Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/7be60ea7f6a6b69d49bcbc085c6d40633e8bab8f.roa
File:                     7be60ea7f6a6b69d49bcbc085c6d40633e8bab8f.roa (raw, json)
Hash identifier:          m9IZQZ/mdyp++Ujt6rc1oYXL+0kogdex+JOIguC8TOU=
Subject key identifier:   8F:84:E9:A4:A5:F0:13:6B:18:6C:E7:C8:0D:B9:E6:D2:08:F3:98:2B
Certificate issuer:       /CN=fc196811ad94bf06a04dbd9b9e1659b5f0e56908
Certificate serial:       0D85AF
Authority key identifier: 4B:13:A2:2E:F7:E5:86:9E:EF:DA:DE:14:B5:1A:40:55:D2:DC:DF:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/7be60ea7f6a6b69d49bcbc085c6d40633e8bab8f.roa
Signing time:             Wed 24 Mar 2021 14:32:08 +0000
ROA not before:           Wed 24 Mar 2021 14:32:08 +0000
ROA not after:            Tue 24 Mar 2026 14:32:08 +0000
asID:                     263754
IP address blocks:        138.117.8.0/22 maxlen: 24
                          2803:7040::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886191 (0xd85af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc196811ad94bf06a04dbd9b9e1659b5f0e56908
        Validity
            Not Before: Mar 24 14:32:08 2021 GMT
            Not After : Mar 24 14:32:08 2026 GMT
        Subject: CN=7be60ea7f6a6b69d49bcbc085c6d40633e8bab8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:15:74:d1:c1:d2:13:ee:67:7c:f9:22:b6:41:
                    87:90:36:20:b0:50:5d:02:f7:5a:ac:0d:ae:13:eb:
                    68:ef:19:3e:e4:e9:cd:84:e6:0e:5e:13:31:d4:3a:
                    68:96:a3:09:1c:1e:22:ab:02:28:fd:b8:dc:a8:40:
                    d4:f4:c8:c4:ef:60:79:9d:bd:6d:04:67:44:e3:d3:
                    9c:35:4f:30:45:26:42:28:a8:c4:07:6b:1f:d8:fd:
                    f2:17:72:64:da:a0:c5:98:68:b0:c9:55:cd:d5:1a:
                    49:0e:47:15:d7:d1:bf:5c:11:ea:c8:9f:8a:d0:29:
                    ff:d6:b3:12:bb:91:c8:58:69:a1:83:f5:dc:11:17:
                    79:40:9b:7a:79:c2:5c:db:fe:81:ca:b0:8a:30:57:
                    e8:5e:67:5c:23:c0:28:fa:73:3f:92:ac:ba:d2:c3:
                    72:d9:5e:a0:75:dc:03:0e:5c:ff:e7:62:16:f5:25:
                    1e:4e:33:27:64:b3:60:63:75:c7:09:0e:25:5e:0a:
                    92:da:ec:ba:64:97:ff:e4:08:12:0d:74:e7:71:4e:
                    64:23:42:28:a0:9a:79:9a:25:1b:cd:ba:4d:68:a0:
                    cc:d4:54:36:07:cb:1a:55:28:5e:86:8a:be:6e:e5:
                    90:8c:9d:c8:9d:5b:c5:7b:5b:31:0f:f0:f5:da:23:
                    97:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:84:E9:A4:A5:F0:13:6B:18:6C:E7:C8:0D:B9:E6:D2:08:F3:98:2B
            X509v3 Authority Key Identifier:
                keyid:4B:13:A2:2E:F7:E5:86:9E:EF:DA:DE:14:B5:1A:40:55:D2:DC:DF:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/7be60ea7f6a6b69d49bcbc085c6d40633e8bab8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.8.0/22
                IPv6:
                  2803:7040::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:d1:43:3d:99:7b:e8:4a:37:84:4a:19:e8:12:50:05:e8:96:
         58:99:ec:60:0d:5f:dd:3e:c3:24:a3:01:23:5d:e7:c3:2d:e0:
         3c:b0:4c:db:af:54:cb:24:f0:e7:e8:dc:d4:9e:50:62:36:da:
         35:b7:3c:ce:50:c3:95:89:15:7d:73:cf:e7:9c:8e:b0:64:0d:
         5d:76:61:bf:f3:c2:39:cd:ef:10:f3:ad:6c:ea:20:c7:7e:57:
         b8:ae:35:13:29:ec:71:dc:7a:39:56:10:b7:1d:67:ca:03:f2:
         0a:ae:76:59:35:13:d4:51:09:ea:1f:2b:3c:3b:2d:2c:27:80:
         a3:e5:77:b4:1a:af:2f:1e:96:29:e4:f0:eb:a8:49:74:93:84:
         ac:d5:5d:78:18:a5:85:c1:98:2b:0d:f2:36:0d:81:e7:4e:a4:
         29:c1:cd:2b:f1:00:54:a2:98:0a:85:0b:c5:7e:f2:6e:ce:5e:
         f6:8c:53:7d:69:3c:ed:b7:cd:70:db:4c:33:9c:96:1e:36:1a:
         22:2b:b1:52:3b:59:e7:85:ee:b4:ba:a5:ee:7c:4b:d0:89:ce:
         bd:fb:1b:55:8c:74:96:b5:b7:43:d5:28:b6:45:50:1d:18:8a:
         0c:27:28:c2:41:aa:04:97:bd:4c:ca:d4:8e:32:f6:0a:c4:ae:
         00:39:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----