Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/31b09c1863202dd0ff577787eebcc33bb3508c72.roa
File:                     31b09c1863202dd0ff577787eebcc33bb3508c72.roa (raw, json)
Hash identifier:          I4KtaDtdUgGph+3eysju9Wem4/WA07u7eUzPWSVB+C8=
Subject key identifier:   DE:7E:A0:CA:F1:5A:DE:0E:78:F4:02:08:1C:8D:09:5C:63:A9:D5:A7
Certificate issuer:       /CN=fc196811ad94bf06a04dbd9b9e1659b5f0e56908
Certificate serial:       0F6CD1
Authority key identifier: 4B:13:A2:2E:F7:E5:86:9E:EF:DA:DE:14:B5:1A:40:55:D2:DC:DF:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/31b09c1863202dd0ff577787eebcc33bb3508c72.roa
Signing time:             Wed 09 Jun 2021 18:00:29 +0000
ROA not before:           Wed 09 Jun 2021 03:00:00 +0000
ROA not after:            Fri 09 Jun 2023 03:00:00 +0000
asID:                     267817
IP address blocks:        138.117.8.0/22 maxlen: 24
                          2803:7040::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1010897 (0xf6cd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc196811ad94bf06a04dbd9b9e1659b5f0e56908
        Validity
            Not Before: Jun  9 03:00:00 2021 GMT
            Not After : Jun  9 03:00:00 2023 GMT
        Subject: CN=31b09c1863202dd0ff577787eebcc33bb3508c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:6a:04:fc:09:e2:78:bd:85:96:28:e8:d1:
                    a5:36:b5:98:81:7a:fe:b9:88:a5:06:81:96:25:d7:
                    26:35:34:5b:23:88:a7:6d:d0:4c:5f:15:be:66:8e:
                    89:c6:11:de:b2:cd:78:bd:e4:84:9c:18:25:33:2e:
                    63:29:6f:f9:19:1d:bf:b5:c7:aa:2d:a0:5c:b7:6d:
                    64:da:08:10:26:f2:20:a3:52:a5:4e:93:76:03:97:
                    ff:9e:b7:6a:01:4d:5c:97:8b:d4:a9:ae:f4:51:09:
                    28:64:d4:bc:28:9f:08:32:b3:13:75:c4:05:c9:e6:
                    2c:54:50:bf:76:f8:1b:08:76:33:da:2d:11:4d:48:
                    5f:af:85:49:b1:8b:e6:9a:74:bb:be:75:dd:85:fb:
                    ea:94:63:9b:03:41:2f:7d:7e:6c:fc:0e:a4:c8:87:
                    a2:ae:47:34:6c:85:b8:42:64:03:a8:ea:84:a2:81:
                    73:4d:47:68:98:d4:46:d6:e1:6f:d1:7d:c0:90:b8:
                    bb:05:09:93:69:f8:12:ae:db:94:d8:97:cd:46:63:
                    ad:49:f6:9a:d9:60:53:cb:f3:49:f2:a8:9d:43:6d:
                    f0:e2:df:5e:83:03:86:b8:f5:f0:cb:72:8d:8b:8a:
                    f2:52:57:38:82:1b:0a:31:a9:84:11:8f:4d:f5:5a:
                    0b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:7E:A0:CA:F1:5A:DE:0E:78:F4:02:08:1C:8D:09:5C:63:A9:D5:A7
            X509v3 Authority Key Identifier:
                keyid:4B:13:A2:2E:F7:E5:86:9E:EF:DA:DE:14:B5:1A:40:55:D2:DC:DF:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/31b09c1863202dd0ff577787eebcc33bb3508c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.8.0/22
                IPv6:
                  2803:7040::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:53:61:18:27:95:14:c1:4e:1a:a3:a8:fc:f7:12:eb:fd:17:
         d9:12:71:e9:c0:4a:ec:df:3e:4b:82:f1:6d:f6:b2:8d:39:08:
         69:c6:b4:5d:4a:0b:bc:ef:da:9f:58:75:05:70:a0:e2:2b:96:
         c7:00:78:a7:f3:13:04:ac:68:e0:0b:08:d7:78:0c:91:5e:66:
         f9:50:54:d2:11:5a:36:33:46:80:d1:23:60:9c:76:27:5d:6b:
         10:f2:9d:68:35:50:32:30:0c:a6:49:ce:1b:ab:70:c4:92:92:
         d1:ef:da:d4:8f:2a:17:54:e2:65:d7:1b:21:f8:2a:db:16:0e:
         e2:24:b4:a8:26:3b:67:b7:da:8f:99:92:8f:d8:00:8d:1f:9d:
         30:e4:f9:af:e6:06:05:e1:7b:4b:b5:44:6c:97:74:3a:fe:b8:
         91:c5:13:b4:90:9e:ae:89:b2:79:15:8e:fc:1e:19:10:e3:cb:
         dd:ee:29:72:52:b2:04:ac:65:b2:88:3f:c1:70:ea:51:a7:0f:
         51:dd:ae:62:11:58:ba:c1:0e:1c:87:f2:6c:b9:b6:e4:8b:3b:
         06:c6:da:79:6e:b1:ad:fd:28:4c:ee:28:80:bb:91:79:d8:a0:
         b3:7d:73:83:d2:e5:ba:e1:ef:16:b8:87:85:4c:7f:73:ec:a1:
         43:c4:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----