Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/47e02e0f08198473debfd446f4272e477ffdd48f.roa
File:                     47e02e0f08198473debfd446f4272e477ffdd48f.roa (raw, json)
Hash identifier:          ysOJm2P2OYO+otE+O3pflJ4nw1J4mn31F0u6Yydsgnw=
Subject key identifier:   B5:A7:27:9F:18:07:16:9E:24:57:19:18:F7:D5:F2:AA:07:33:F8:E1
Certificate issuer:       /CN=7bd015f599a571a8e20d3eb5a7bae05bf71e908b
Certificate serial:       0B8E0A
Authority key identifier: E4:6D:18:CE:56:58:1B:49:48:8A:46:29:FC:E2:DA:D1:3A:4D:45:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7bd015f599a571a8e20d3eb5a7bae05bf71e908b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/47e02e0f08198473debfd446f4272e477ffdd48f.roa
Signing time:             Wed 24 Mar 2021 14:46:44 +0000
ROA not before:           Wed 24 Mar 2021 14:46:43 +0000
ROA not after:            Tue 24 Mar 2026 14:46:43 +0000
asID:                     27903
IP address blocks:        138.255.152.0/22 maxlen: 24
                          170.0.176.0/22 maxlen: 24
                          200.89.80.0/21 maxlen: 24
                          2803:fa40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757258 (0xb8e0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bd015f599a571a8e20d3eb5a7bae05bf71e908b
        Validity
            Not Before: Mar 24 14:46:43 2021 GMT
            Not After : Mar 24 14:46:43 2026 GMT
        Subject: CN=47e02e0f08198473debfd446f4272e477ffdd48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:35:28:ec:4f:cf:b5:44:e1:8b:d8:a5:48:92:
                    99:79:00:d2:a8:d5:71:2e:03:89:96:01:4c:26:1e:
                    2f:b2:2e:8f:8b:5e:f4:98:5b:a6:b7:b5:aa:a4:f3:
                    d7:bb:d5:90:ad:23:ac:76:e2:88:e9:76:c2:ba:2d:
                    65:bb:77:87:60:c8:68:be:70:bf:ec:92:ab:d6:f6:
                    8d:7b:55:b6:32:1e:5f:2a:85:2f:eb:51:2a:0e:63:
                    f1:de:cb:82:fa:42:0a:6d:82:f2:23:38:66:26:63:
                    33:ae:63:5f:f4:71:cf:f0:25:f3:a1:fc:59:44:1f:
                    98:1e:a2:b8:2c:f7:90:cd:cd:a9:85:87:40:07:c9:
                    d2:81:5e:df:10:82:bb:6f:b9:65:04:43:4c:d3:87:
                    1f:05:a4:0a:c6:54:e2:01:e3:cb:48:19:4a:d3:73:
                    75:b1:d6:86:93:3b:1c:32:96:e5:dc:76:86:76:0b:
                    28:71:6d:d8:ac:11:68:89:c5:3b:da:2f:2a:e0:c0:
                    74:cf:12:44:67:19:07:30:e8:11:db:1e:38:6f:0d:
                    7e:8b:ce:f8:60:ca:3f:46:28:e4:8c:9f:e7:88:77:
                    ca:4f:81:f0:81:3f:8c:92:78:2d:eb:0b:35:1c:ba:
                    74:ce:0d:65:93:8c:eb:a8:cd:34:95:87:90:e2:d0:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A7:27:9F:18:07:16:9E:24:57:19:18:F7:D5:F2:AA:07:33:F8:E1
            X509v3 Authority Key Identifier:
                keyid:E4:6D:18:CE:56:58:1B:49:48:8A:46:29:FC:E2:DA:D1:3A:4D:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7bd015f599a571a8e20d3eb5a7bae05bf71e908b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/47e02e0f08198473debfd446f4272e477ffdd48f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/7bd015f599a571a8e20d3eb5a7bae05bf71e908b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.152.0/22
                  170.0.176.0/22
                  200.89.80.0/21
                IPv6:
                  2803:fa40::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:47:0f:41:a9:3d:ca:89:06:99:86:9c:32:1e:5b:76:87:95:
         2a:31:d6:4b:7d:7a:5b:ef:97:ad:0b:2f:c6:02:78:e8:90:1b:
         4b:c5:ff:fc:a1:01:88:2b:d5:3e:7b:21:51:f6:4c:70:ae:ee:
         49:d6:cd:af:ce:07:e6:02:3e:8a:fa:dc:6a:30:cf:d5:31:d7:
         5f:71:aa:f3:76:a3:c2:43:6b:89:64:90:cd:8f:14:59:1d:c9:
         b5:0b:95:ec:71:d0:d7:f7:cf:6a:28:96:9a:c1:e7:6a:f0:d3:
         0d:f8:05:a1:f9:eb:26:3e:5d:60:6f:b8:fe:e9:ca:01:cf:64:
         f1:2c:07:1c:28:43:34:7c:27:b1:ec:b0:4f:96:50:79:5e:a0:
         e2:74:a3:d5:c9:70:40:d8:0a:83:ab:41:f0:ee:3e:45:62:9d:
         a4:5b:c2:32:29:48:31:06:a8:97:17:89:79:d7:5e:da:c1:40:
         ea:35:fd:73:62:e6:21:c5:9f:0a:1c:95:0f:42:d8:4e:ac:fb:
         e8:f7:e3:62:e0:ea:2f:50:96:54:f3:9b:93:25:8b:f7:d0:28:
         75:64:97:08:3b:ae:c4:80:39:61:91:b6:60:bc:1f:3a:14:93:
         2c:60:b0:0b:b1:66:9b:d8:e8:57:68:35:4c:a9:d8:7f:72:b1:
         75:97:09:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----