Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/bebb8577874dfad9f7f1d85adf19fa3f27abf0c9.roa
File:                     bebb8577874dfad9f7f1d85adf19fa3f27abf0c9.roa (raw, json)
Hash identifier:          lb/IE+DxNGUBu08uUQmbiMsIf80Uwgzui+Z/nSA2nPE=
Subject key identifier:   57:68:3E:DB:32:5C:61:FA:D3:78:90:F2:F7:1A:EC:FA:4E:7B:28:8B
Certificate issuer:       /CN=1493cbe50e45cae3fefc4b38bac904681585a59d
Certificate serial:       0D7E8D
Authority key identifier: 21:A9:AE:D9:78:B9:68:A2:B2:86:33:C7:61:06:B8:0B:68:0D:34:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1493cbe50e45cae3fefc4b38bac904681585a59d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/bebb8577874dfad9f7f1d85adf19fa3f27abf0c9.roa
Signing time:             Wed 24 Mar 2021 14:28:37 +0000
ROA not before:           Wed 24 Mar 2021 14:28:37 +0000
ROA not after:            Tue 24 Mar 2026 14:28:37 +0000
asID:                     264607
IP address blocks:        138.255.88.0/22 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884365 (0xd7e8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1493cbe50e45cae3fefc4b38bac904681585a59d
        Validity
            Not Before: Mar 24 14:28:37 2021 GMT
            Not After : Mar 24 14:28:37 2026 GMT
        Subject: CN=bebb8577874dfad9f7f1d85adf19fa3f27abf0c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:10:5a:74:25:3e:7c:04:40:7f:f0:23:f2:
                    59:96:ab:da:74:3b:49:9f:94:d1:1d:15:59:47:b2:
                    c5:25:2d:95:ad:f2:2b:c3:f6:10:04:20:60:a8:18:
                    d6:63:88:d4:5c:fe:95:46:65:c9:f7:0f:90:d3:59:
                    d5:13:42:ba:43:a5:84:5b:c1:83:ad:ea:cf:58:f6:
                    a1:e0:8b:bb:bd:87:a3:1d:f7:88:a9:30:71:62:3c:
                    e0:d6:a1:0e:58:c4:ab:32:12:d6:02:bd:2d:61:76:
                    32:ba:b6:43:b9:c7:b7:94:05:f3:27:ce:ac:60:ef:
                    a8:65:1e:bd:d1:ee:9e:59:13:87:66:c9:8c:3e:ac:
                    6f:72:4c:e8:08:16:0c:5a:88:09:c2:7e:b0:13:11:
                    de:40:f4:d3:bb:82:61:a4:62:57:c4:aa:db:c5:8c:
                    99:e5:a2:de:a6:21:e6:82:6b:80:33:bc:4b:9a:65:
                    07:50:0f:55:17:3b:7c:6a:b3:a2:b7:36:38:69:ba:
                    7c:36:c7:d9:b5:8e:b3:38:e5:aa:14:d4:bf:a1:e6:
                    dc:bd:85:df:76:92:05:3e:27:87:82:8b:1f:62:48:
                    98:93:9a:a8:12:41:c8:8a:9f:8b:b3:d4:42:22:79:
                    5d:7c:50:cf:00:3e:bc:96:36:ee:c4:c9:fc:b0:cb:
                    53:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:68:3E:DB:32:5C:61:FA:D3:78:90:F2:F7:1A:EC:FA:4E:7B:28:8B
            X509v3 Authority Key Identifier:
                keyid:21:A9:AE:D9:78:B9:68:A2:B2:86:33:C7:61:06:B8:0B:68:0D:34:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1493cbe50e45cae3fefc4b38bac904681585a59d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/bebb8577874dfad9f7f1d85adf19fa3f27abf0c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e154d44-bee5-41e0-b4aa-f6ceeeb24ada/1493cbe50e45cae3fefc4b38bac904681585a59d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:a7:db:0a:70:3e:6b:55:0c:b5:8f:41:a2:da:60:67:7f:83:
         2f:7c:17:38:e7:b9:c7:d5:09:d6:ac:64:98:32:9e:7a:27:6b:
         0d:3a:38:43:85:37:5c:30:49:42:31:b9:3b:f8:a6:f0:f8:5c:
         4d:0b:9c:71:bc:08:9b:e4:18:98:f0:77:e8:b2:98:32:1b:2b:
         f2:a5:5c:be:88:88:23:42:ea:ed:ec:31:75:a7:7b:c4:f1:c8:
         7f:27:ba:18:dc:ab:8d:4d:1a:1f:50:3e:ba:1d:c2:b1:5d:c1:
         60:51:ad:b5:95:48:6e:aa:c2:8d:a8:02:1e:f2:63:4f:b5:01:
         3d:fe:f5:d8:86:e4:2d:25:41:aa:94:be:a5:bf:86:58:8e:e9:
         66:41:7f:b8:f9:d1:f5:63:94:41:57:de:e0:e3:b5:00:d6:97:
         9f:97:dd:30:56:5f:99:d4:65:9d:bc:1f:c0:46:22:ed:d5:58:
         1f:37:60:41:4f:96:25:58:ce:c4:2e:ae:4b:b7:5d:92:7b:fd:
         ae:25:41:c4:97:08:db:e6:88:b8:5c:ef:1e:b9:09:77:2d:c9:
         54:6a:2f:c9:1f:a6:54:0b:90:85:5a:7b:26:56:a5:f6:fd:3f:
         1a:b1:7d:c4:1b:ab:c0:7e:3e:e6:38:01:25:08:c8:c5:b4:b5:
         eb:55:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----