Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/2512c8b5a795e4ea661a035cc56b989f814a6863.roa
File:                     2512c8b5a795e4ea661a035cc56b989f814a6863.roa (raw, json)
Hash identifier:          HXx5xZvGdRtWS40pFtGXtJB3hD4T3Dm4OVymf2jXG24=
Subject key identifier:   74:E5:1F:AC:29:1B:9E:B2:F1:A7:29:E2:D9:BA:1C:0D:BB:4F:2D:23
Certificate issuer:       /CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
Certificate serial:       21FC1B
Authority key identifier: 09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/2512c8b5a795e4ea661a035cc56b989f814a6863.roa
Signing time:             Tue 23 May 2023 19:42:00 +0000
ROA not before:           Mon 22 May 2023 19:42:00 +0000
ROA not after:            Fri 23 May 2025 19:42:00 +0000
asID:                     61449
IP address blocks:        201.139.80.0/22 maxlen: 24
                          138.186.160.0/22 maxlen: 24
                          2803:580::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2227227 (0x21fc1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a875539d46b4f7b023fe742a5b4cf5fe47838f3
        Validity
            Not Before: May 22 19:42:00 2023 GMT
            Not After : May 23 19:42:00 2025 GMT
        Subject: CN=2512c8b5a795e4ea661a035cc56b989f814a6863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d1:c8:c0:15:3d:bc:8f:97:fd:80:09:a2:1f:
                    88:47:6d:79:3f:28:07:5e:8b:d9:4f:8f:3c:02:5e:
                    c5:09:cb:77:a8:d0:a0:91:4d:92:46:24:1f:95:39:
                    d9:2b:a2:1a:fa:d3:6c:94:c7:bf:bf:3a:cf:34:4d:
                    e2:4c:5f:2f:8a:f1:c0:9d:89:4a:f7:c6:2a:98:c1:
                    dd:3a:f2:44:32:a6:50:18:3a:2b:ce:72:e3:31:12:
                    d2:99:63:84:74:e0:66:47:97:08:6e:26:4c:ea:5a:
                    70:36:70:92:da:8d:ef:ff:30:15:bd:28:75:9f:0e:
                    4a:06:e7:81:56:db:e5:1f:3d:2c:5a:78:95:c2:bd:
                    7b:d4:6b:0d:e4:ac:60:bc:c2:1a:b4:0a:45:bc:1c:
                    53:1d:e2:c7:5f:e3:0a:26:8c:d7:38:6d:fe:c8:8e:
                    34:b1:e7:0a:e1:4a:97:e0:be:a4:21:1f:de:f4:86:
                    a1:ae:80:22:d5:d4:71:c3:5d:b5:2e:6f:10:b9:65:
                    bf:d6:10:4e:2f:c7:4a:83:4c:44:fa:24:83:a7:f2:
                    ff:21:4b:cc:fc:e5:fb:5c:1c:5b:85:8a:0b:f8:4d:
                    40:be:db:23:24:48:bc:1a:d1:cc:87:80:61:2d:9e:
                    6b:2b:30:d1:68:2f:ba:db:72:64:ea:60:27:8f:b6:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E5:1F:AC:29:1B:9E:B2:F1:A7:29:E2:D9:BA:1C:0D:BB:4F:2D:23
            X509v3 Authority Key Identifier:
                keyid:09:91:F7:01:7A:3C:82:12:AE:ED:7C:67:10:C9:C6:E7:F0:89:F9:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/2512c8b5a795e4ea661a035cc56b989f814a6863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f789a36-9e9a-44f0-9647-39a139e92f7d/6a875539d46b4f7b023fe742a5b4cf5fe47838f3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.160.0/22
                  201.139.80.0/22
                IPv6:
                  2803:580::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:8e:e4:b2:73:30:20:69:75:2c:77:3c:39:88:d7:22:9a:c7:
         4e:6f:44:dc:18:fb:77:9d:ee:bb:dd:a7:f7:9b:d8:57:05:0e:
         1d:8c:52:c8:9c:8d:a3:86:b1:26:49:6b:3b:b7:4b:7c:64:b1:
         e2:68:f2:da:f4:ab:4f:b5:4c:d3:53:b3:61:49:91:ba:4c:be:
         23:52:ff:bc:58:60:df:d5:01:bd:f3:da:fb:c2:6a:d3:26:71:
         71:25:97:cc:22:9f:89:aa:c6:e7:ac:7c:fb:be:f8:eb:03:bc:
         b2:2d:92:df:1e:d9:b2:52:27:07:a9:e8:f5:75:9f:99:51:ed:
         02:80:a2:8c:75:8f:7d:0f:70:75:d2:b2:14:fe:cd:6b:69:40:
         13:c8:3a:e4:a0:05:27:46:42:54:7d:8e:85:1e:18:64:ff:62:
         82:38:fe:bf:aa:54:49:44:25:00:a7:55:74:d4:86:8e:e3:98:
         90:44:f3:f9:c2:8f:34:1e:be:a4:3c:25:fc:06:b2:3e:47:b5:
         d4:54:ad:41:48:00:78:53:01:22:ce:af:0c:ec:06:ca:9c:f1:
         c5:c3:2c:bc:d4:11:1f:74:cb:79:a1:c9:e7:9d:c4:97:9f:ef:
         a8:24:c8:31:24:6d:74:74:3e:02:6a:46:3a:d9:52:a2:d7:80:
         f1:58:9a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----