
asID:                     14709
IP address blocks:        138.186.88.0/22 maxlen: 24
                          190.57.32.0/20 maxlen: 24
                          200.108.32.0/20 maxlen: 24
                          200.108.48.0/20 maxlen: 24
                          2800:ce0::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938627 (0xe5283)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d85da304334fb36204a370e950487689e811a2c8
        Validity
            Not Before: Mar 24 14:45:09 2021 GMT
            Not After : Mar 24 14:45:09 2026 GMT
        Subject: CN=f68a32443ecc9d3963a97996e8a7109293ca00ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c5:3e:2b:bf:ac:65:6d:98:8d:c0:de:6b:7e:
                    a1:ad:67:fb:06:a9:b6:d7:cb:a6:34:d7:03:b6:49:
                    1b:e3:28:fd:f8:b2:f4:97:70:c7:aa:a1:c9:2f:64:
                    d4:3a:36:7f:f8:34:47:dc:09:1c:66:5b:4c:06:03:
                    79:0c:05:fa:a3:b1:b2:0b:77:d6:ae:1b:b8:c4:45:
                    76:92:5a:cf:55:b2:82:4b:67:e0:3c:09:8b:0c:0b:
                    9b:ae:88:12:bb:ad:90:de:e5:0e:38:f4:0b:9f:c9:
                    0d:74:c5:ad:99:aa:f7:f7:a5:c0:43:7e:aa:e2:37:
                    a7:1f:e3:ac:b0:90:9b:9b:f3:64:2f:4f:3c:32:55:
                    8c:2e:9a:15:23:ee:31:e3:fd:cc:32:b5:09:d1:de:
                    c4:b0:6f:c5:9f:ac:5d:c4:8d:60:e3:55:45:3e:3c:
                    b9:f1:9c:44:95:c3:76:92:3f:9c:7c:8a:86:b8:df:
                    ed:51:7c:35:34:71:9d:bf:a8:58:49:e9:a4:27:60:
                    c3:06:b1:ab:ba:b7:86:af:bf:4f:32:c9:22:0e:36:
                    09:8c:b2:e0:25:06:40:a5:45:59:73:89:d4:fc:f1:
                    53:83:6b:65:78:c2:db:21:3b:45:78:55:b6:8f:3f:
                    b3:62:3c:d3:26:46:cb:ac:bf:fe:a2:be:b9:7b:fa:
                    e1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:20:87:15:AE:CD:8C:FB:7F:DE:57:96:B0:07:B1:F8:78:24:1B:08
            X509v3 Authority Key Identifier:
                keyid:95:A8:9C:41:76:01:10:8E:0E:98:02:3D:07:26:F4:4A:7C:51:0F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d85da304334fb36204a370e950487689e811a2c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/f68a32443ecc9d3963a97996e8a7109293ca00ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1cc548ff-8f0c-4e75-8125-5e095fbf24c0/d85da304334fb36204a370e950487689e811a2c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.88.0/22
                  190.57.32.0/20
                  200.108.32.0/19
                IPv6:
                  2800:ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:9d:32:dc:ec:51:1d:65:ef:27:8c:9d:44:50:fa:fe:5c:a5:
         ad:57:2f:49:41:61:c4:31:bd:ac:ef:3b:98:c8:76:91:da:b4:
         5f:4e:a5:08:7b:a6:d8:76:37:22:64:f6:c6:1b:64:01:91:89:
         72:4b:ef:02:9d:a1:b7:70:f0:80:8f:97:dc:b2:14:4c:0e:e0:
         e2:14:20:01:14:c8:fa:62:ff:11:ce:67:f4:a6:e9:e4:e0:96:
         2b:82:39:23:29:70:02:80:a9:00:ff:da:d5:f9:7e:20:3b:73:
         a3:14:e4:d6:37:c2:c6:dc:2e:a6:e0:eb:b9:a2:0a:66:af:bc:
         09:5b:d3:74:8d:03:c5:c0:1d:c5:99:54:0c:82:53:d3:1c:e0:
         4f:1f:c4:69:d5:f8:24:79:d3:46:58:da:18:55:64:9b:23:1c:
         72:d9:5b:5a:c4:4c:fa:a6:ef:b8:4c:ce:91:ec:52:b2:82:80:
         8f:c4:47:71:5b:5d:3b:f8:34:af:2f:01:60:56:ea:fc:3d:f9:
         42:85:68:46:a7:ea:10:e1:79:20:20:70:d6:8c:9c:36:56:a4:
         8f:13:56:70:ee:6e:88:bf:76:68:c5:95:84:57:fa:5b:82:49:
         64:22:ff:a9:7b:5a:80:30:87:00:b9:b1:43:2f:83:39:8d:4c:
         e1:d3:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----