Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/ea4e80719b1b952f3aee6bf25a927705d4b9f009.roa
File:                     ea4e80719b1b952f3aee6bf25a927705d4b9f009.roa (raw, json)
Hash identifier:          bZDc+4PrdEdV0lIT/K+dG11SAaSfy0Kwql/nwzjM8xw=
Subject key identifier:   EF:56:E4:F6:DD:BF:35:A8:72:A2:7B:0D:AE:5D:7E:6B:60:E7:D8:F5
Certificate issuer:       /CN=63c3a21c71007155e6b7b013a30357703347965c
Certificate serial:       0D4BB8
Authority key identifier: DC:74:08:38:C2:43:73:AD:EE:0B:26:F9:EB:63:A7:EF:25:80:96:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63c3a21c71007155e6b7b013a30357703347965c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/ea4e80719b1b952f3aee6bf25a927705d4b9f009.roa
Signing time:             Wed 24 Mar 2021 14:33:58 +0000
ROA not before:           Wed 24 Mar 2021 14:33:58 +0000
ROA not after:            Tue 24 Mar 2026 14:33:58 +0000
asID:                     52510
IP address blocks:        138.219.56.0/22 maxlen: 22
                          170.233.192.0/22 maxlen: 22
                          170.245.48.0/22 maxlen: 22
                          2803:5e40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871352 (0xd4bb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63c3a21c71007155e6b7b013a30357703347965c
        Validity
            Not Before: Mar 24 14:33:58 2021 GMT
            Not After : Mar 24 14:33:58 2026 GMT
        Subject: CN=ea4e80719b1b952f3aee6bf25a927705d4b9f009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:a4:5d:fa:da:ae:62:42:56:c0:e8:b3:21:
                    d5:c1:47:04:ae:c2:4e:b4:fe:c4:a3:76:dc:1d:cc:
                    ab:04:dd:e9:91:b1:e6:c2:36:62:07:c8:db:dc:d3:
                    1b:4f:d5:7d:12:cb:56:a3:d4:e7:d6:de:7a:6b:a5:
                    1f:7d:51:45:1a:65:c3:c6:b0:61:6e:b2:37:17:97:
                    0f:ef:3d:d8:6b:2d:6e:c9:22:19:1c:76:80:20:9a:
                    c2:ba:6d:3a:fe:29:45:e0:b2:02:d2:9a:73:41:48:
                    a6:11:0b:b2:53:53:be:5b:c4:36:52:3f:7c:39:de:
                    7c:23:87:79:33:98:01:88:58:67:3c:74:7b:5c:71:
                    b2:76:91:b8:75:29:36:01:a5:9c:e0:bf:7e:42:ed:
                    d8:65:6c:05:57:f0:bd:d9:be:1b:ca:a8:58:8e:78:
                    89:08:7e:df:9a:97:6c:1f:9a:de:bf:fa:1c:4e:13:
                    4d:e5:03:9f:67:7b:66:71:89:84:68:dd:bd:9b:f2:
                    1f:8f:d4:3e:50:51:33:0c:c8:83:5a:1d:a7:47:de:
                    6d:1a:52:bc:18:93:eb:37:6b:c5:5c:a2:a7:cf:2d:
                    63:cb:bb:70:ea:7c:0f:91:71:f0:47:93:82:73:8d:
                    98:99:45:c2:04:3f:fd:9b:50:f6:12:13:1f:33:c9:
                    99:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:56:E4:F6:DD:BF:35:A8:72:A2:7B:0D:AE:5D:7E:6B:60:E7:D8:F5
            X509v3 Authority Key Identifier:
                keyid:DC:74:08:38:C2:43:73:AD:EE:0B:26:F9:EB:63:A7:EF:25:80:96:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63c3a21c71007155e6b7b013a30357703347965c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/ea4e80719b1b952f3aee6bf25a927705d4b9f009.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562213f9-d802-4310-9fbf-22af0020569f/63c3a21c71007155e6b7b013a30357703347965c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.56.0/22
                  170.233.192.0/22
                  170.245.48.0/22
                IPv6:
                  2803:5e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:81:89:b9:62:10:7e:11:01:da:6e:14:78:c8:c3:8a:a7:e5:
         63:af:a3:83:9f:d4:59:33:18:2e:69:75:5c:b7:50:25:f2:4f:
         b2:94:5b:4e:0a:b6:29:7e:b8:73:49:d8:f6:49:9b:15:2e:44:
         f3:70:dc:2b:d9:de:d6:6a:a8:fc:58:41:c4:e3:a8:6b:66:c5:
         ae:ba:c3:96:39:32:39:a3:31:0b:52:98:6d:84:ad:59:19:5f:
         70:39:e2:ec:7b:ee:7a:31:ec:10:81:09:55:4a:78:2b:ae:4b:
         1b:88:5d:1f:cd:ef:8e:58:17:3b:80:06:bc:8e:c8:1f:10:87:
         36:a7:c8:eb:42:95:6a:77:3a:62:d4:76:95:44:da:b1:14:0d:
         ce:0d:5d:6c:56:cc:22:e6:77:1b:f4:50:0d:b4:61:2c:81:22:
         36:09:cd:ca:c9:ab:9b:d4:68:3d:83:2a:5f:b4:fe:1c:b5:77:
         fe:a3:aa:b9:31:f5:9c:6e:0a:b6:14:5a:0a:51:65:d0:29:8a:
         f4:91:6a:28:c1:b3:42:55:26:f9:b2:4c:e0:f4:da:99:f5:3d:
         37:a7:a6:8e:b5:1d:6e:42:23:4f:71:da:75:1c:c5:4e:69:c5:
         bc:c2:65:2a:c1:b9:25:79:c1:bf:12:ed:5f:ee:a1:73:2e:f7:
         0c:e7:3a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----