Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/c1d238e7ec22b0a082cc184ad3056660244ea9ab.roa
File:                     c1d238e7ec22b0a082cc184ad3056660244ea9ab.roa (raw, json)
Hash identifier:          suZp0qO6x3gqivlua4zPs2IS24YxpHI8NqyEh4R8xbk=
Subject key identifier:   78:37:2C:0A:B3:85:DB:86:CE:34:2D:F2:CF:BB:BD:4B:CF:2F:ED:88
Certificate issuer:       /CN=15cc5e31ff1fd8bfd449b0137858987f6db03d4c
Certificate serial:       087D19
Authority key identifier: F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/c1d238e7ec22b0a082cc184ad3056660244ea9ab.roa
Signing time:             Fri 23 Apr 2021 23:53:15 +0000
ROA not before:           Fri 23 Apr 2021 03:00:00 +0000
ROA not after:            Sun 23 Apr 2023 03:00:00 +0000
asID:                     263814
IP address blocks:        138.219.16.0/22 maxlen: 22
                          2803:7240::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556313 (0x87d19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cc5e31ff1fd8bfd449b0137858987f6db03d4c
        Validity
            Not Before: Apr 23 03:00:00 2021 GMT
            Not After : Apr 23 03:00:00 2023 GMT
        Subject: CN=c1d238e7ec22b0a082cc184ad3056660244ea9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c3:5e:c3:7d:af:55:44:6b:24:48:c6:cb:35:
                    cc:78:cb:88:4a:4f:0c:82:e9:08:de:7f:15:13:db:
                    32:c5:1b:cd:b3:1a:2e:91:d6:7a:33:ec:3f:a1:ef:
                    a5:4c:89:09:4a:04:0c:58:48:db:31:f5:f6:09:75:
                    0c:b9:60:3c:93:6c:12:49:ec:47:66:6b:af:59:27:
                    ae:96:e7:5e:2e:7b:b3:55:7d:9f:13:64:43:ee:2c:
                    87:50:52:c5:0b:d1:24:90:fd:f9:bb:e4:e1:7e:73:
                    5e:4e:09:48:de:c9:a4:b6:fd:88:5f:57:63:f3:50:
                    71:9b:99:d9:26:7a:6c:7a:84:db:a4:b8:3f:94:9e:
                    e8:3c:87:c9:60:a7:3d:b7:80:17:39:a2:a2:cb:ed:
                    f8:3d:ae:d3:bd:74:8d:29:02:e3:e2:68:d5:4a:fd:
                    46:78:b4:aa:1b:0f:72:0a:9e:37:8b:4e:be:14:6d:
                    da:b0:9a:ad:3a:8c:b9:24:de:20:1f:e5:48:49:ec:
                    0f:fc:32:36:66:a6:71:43:e8:40:7b:ee:37:bc:8d:
                    c1:40:31:02:fb:7e:f9:f5:2b:39:ff:f8:8a:a9:f5:
                    a6:15:a4:b2:0a:1b:ce:d0:36:1e:2e:2a:e9:e9:89:
                    05:15:51:d4:87:a9:15:3c:14:e7:e4:f3:e0:72:79:
                    e4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:37:2C:0A:B3:85:DB:86:CE:34:2D:F2:CF:BB:BD:4B:CF:2F:ED:88
            X509v3 Authority Key Identifier:
                keyid:F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/c1d238e7ec22b0a082cc184ad3056660244ea9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.16.0/22
                IPv6:
                  2803:7240::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:41:07:7e:90:ca:bc:7d:a6:cf:0b:07:d8:01:b2:22:e4:54:
         34:9b:b2:74:59:f0:f9:80:e6:7a:88:d8:74:05:40:a5:e2:c6:
         b0:6e:10:1c:46:bf:28:24:24:f4:b3:ab:fc:91:52:bb:5c:e2:
         81:62:ab:45:48:a8:08:ec:36:e8:be:82:48:21:b1:65:22:1b:
         e4:58:e0:32:2b:b9:d0:44:13:3d:22:27:e2:a9:e7:4a:6a:48:
         bf:df:ca:c7:d4:dc:1f:db:dd:3c:da:f0:13:85:f2:5b:96:06:
         ad:7e:8b:ce:a2:d7:40:24:6d:e0:71:9b:90:9d:43:c3:af:58:
         c0:d6:79:99:bf:3e:e0:6c:9b:67:22:f1:96:7f:60:bb:7d:0b:
         da:4c:bd:4d:a9:66:9d:ad:02:06:ca:83:45:a5:af:7c:b8:b4:
         48:a5:b8:63:f0:1d:d0:a6:22:96:58:44:d4:1c:52:f0:4e:6a:
         72:a8:cf:49:f6:97:42:a5:27:1b:1d:3c:91:4c:73:60:80:fd:
         66:2f:2b:6e:42:cf:c1:d0:21:d8:15:95:d1:8a:0a:c1:d9:1b:
         82:a5:0f:dc:d7:cf:3e:d9:04:93:57:08:11:cf:f8:25:be:dc:
         22:4e:23:d5:7a:7e:61:14:e3:f3:c8:6f:44:5a:f4:0b:51:3f:
         80:7d:9c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----