Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/383d324c4736db2493c035fed2eecb4aac0e13e9.roa
File:                     383d324c4736db2493c035fed2eecb4aac0e13e9.roa (raw, json)
Hash identifier:          kNyQ7Od3L9tNWd1uNpdMOuX2vFk0LFHfWa/ZN2Ek0b0=
Subject key identifier:   D8:FE:01:73:80:46:1F:E9:F2:60:69:A7:C6:89:AD:AD:8D:DB:17:40
Certificate issuer:       /CN=81f8f997c47106c2eed6534190df56a42748b97a
Certificate serial:       0437
Authority key identifier: D6:A7:C0:AC:7A:3C:A2:42:BD:58:EC:0A:9A:4C:98:85:BE:9B:0B:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81f8f997c47106c2eed6534190df56a42748b97a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/383d324c4736db2493c035fed2eecb4aac0e13e9.roa
Signing time:             Tue 01 Nov 2022 21:16:11 +0000
ROA not before:           Sun 30 Oct 2022 21:06:45 +0000
ROA not after:            Fri 01 Nov 2024 21:06:45 +0000
asID:                     52035
IP address blocks:        148.222.240.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81f8f997c47106c2eed6534190df56a42748b97a
        Validity
            Not Before: Oct 30 21:06:45 2022 GMT
            Not After : Nov  1 21:06:45 2024 GMT
        Subject: CN=383d324c4736db2493c035fed2eecb4aac0e13e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:88:e1:18:13:da:48:7a:7e:99:a0:ae:20:
                    df:85:ea:9f:7a:97:60:b1:77:0e:ff:2a:e7:fb:b5:
                    f7:fc:0e:55:87:37:99:30:d0:0e:86:4b:a9:f1:b0:
                    ac:cc:11:c9:6c:43:5f:b7:98:b0:e0:e8:dc:4c:eb:
                    39:65:b8:d9:8f:bb:b2:bb:75:71:32:25:42:57:03:
                    13:7f:e1:9c:07:29:12:0d:fc:37:82:63:19:2b:64:
                    2f:e3:40:5c:bf:9b:9e:04:54:c1:b3:df:74:67:84:
                    8d:56:34:50:fa:fd:37:2a:5c:1a:f1:54:a8:cb:b9:
                    8a:06:85:9b:72:10:c0:d1:d7:ef:dd:75:53:d2:c1:
                    d0:3e:fe:b5:37:80:fc:38:e9:3b:cd:94:76:ae:63:
                    5a:ab:cc:84:4d:07:2c:c6:bb:ae:4a:49:b3:58:68:
                    ae:22:cc:f3:de:cc:6d:78:5e:70:cd:fd:a5:1b:bb:
                    51:89:18:26:6b:49:ca:cd:89:9c:31:5e:27:fe:f5:
                    eb:2e:0a:be:68:2a:0e:1c:5f:7a:42:36:0d:9f:c4:
                    a8:62:a4:64:2e:ee:f0:39:23:69:a6:6a:d1:eb:ea:
                    75:f3:16:fd:63:d6:f3:6d:16:fc:dd:76:4a:f1:bc:
                    2a:62:f0:ae:82:2a:a9:c6:89:16:04:66:98:36:e3:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FE:01:73:80:46:1F:E9:F2:60:69:A7:C6:89:AD:AD:8D:DB:17:40
            X509v3 Authority Key Identifier:
                keyid:D6:A7:C0:AC:7A:3C:A2:42:BD:58:EC:0A:9A:4C:98:85:BE:9B:0B:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81f8f997c47106c2eed6534190df56a42748b97a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/383d324c4736db2493c035fed2eecb4aac0e13e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/81f8f997c47106c2eed6534190df56a42748b97a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a2:80:c3:2a:bc:8a:e0:9d:12:c7:87:73:65:d1:fc:15:a4:18:
         6d:c8:bc:ba:52:49:a6:3b:8d:5f:9e:1d:c0:cc:7a:dd:37:6b:
         47:4a:d6:50:57:66:51:6d:70:56:36:95:c9:c6:ad:01:01:4a:
         42:9c:53:3a:08:e4:b0:d4:07:39:f1:e3:cb:ed:b1:3a:a0:ab:
         8b:42:97:a3:75:f1:7a:6f:32:2e:20:82:e7:a4:7d:3b:d6:a1:
         90:f8:82:e8:60:18:92:d5:cf:c4:7d:0c:22:cf:20:a9:d4:cd:
         af:43:3a:a4:6b:ee:ce:9b:30:f0:d8:ca:c1:c0:b0:e4:34:42:
         e7:50:67:89:ec:2d:86:3e:e5:ad:be:0d:2f:cd:f0:0b:7e:2f:
         30:30:21:4d:14:00:aa:d3:13:f9:cd:2d:a7:53:7a:21:8a:61:
         3c:9a:e0:1d:3c:3a:e3:11:41:d0:42:90:30:17:9f:51:4c:a0:
         0c:bf:21:83:97:e6:99:93:ed:0c:a8:79:0b:68:09:a3:a0:59:
         fc:e2:a8:72:f0:fd:4b:83:28:96:f1:30:9c:7e:90:f7:ef:8b:
         93:9b:b1:41:ca:38:7b:84:fc:6f:bc:0e:2c:73:19:40:62:44:
         cc:f1:df:c4:69:90:bd:33:bf:ac:87:88:19:00:62:83:d1:a9:
         e4:ef:57:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----