Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/344817c1f06cce2d6ba6c5d54fc318bde48283b5.roa
File:                     344817c1f06cce2d6ba6c5d54fc318bde48283b5.roa (raw, json)
Hash identifier:          +NK13Gy7GdcfHv1BaGDS5Mrg/dLRCOqmrozqEMCozOk=
Subject key identifier:   DE:D6:6F:AE:82:07:B7:AB:50:B3:93:C3:F6:25:E3:7E:D0:D3:78:58
Certificate issuer:       /CN=36db2a9dc7f54f37a110e0c2fb87e02babea4634
Certificate serial:       0F19
Authority key identifier: AD:1E:18:01:5D:B9:7A:96:FA:44:6D:6F:FE:CE:11:50:A8:02:E9:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36db2a9dc7f54f37a110e0c2fb87e02babea4634.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/344817c1f06cce2d6ba6c5d54fc318bde48283b5.roa
Signing time:             Sun 11 Apr 2021 18:55:34 +0000
ROA not before:           Sun 11 Apr 2021 03:00:00 +0000
ROA not after:            Tue 11 Apr 2023 03:00:00 +0000
asID:                     28398
IP address blocks:        138.99.148.0/22 maxlen: 22
                          138.99.148.0/24 maxlen: 24
                          138.99.149.0/24 maxlen: 24
                          138.99.150.0/24 maxlen: 24
                          138.99.151.0/24 maxlen: 24
                          2806:206::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3865 (0xf19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36db2a9dc7f54f37a110e0c2fb87e02babea4634
        Validity
            Not Before: Apr 11 03:00:00 2021 GMT
            Not After : Apr 11 03:00:00 2023 GMT
        Subject: CN=344817c1f06cce2d6ba6c5d54fc318bde48283b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5d:06:79:7f:29:90:0b:08:de:2a:b1:36:e9:
                    1b:be:f8:a8:f8:16:49:26:02:66:11:b2:40:ed:6c:
                    c5:1d:14:2a:e4:a1:be:ad:15:c7:ff:68:95:22:30:
                    21:f8:c7:f7:a1:48:79:10:e3:97:16:a4:6c:86:bc:
                    8c:fa:2f:0a:33:24:70:30:a6:79:db:6d:80:ed:a5:
                    53:8a:29:c5:59:f1:0a:14:52:34:fd:ac:88:8c:b4:
                    a8:85:0f:38:9a:78:ef:dc:dc:cf:c9:8e:a9:d1:9f:
                    10:4e:fc:42:01:3a:74:a8:cd:35:5a:c8:4b:d2:be:
                    1a:e0:d7:72:ee:65:39:d6:87:db:b8:3e:18:04:0b:
                    e4:25:f1:66:f3:5e:67:3d:f7:0d:25:c0:01:d1:e7:
                    cf:f2:98:49:8d:ac:4e:81:ae:09:65:72:9b:1a:a4:
                    a2:9a:4f:85:fe:8e:b7:ec:2e:2d:a9:8c:5f:bd:0f:
                    18:bc:35:bc:64:e8:98:e7:41:03:3f:9b:05:c3:b8:
                    75:32:b5:6c:eb:70:62:ca:4d:c8:d8:c0:7e:08:fb:
                    d5:6c:e8:66:41:70:f5:0f:22:c5:cc:a3:f1:9f:d8:
                    a5:27:fd:93:52:a3:97:78:bb:75:c2:a8:01:d3:a9:
                    92:33:e9:35:dd:9b:27:14:33:df:b4:ea:9a:82:e3:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D6:6F:AE:82:07:B7:AB:50:B3:93:C3:F6:25:E3:7E:D0:D3:78:58
            X509v3 Authority Key Identifier:
                keyid:AD:1E:18:01:5D:B9:7A:96:FA:44:6D:6F:FE:CE:11:50:A8:02:E9:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/36db2a9dc7f54f37a110e0c2fb87e02babea4634.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/344817c1f06cce2d6ba6c5d54fc318bde48283b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493fe8dc-9381-4b65-924c-e37d7fc847ad/36db2a9dc7f54f37a110e0c2fb87e02babea4634.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.148.0/22
                IPv6:
                  2806:206::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:ad:75:8a:b0:2f:ad:08:28:f2:46:39:85:6f:39:ae:3a:b7:
         68:2c:db:f0:77:b0:bb:f8:9a:04:e2:71:89:ac:26:0e:68:4b:
         84:44:e6:12:fd:9b:a7:b6:75:e5:0a:68:b5:28:bb:e2:d4:d1:
         c3:9d:7d:40:ba:24:39:ab:43:40:61:63:71:42:c3:24:d7:25:
         be:41:a8:b2:0e:75:86:b5:c7:2a:6b:38:05:11:a1:4d:a8:d2:
         fc:f7:e0:e1:1c:6c:e5:4e:06:5e:e2:2a:33:3f:ff:71:66:ac:
         75:39:c4:59:e5:0a:b4:69:de:44:fa:dd:0b:b0:73:d6:8f:ae:
         16:be:bb:38:f9:bd:da:d3:b6:98:72:1d:ac:3b:ef:b1:c9:2b:
         e4:63:7f:6b:36:ea:a0:1f:e5:13:02:93:92:57:fa:a5:2a:9b:
         43:1b:08:13:f9:0d:d6:ce:75:98:3c:e9:82:9c:c8:08:a7:f6:
         62:6f:d1:f1:6c:9c:9c:0c:3b:d0:bb:e3:e5:d1:6e:38:af:94:
         17:6d:71:5a:82:7c:5b:54:4e:02:7b:8e:f9:90:36:35:22:27:
         ce:4d:a8:e8:dc:ca:be:45:b3:84:3f:18:98:ef:43:78:b9:3b:
         e8:68:a9:72:c3:26:93:51:07:d3:17:55:16:7b:d3:a4:70:48:
         e7:56:ca:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----