Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/798722a3-fa68-43d2-94be-a999f4aaa7ae/78e397988cb5c1f9257b4c340e198307c70bbfd8.roa
File:                     78e397988cb5c1f9257b4c340e198307c70bbfd8.roa (raw, json)
Hash identifier:          uLuVL61TDLxZhKY7sF9SS/PKvCgNKL7F/8M0UWBi2vc=
Subject key identifier:   D3:B8:ED:D0:67:F3:6A:5D:AD:44:63:10:70:CB:E4:60:42:01:40:EA
Certificate issuer:       /CN=dc219a0c8565d978e678cda1ed42599771df9ec0
Certificate serial:       221B2A
Authority key identifier: 3F:0E:42:0E:C0:31:5E:D4:7C:EC:D0:8A:96:48:26:63:5E:B2:EA:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc219a0c8565d978e678cda1ed42599771df9ec0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/798722a3-fa68-43d2-94be-a999f4aaa7ae/78e397988cb5c1f9257b4c340e198307c70bbfd8.roa
Signing time:             Thu 20 Jul 2023 13:46:24 +0000
ROA not before:           Wed 19 Jul 2023 13:46:24 +0000
ROA not after:            Sun 20 Jul 2025 13:46:24 +0000
asID:                     263806
IP address blocks:        138.185.64.0/22 maxlen: 24
                          2803:6240::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2235178 (0x221b2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc219a0c8565d978e678cda1ed42599771df9ec0
        Validity
            Not Before: Jul 19 13:46:24 2023 GMT
            Not After : Jul 20 13:46:24 2025 GMT
        Subject: CN=78e397988cb5c1f9257b4c340e198307c70bbfd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:f7:b0:33:3b:a9:71:c9:4f:02:99:f6:8d:
                    40:aa:58:bc:68:73:c6:69:1c:d4:e8:61:01:e3:12:
                    f5:70:9e:d5:0d:52:8a:52:3f:21:b3:25:42:be:2e:
                    48:ad:63:80:9e:64:dd:7e:ae:cf:a3:4e:14:29:47:
                    b0:32:15:93:f5:16:01:cc:49:02:72:f2:22:78:a2:
                    bb:fd:7e:83:37:44:49:c1:f2:eb:5b:3e:1a:7b:66:
                    3f:dd:08:f6:cc:50:81:c1:46:c6:9b:8a:19:6f:67:
                    de:aa:66:d1:21:f3:70:de:71:fd:37:2e:b5:ef:4e:
                    86:1d:11:5c:c8:f1:43:5a:58:04:e7:1d:de:4b:02:
                    87:4b:08:3d:97:15:82:5a:5b:14:1b:d8:dc:b3:ef:
                    cb:e1:e1:44:b4:7b:3e:f5:48:56:f4:65:de:0f:69:
                    6b:9a:fb:f8:61:cb:b0:90:47:64:9b:cd:75:0f:5f:
                    b9:9c:08:22:13:ee:5a:6c:6b:a4:ec:81:d2:62:e3:
                    77:78:9d:67:f1:b0:2e:45:be:2c:a6:c4:84:4e:7d:
                    e5:67:9b:48:9b:bc:fa:6b:5e:b6:c8:61:88:a7:35:
                    b0:d6:ff:b2:63:2c:4c:2a:78:0f:ad:b8:5a:f4:52:
                    a4:13:b9:4e:7d:7c:78:07:ed:f8:f6:6e:a4:19:c3:
                    8b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B8:ED:D0:67:F3:6A:5D:AD:44:63:10:70:CB:E4:60:42:01:40:EA
            X509v3 Authority Key Identifier:
                keyid:3F:0E:42:0E:C0:31:5E:D4:7C:EC:D0:8A:96:48:26:63:5E:B2:EA:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc219a0c8565d978e678cda1ed42599771df9ec0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/798722a3-fa68-43d2-94be-a999f4aaa7ae/78e397988cb5c1f9257b4c340e198307c70bbfd8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/798722a3-fa68-43d2-94be-a999f4aaa7ae/dc219a0c8565d978e678cda1ed42599771df9ec0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.64.0/22
                IPv6:
                  2803:6240::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:f4:ef:b3:10:7e:fc:d0:ca:fb:9b:ef:0b:11:ba:a2:a7:55:
         5f:9f:ed:04:be:00:9f:3e:17:37:e6:d1:16:f8:47:57:b9:83:
         1a:cb:6d:e4:94:9c:f7:b9:ef:ad:f4:ea:7f:f7:22:76:13:e8:
         aa:97:b9:ec:cf:f8:20:26:00:9b:3f:ba:2a:e8:ce:9e:d8:26:
         28:d4:a4:79:14:e5:d1:cd:79:ca:74:3c:77:21:d9:4d:38:f6:
         3a:96:98:0e:45:e1:27:21:57:13:7d:6c:4e:f3:25:a3:21:66:
         f7:be:10:09:f4:c4:cc:20:e8:c4:a8:5a:9b:b1:11:e3:c0:45:
         5b:ff:61:52:53:56:0e:70:a3:af:c8:1e:47:45:39:79:6b:b8:
         fb:22:02:ea:1b:43:b9:c2:8a:30:92:78:a3:90:1c:b2:1d:fc:
         f8:d7:dc:f0:47:89:59:5d:cf:1b:d6:68:a7:f5:94:33:06:b6:
         0c:1b:92:d9:60:7c:a1:35:6b:ab:8f:b5:9e:d8:8f:06:a8:da:
         4e:ba:62:dd:bb:44:50:6e:7d:49:74:5b:44:4b:b2:99:ba:8d:
         5b:8e:f3:70:d6:2b:62:a6:f9:f0:c1:1b:11:40:09:2a:cc:96:
         04:c6:a7:e5:df:aa:1a:b3:bc:31:c4:69:1e:a2:4b:26:a6:bf:
         2e:98:bb:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----