Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7017b3-3304-405e-9a04-89974b288d89/c919b3564c8e6f90981885ad32534b57bd4430ec.roa
File:                     c919b3564c8e6f90981885ad32534b57bd4430ec.roa (raw, json)
Hash identifier:          C986+SQnBqDDgnceEQrVjIozmAMSD6psbTO5uzS5aSA=
Subject key identifier:   90:5A:C7:AE:06:BD:B1:58:64:B5:6C:AF:0E:DC:ED:DB:A8:B7:EF:06
Certificate issuer:       /CN=994ac353c748a2f51e9444d8c85de8cb43085110
Certificate serial:       1659B8
Authority key identifier: 23:3B:A5:B4:FD:E8:7E:D5:1F:DB:9F:C7:5B:10:4A:05:95:02:0A:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/994ac353c748a2f51e9444d8c85de8cb43085110.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7017b3-3304-405e-9a04-89974b288d89/c919b3564c8e6f90981885ad32534b57bd4430ec.roa
Signing time:             Fri 11 Mar 2022 13:20:23 +0000
ROA not before:           Fri 11 Mar 2022 03:00:00 +0000
ROA not after:            Mon 11 Mar 2024 03:00:00 +0000
asID:                     263756
IP address blocks:        138.204.40.0/22 maxlen: 24
                          2803:ba40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1464760 (0x1659b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994ac353c748a2f51e9444d8c85de8cb43085110
        Validity
            Not Before: Mar 11 03:00:00 2022 GMT
            Not After : Mar 11 03:00:00 2024 GMT
        Subject: CN=c919b3564c8e6f90981885ad32534b57bd4430ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d0:db:b0:52:81:55:4f:8a:32:94:12:97:31:
                    03:91:ba:88:31:ce:31:d7:e0:48:ba:e6:99:cd:60:
                    c1:db:b4:cf:58:ce:a5:5a:1f:7d:b5:e4:ca:82:44:
                    33:79:2a:b7:93:25:ec:03:ab:22:f2:b7:96:e7:60:
                    31:f9:36:a5:6d:c8:34:aa:a2:17:a8:92:4f:b9:68:
                    7e:e2:b5:80:78:09:45:f7:7b:e2:0f:67:a7:64:db:
                    75:bf:53:8f:2b:72:56:ca:60:97:d8:3a:12:4c:10:
                    1a:bb:e6:cd:8d:f7:69:25:d4:15:be:45:a6:4b:83:
                    cb:ca:d4:b8:95:a6:6b:86:05:d0:f4:26:9a:e6:9c:
                    35:55:7c:e5:2a:65:41:f0:be:de:c7:c2:0b:ff:92:
                    90:c4:5c:2e:76:4b:ca:76:27:b7:65:de:7c:1c:71:
                    bd:3b:0f:dc:9c:dc:6f:78:d0:8c:46:70:82:32:79:
                    59:10:d9:51:a4:3c:e0:b4:4f:d3:2d:b3:ad:0d:6b:
                    5e:26:3c:39:ca:22:85:aa:60:7e:b8:7d:b9:b3:fb:
                    1c:89:29:c1:76:1a:52:40:54:a3:e0:67:bc:e8:5d:
                    c8:2b:49:f7:df:82:f5:33:b1:76:c6:e3:6a:78:98:
                    ad:f6:32:95:6c:9a:a2:aa:28:48:b8:49:99:89:a7:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5A:C7:AE:06:BD:B1:58:64:B5:6C:AF:0E:DC:ED:DB:A8:B7:EF:06
            X509v3 Authority Key Identifier:
                keyid:23:3B:A5:B4:FD:E8:7E:D5:1F:DB:9F:C7:5B:10:4A:05:95:02:0A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/994ac353c748a2f51e9444d8c85de8cb43085110.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7017b3-3304-405e-9a04-89974b288d89/c919b3564c8e6f90981885ad32534b57bd4430ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7017b3-3304-405e-9a04-89974b288d89/994ac353c748a2f51e9444d8c85de8cb43085110.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.40.0/22
                IPv6:
                  2803:ba40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:16:93:da:89:c1:b8:10:09:62:f6:ea:77:12:12:84:44:04:
         d7:49:53:4a:99:4b:07:6d:69:82:f5:07:4f:53:2d:17:88:62:
         52:bf:0b:ea:60:73:d6:5e:ae:ab:81:cd:80:ac:0f:94:e4:69:
         54:bb:66:e5:69:0e:8b:78:30:e6:e6:58:9e:ee:a1:d6:9d:92:
         14:7e:fa:01:e5:86:4b:1e:44:3f:98:67:c8:35:29:ed:20:de:
         25:e9:a6:59:bb:0f:71:b0:80:97:06:ee:61:7c:af:b7:5b:c5:
         17:2c:d8:9b:32:59:e0:fb:cb:05:40:01:e0:41:be:42:2b:e8:
         6c:22:86:a8:43:08:cf:c0:ea:83:97:58:3a:9f:f0:26:49:eb:
         52:55:02:af:a5:ec:68:5b:31:d1:05:8a:2a:b7:39:57:ed:18:
         35:fa:3b:79:b3:4e:fc:f0:c4:2b:ee:12:8c:5f:de:e3:15:e0:
         0f:56:c9:9d:6b:4c:8f:c5:d9:93:ba:66:0f:aa:69:b5:2b:71:
         78:2c:e9:1a:71:fe:7e:69:56:0a:79:17:c9:94:56:01:e6:14:
         12:b8:49:c9:27:65:ef:2a:c7:ee:a8:96:c9:ae:d7:24:6b:78:
         08:4e:34:2b:61:15:b7:2c:be:76:ac:34:20:5a:f8:57:96:ec:
         b9:2f:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----