Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/8a4e59396ac0f5a42a82c2a75a33261f6a344e52.roa
File:                     8a4e59396ac0f5a42a82c2a75a33261f6a344e52.roa (raw, json)
Hash identifier:          FN5Q+Ld2Hs/guUR+3kPjpMK582Zt/qviDs3x8X54V04=
Subject key identifier:   06:A7:30:DA:53:60:2C:44:57:00:00:FA:B0:F3:6D:7A:27:60:5C:11
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       0D0E90
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/8a4e59396ac0f5a42a82c2a75a33261f6a344e52.roa
Signing time:             Wed 24 Mar 2021 14:29:20 +0000
ROA not before:           Wed 24 Mar 2021 14:29:18 +0000
ROA not after:            Tue 24 Mar 2026 14:29:18 +0000
asID:                     61520
IP address blocks:        138.204.249.0/24 maxlen: 24
                          2001:13c7:601b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 855696 (0xd0e90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Mar 24 14:29:18 2021 GMT
            Not After : Mar 24 14:29:18 2026 GMT
        Subject: CN=8a4e59396ac0f5a42a82c2a75a33261f6a344e52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4c:d2:91:d5:66:04:3b:f6:9b:3f:65:6e:cd:
                    31:6d:d4:04:c1:ad:c3:0c:b4:b7:5c:1d:16:55:2c:
                    c3:71:6d:07:ea:42:16:be:ef:56:3e:05:bb:f3:79:
                    92:24:dc:4f:e5:cc:a2:e6:1c:f0:97:0c:cc:a0:b9:
                    a9:e3:77:fd:8b:0f:13:1d:31:14:d3:b9:6e:1a:2d:
                    e3:c4:21:82:16:24:98:16:e8:c5:e9:41:82:ae:6b:
                    bd:0d:14:41:1c:68:bf:62:0f:d8:9d:a5:b2:86:18:
                    33:82:6a:dd:c9:a6:d7:f4:be:5a:ec:33:96:e0:cb:
                    f0:8e:40:a7:6b:8d:cf:66:2e:b7:41:e0:41:39:05:
                    b6:48:ea:ce:89:3e:7c:76:19:0b:d9:44:e1:64:d5:
                    be:3f:cd:f1:79:ec:42:c6:20:b4:cf:51:4e:a5:c9:
                    97:d8:b3:3b:a8:27:f8:43:f9:f9:aa:ff:07:85:9d:
                    0b:3e:aa:52:7f:fd:32:e5:d0:5e:bc:ef:fb:87:62:
                    64:fe:be:2c:e5:7a:12:16:68:9d:6a:cf:6c:9b:c8:
                    30:d1:8b:62:a8:59:1a:01:34:b3:02:6b:31:04:5c:
                    61:1a:fc:43:74:4f:1a:20:28:5e:9a:5e:9b:1d:f2:
                    61:65:c9:4f:4a:8f:33:df:5b:b9:ad:ca:9d:c5:dd:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A7:30:DA:53:60:2C:44:57:00:00:FA:B0:F3:6D:7A:27:60:5C:11
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/8a4e59396ac0f5a42a82c2a75a33261f6a344e52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.249.0/24
                IPv6:
                  2001:13c7:601b::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:43:28:13:13:17:cb:ce:b0:26:c9:c2:e9:f8:df:27:57:24:
         54:3c:33:91:af:4a:a9:c7:7b:7d:3b:0c:b4:4a:72:43:8f:17:
         9b:e8:25:bf:51:49:d0:4e:16:85:ac:3c:b2:be:73:7b:68:15:
         23:ca:dd:f9:b0:87:e0:69:55:f1:0f:e1:67:ac:69:3c:37:7d:
         64:d3:a1:27:44:4e:c2:9f:27:e0:f8:af:58:5e:29:22:cf:7e:
         f5:47:d6:83:a7:e0:d0:9c:a9:74:a6:97:32:e5:d6:37:42:76:
         f3:38:39:86:d3:00:2a:a2:3a:58:1b:af:20:fd:3f:e8:64:8c:
         30:af:99:ea:3f:c8:ae:e3:20:49:30:5c:dc:48:b4:3f:cf:9c:
         d5:32:a2:58:34:c9:4f:60:83:5c:24:d7:cd:4b:55:d9:c5:66:
         14:cc:e9:c9:1a:e7:aa:18:d8:ba:00:0d:63:62:2d:98:0d:cd:
         77:78:4e:34:6a:0b:90:79:2c:61:94:b5:a0:24:61:14:a7:d1:
         84:3a:a8:56:17:33:55:eb:09:12:b6:97:4d:e2:eb:ca:ac:d8:
         92:71:52:f3:ee:fa:03:f3:92:8b:9d:ff:d3:ce:7b:11:6b:c6:
         94:57:e5:76:d7:4b:12:24:13:3b:70:7c:38:d4:cc:92:fb:f5:
         65:8a:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----