Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51d52832-f11a-4c90-83bf-7d61455f46fa/3969dd0963cc0fd646764f15c115388b62d09efa.roa
File:                     3969dd0963cc0fd646764f15c115388b62d09efa.roa (raw, json)
Hash identifier:          M+0JxLnfHNM65VuubdbD5S0ya3qxyr5qD6f/DRUJkQQ=
Subject key identifier:   D9:2E:34:1B:83:BE:34:29:ED:8E:BD:85:46:C7:E7:7F:DF:6E:00:19
Certificate issuer:       /CN=4cf8a18cf23d9f3cb165b43ba75a772fb0994019
Certificate serial:       03F8CC
Authority key identifier: 92:78:A5:8B:55:DD:86:4B:09:9F:B5:04:5E:F1:A1:AA:92:9C:3D:BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cf8a18cf23d9f3cb165b43ba75a772fb0994019.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51d52832-f11a-4c90-83bf-7d61455f46fa/3969dd0963cc0fd646764f15c115388b62d09efa.roa
Signing time:             Wed 24 Mar 2021 14:47:08 +0000
ROA not before:           Wed 24 Mar 2021 14:47:08 +0000
ROA not after:            Tue 24 Mar 2026 14:47:08 +0000
asID:                     270040
IP address blocks:        186.195.248.0/22 maxlen: 24
                          2803:35e0::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260300 (0x3f8cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf8a18cf23d9f3cb165b43ba75a772fb0994019
        Validity
            Not Before: Mar 24 14:47:08 2021 GMT
            Not After : Mar 24 14:47:08 2026 GMT
        Subject: CN=3969dd0963cc0fd646764f15c115388b62d09efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:93:3b:40:4a:ce:4f:46:83:a1:6d:13:d6:
                    2c:e8:7b:24:bc:55:83:7d:e3:c3:1d:d6:72:d9:0a:
                    34:1b:1c:74:02:61:2f:4e:aa:fe:86:06:a6:5f:60:
                    d1:d6:08:57:49:b0:13:98:d3:d6:94:6a:48:71:8d:
                    6b:80:cd:ed:6a:4f:82:73:cb:3f:c3:f2:a7:1f:6d:
                    df:f1:af:45:68:12:51:d2:0f:d8:82:b6:e8:71:d3:
                    59:38:75:c2:61:88:1b:08:a7:db:8c:95:cb:29:42:
                    f9:51:35:02:cd:b7:f8:1a:76:45:37:12:83:2b:2b:
                    00:08:df:fe:ee:76:48:82:4b:6c:08:46:6a:d3:d3:
                    df:6d:92:ae:fe:93:22:f6:92:bd:c1:bf:49:dd:14:
                    dd:33:c6:d9:a6:22:7a:ad:39:d2:a2:8e:31:89:db:
                    0b:57:25:d3:fd:39:60:59:13:f4:5c:cc:cf:e3:13:
                    77:7e:6c:32:25:bf:32:91:fb:6b:81:c1:20:29:d1:
                    8b:b1:b9:16:83:70:7c:d1:e7:f3:6b:26:0b:23:0f:
                    f9:5a:67:0b:62:55:bb:3a:f7:78:07:c3:63:f1:b4:
                    4d:2a:78:80:b4:6d:80:79:04:dd:2d:c5:8b:d0:b7:
                    7b:cf:a3:ed:c9:72:ad:65:51:69:c1:65:fb:09:a2:
                    68:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:2E:34:1B:83:BE:34:29:ED:8E:BD:85:46:C7:E7:7F:DF:6E:00:19
            X509v3 Authority Key Identifier:
                keyid:92:78:A5:8B:55:DD:86:4B:09:9F:B5:04:5E:F1:A1:AA:92:9C:3D:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4cf8a18cf23d9f3cb165b43ba75a772fb0994019.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51d52832-f11a-4c90-83bf-7d61455f46fa/3969dd0963cc0fd646764f15c115388b62d09efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51d52832-f11a-4c90-83bf-7d61455f46fa/4cf8a18cf23d9f3cb165b43ba75a772fb0994019.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.248.0/22
                IPv6:
                  2803:35e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:cb:8e:82:78:eb:44:5b:ab:80:e1:53:d1:01:c5:33:d7:
         21:8d:2e:0f:2b:59:40:ef:e5:a2:17:2c:22:9c:71:c1:a1:4d:
         e7:92:5e:6c:82:b6:db:1e:f6:8a:12:2a:1d:de:ce:a9:4b:a3:
         b6:95:80:3a:25:ad:73:9f:a2:60:53:a6:23:b6:b1:f2:91:2b:
         04:f2:4f:72:9e:f7:3c:4f:c1:b4:24:fd:66:6e:25:2f:de:21:
         97:11:92:c4:ff:7a:45:ae:db:be:4f:58:70:50:b4:d1:79:4c:
         50:a2:ae:ec:55:55:45:56:49:aa:d5:43:6b:8c:7d:51:dc:67:
         7c:a3:63:b2:80:aa:ce:55:3b:97:b1:5a:cb:9c:f4:1d:c7:a8:
         f7:08:ab:38:a8:60:42:87:f4:a5:ca:9b:db:dd:67:0c:b8:0e:
         81:21:e0:ec:f0:76:ff:f1:19:50:85:04:42:c5:bf:8d:5f:e4:
         7b:73:37:92:27:8a:89:39:e4:5f:65:06:e5:be:a8:96:25:c9:
         40:ba:a4:28:25:4c:5a:4d:84:c8:10:3e:c5:ce:d8:74:33:16:
         06:98:40:eb:2b:48:ec:d7:cf:9d:48:4b:3b:0c:c6:7d:7b:6a:
         23:9b:e1:00:8f:40:80:8e:03:63:40:43:60:1d:1f:ff:62:9e:
         52:cc:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----