Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/b94e6d52784387340da226af2fc1b709dc35b6ed.roa
File:                     b94e6d52784387340da226af2fc1b709dc35b6ed.roa (raw, json)
Hash identifier:          36EnDkIgiRDNjEKjja3PpwhMOucv0LOFvHZLZhODYxo=
Subject key identifier:   17:82:9C:97:09:DE:A4:59:CA:25:33:8B:D9:9D:1F:F2:B3:61:1F:CA
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       0D161A
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/b94e6d52784387340da226af2fc1b709dc35b6ed.roa
Signing time:             Wed 24 Mar 2021 14:29:20 +0000
ROA not before:           Wed 24 Mar 2021 14:29:18 +0000
ROA not after:            Tue 24 Mar 2026 14:29:18 +0000
asID:                     61552
IP address blocks:        138.204.254.0/24 maxlen: 24
                          2801:168::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 857626 (0xd161a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Mar 24 14:29:18 2021 GMT
            Not After : Mar 24 14:29:18 2026 GMT
        Subject: CN=b94e6d52784387340da226af2fc1b709dc35b6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:9a:1f:87:2b:ae:e5:32:e8:64:f9:a9:85:
                    04:69:4c:4e:ba:03:b6:41:56:fa:3f:ad:80:a3:4e:
                    3e:4f:32:be:18:05:96:00:87:1e:bc:df:93:fc:8f:
                    6e:c9:d4:a0:f5:7b:fd:19:b2:d7:f9:61:e1:2d:a7:
                    40:05:13:a3:74:06:07:b6:7d:83:49:a3:c4:5b:dc:
                    08:24:6b:ee:19:2e:26:e0:ad:8e:03:77:7c:1a:a2:
                    a4:84:dd:f8:72:9b:b4:de:4e:24:52:55:07:a0:7d:
                    6c:4c:05:60:b0:1a:be:89:42:a3:8d:41:b1:00:c0:
                    b1:ed:61:2a:8e:51:d5:37:88:e1:ae:35:70:84:df:
                    9b:7f:a8:bd:8e:c0:28:42:47:a3:25:1f:dc:31:1f:
                    a6:c7:27:5f:b2:de:b9:8a:9a:b8:d5:9b:ae:42:bb:
                    a6:c5:5c:23:2c:e4:30:02:42:d6:39:1e:2b:73:09:
                    3c:0e:a6:55:dd:cd:cb:1c:0b:1b:fa:8a:56:7e:51:
                    fb:f8:56:1e:91:c8:dd:03:7e:6b:46:60:05:36:fb:
                    2a:e2:28:5e:37:f5:bd:e8:b1:b4:89:ed:55:2d:45:
                    a4:9d:15:1b:9a:ed:96:11:e6:40:99:30:6d:ea:43:
                    49:aa:bf:1f:14:4f:73:92:cf:e3:e8:0b:48:94:f8:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:82:9C:97:09:DE:A4:59:CA:25:33:8B:D9:9D:1F:F2:B3:61:1F:CA
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/b94e6d52784387340da226af2fc1b709dc35b6ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.254.0/24
                IPv6:
                  2801:168::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:8b:eb:79:35:f4:d3:ef:c6:75:1a:c5:b0:6f:1b:c7:84:a4:
         6b:c5:9e:0a:c2:03:9a:7e:11:f7:51:99:02:85:01:e6:f2:1a:
         cc:ec:69:05:57:7d:6d:6b:93:88:c9:c9:37:6f:9e:8a:2b:f2:
         19:6f:97:20:18:99:c8:c9:ae:17:c6:15:12:17:20:da:b3:a7:
         ec:70:6a:16:a0:76:3a:19:35:b6:f5:4c:7d:1b:0c:9e:84:3e:
         81:6f:05:e1:ab:0b:c0:44:11:ef:d0:ae:72:62:7f:ea:66:8e:
         e0:0a:9c:34:0c:43:af:f2:d6:ab:8c:c5:80:ac:36:91:6f:02:
         ac:3b:19:f8:04:d5:aa:a1:51:a5:8c:7e:4f:3b:ec:a8:a8:91:
         a1:66:01:3a:5c:7c:3e:b5:60:9f:62:c1:57:b6:7b:7e:d5:9f:
         ec:92:eb:78:a0:60:ae:f9:88:3e:b1:86:31:7c:d2:81:e0:79:
         ec:88:aa:e3:bd:9b:94:08:a4:2d:d9:0b:c5:12:dd:dd:98:d6:
         96:97:58:34:ba:a3:34:7d:12:ac:55:5a:d5:44:97:af:8d:29:
         57:29:92:80:b5:2b:66:7b:8f:aa:b6:1c:48:64:0e:bd:f5:75:
         bd:2c:60:af:d4:77:09:ec:9b:5a:f7:f3:58:2b:5f:af:9f:28:
         bc:3e:eb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----