Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/6d1b31adec6bfb598586649ac4f90d6a3e4cff1b.roa
File:                     6d1b31adec6bfb598586649ac4f90d6a3e4cff1b.roa (raw, json)
Hash identifier:          TVyd4Wlepx3YbdSyOA7haziT/CZZB/kj4IbynX84shE=
Subject key identifier:   3A:85:BD:10:37:13:22:E7:C7:D1:E8:F1:3E:16:84:65:DD:28:13:85
Certificate issuer:       /CN=04e65d9cfa04d747b88ea28fd9ad978e7c768fab
Certificate serial:       1B5985
Authority key identifier: 03:D5:69:B8:56:66:AB:3E:A1:BF:73:C7:D1:3F:4D:59:75:88:15:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/6d1b31adec6bfb598586649ac4f90d6a3e4cff1b.roa
Signing time:             Mon 31 Oct 2022 20:23:50 +0000
ROA not before:           Tue 23 Mar 2021 14:45:27 +0000
ROA not after:            Tue 24 Mar 2026 14:45:27 +0000
asID:                     61497
IP address blocks:        138.99.136.0/22 maxlen: 24
                          2803:d040::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792389 (0x1b5985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04e65d9cfa04d747b88ea28fd9ad978e7c768fab
        Validity
            Not Before: Mar 23 14:45:27 2021 GMT
            Not After : Mar 24 14:45:27 2026 GMT
        Subject: CN=6d1b31adec6bfb598586649ac4f90d6a3e4cff1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c3:26:d8:b7:61:8c:15:cc:b5:ee:6e:72:4e:
                    e9:1d:24:ba:86:d1:aa:bb:c5:04:dd:f0:cb:28:6c:
                    64:6c:98:be:57:68:57:52:fd:57:fb:fe:62:79:59:
                    e6:47:83:8b:06:2d:02:b8:c0:78:46:7c:05:54:98:
                    46:5c:2d:93:d8:77:8c:15:a6:13:da:47:6e:24:c2:
                    bd:a2:15:c0:9e:ee:09:8c:7c:7a:76:74:af:f5:2e:
                    a8:ed:f3:79:a3:2c:6d:e7:32:26:5d:25:e6:9e:d7:
                    5e:a6:57:f1:dc:c4:82:dd:c0:65:2a:4c:33:ff:2c:
                    09:76:49:f3:68:84:da:27:c3:42:bb:93:23:7d:e8:
                    a3:d7:e0:5f:89:9c:5d:92:f4:65:d8:41:b2:4a:8f:
                    e9:c7:2c:f9:8c:b4:af:3e:9a:98:13:75:bd:0e:91:
                    70:1e:7e:d0:67:50:50:dd:20:5d:2d:7e:9b:ef:a0:
                    ff:2b:6e:cf:e9:97:64:01:1e:c9:d5:41:03:ab:c5:
                    72:27:e0:d5:c9:cd:a1:fe:16:e2:95:02:02:ec:68:
                    4b:cf:ee:0a:34:51:d4:bf:e3:db:0b:b7:74:d6:65:
                    87:9b:d2:fb:8c:14:b8:f6:da:b0:b5:e5:d7:36:50:
                    01:a0:2c:e4:62:c9:91:c3:fe:6a:0f:84:f4:2c:24:
                    a5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:85:BD:10:37:13:22:E7:C7:D1:E8:F1:3E:16:84:65:DD:28:13:85
            X509v3 Authority Key Identifier:
                keyid:03:D5:69:B8:56:66:AB:3E:A1:BF:73:C7:D1:3F:4D:59:75:88:15:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/6d1b31adec6bfb598586649ac4f90d6a3e4cff1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/929203c6-cbb1-4894-b2a8-bed5449864ea/04e65d9cfa04d747b88ea28fd9ad978e7c768fab.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.136.0/22
                IPv6:
                  2803:d040::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:02:3d:b0:bd:0d:f2:93:fa:fd:cf:70:a4:9b:31:42:1a:ae:
         37:bc:67:15:b3:52:61:69:0d:62:db:23:8b:94:a8:b0:5b:98:
         29:01:0a:12:11:28:11:6a:b9:1c:63:c2:f9:25:82:28:14:59:
         f2:73:6e:04:49:a9:e0:15:01:fa:fb:e0:d5:13:46:b6:8e:66:
         ac:3d:3c:99:7a:2f:7c:e8:b2:52:52:93:8e:01:da:f5:4b:a0:
         cf:02:1f:b3:7b:72:22:8d:89:38:7a:fe:1d:fe:57:d6:f3:83:
         48:e3:c1:a5:00:ef:14:87:be:e0:b8:b5:f9:46:c9:43:dc:27:
         d1:c7:33:fc:dd:f2:6f:20:31:a3:97:66:04:5b:b7:67:b4:20:
         2d:39:5f:f2:ca:81:a0:2b:55:45:98:84:f4:d3:ce:e5:a5:2f:
         33:7d:15:1a:e9:a6:56:91:4e:a2:35:f3:95:fc:6e:21:67:9d:
         d2:1f:63:90:9b:af:79:77:bc:e3:1d:c1:2b:b7:6b:d7:76:72:
         0e:c4:6e:f7:24:3d:f9:c5:5a:f2:a9:52:73:f3:01:ee:50:a7:
         2f:cd:98:90:89:4c:c0:3c:9a:6f:73:1f:de:a5:ac:f8:57:a7:
         f1:3c:85:55:c4:94:ba:c2:f6:11:2e:8c:41:a7:a4:57:c4:2a:
         5c:4e:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----