Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e1fe89c-e803-4e85-a9d1-1694dfdecc20/8243135fc42c1830878a21c8496df5a459032b91.roa
File:                     8243135fc42c1830878a21c8496df5a459032b91.roa (raw, json)
Hash identifier:          78pjF+bbaYlLc1sRdWyys69+q7kjpvfEzfih33mBe/I=
Subject key identifier:   A6:1F:14:91:81:AE:B0:DF:AF:FD:B9:1A:B9:FC:82:FD:6C:01:2E:5C
Certificate issuer:       /CN=e0933c5ad794214542a885a938d88045b384ab9a
Certificate serial:       12454F
Authority key identifier: 96:78:97:24:39:0C:C2:56:A0:F2:00:36:3C:BE:9C:FD:BD:27:B6:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0933c5ad794214542a885a938d88045b384ab9a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e1fe89c-e803-4e85-a9d1-1694dfdecc20/8243135fc42c1830878a21c8496df5a459032b91.roa
Signing time:             Wed 27 Oct 2021 13:41:13 +0000
ROA not before:           Wed 27 Oct 2021 03:00:00 +0000
ROA not after:            Tue 27 Oct 2026 03:00:00 +0000
asID:                     263800
IP address blocks:        138.97.200.0/22 maxlen: 24
                          2803:4040::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1197391 (0x12454f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0933c5ad794214542a885a938d88045b384ab9a
        Validity
            Not Before: Oct 27 03:00:00 2021 GMT
            Not After : Oct 27 03:00:00 2026 GMT
        Subject: CN=8243135fc42c1830878a21c8496df5a459032b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:67:1d:0b:fe:0f:b6:29:d5:fc:d3:d9:2f:2c:
                    1d:53:11:c9:d6:ac:79:25:b1:a5:6b:84:70:82:6c:
                    d2:06:96:d7:8c:0e:fd:59:d0:cd:ee:09:57:2c:5d:
                    0b:54:b3:86:ac:fd:95:d1:8c:2b:2e:c5:12:ab:99:
                    19:1f:3c:fa:28:c3:29:bd:1e:58:93:8f:53:4d:88:
                    36:e6:0f:ae:a5:36:60:48:fd:b7:2c:6c:04:ea:4a:
                    e3:27:a7:d5:cc:f8:54:d1:d7:65:3e:f6:16:57:a0:
                    60:71:fb:f2:0c:c5:e6:7c:fe:82:35:5c:39:93:94:
                    cb:63:e5:d1:1d:fe:a5:0f:9a:b9:ab:74:e0:ad:af:
                    e5:f1:a7:e6:b8:ab:6b:eb:6b:aa:de:9b:72:47:51:
                    97:bd:9f:5b:0a:f2:2b:a0:12:02:74:7c:91:4d:a5:
                    62:08:50:7c:b7:f0:e8:5f:85:2e:50:c9:05:05:c2:
                    6c:59:90:b2:37:08:84:3c:fe:fd:70:3a:ae:9c:42:
                    d8:10:58:4e:c7:d5:81:e6:98:cf:ac:d8:18:61:cf:
                    c8:91:2e:bc:01:04:6d:41:23:03:b7:0a:d0:37:da:
                    a9:24:0b:42:f2:f5:1c:5e:69:28:ff:bc:b7:be:ca:
                    1c:07:be:70:19:27:73:32:11:24:be:63:a1:62:df:
                    e2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1F:14:91:81:AE:B0:DF:AF:FD:B9:1A:B9:FC:82:FD:6C:01:2E:5C
            X509v3 Authority Key Identifier:
                keyid:96:78:97:24:39:0C:C2:56:A0:F2:00:36:3C:BE:9C:FD:BD:27:B6:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0933c5ad794214542a885a938d88045b384ab9a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e1fe89c-e803-4e85-a9d1-1694dfdecc20/8243135fc42c1830878a21c8496df5a459032b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e1fe89c-e803-4e85-a9d1-1694dfdecc20/e0933c5ad794214542a885a938d88045b384ab9a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.200.0/22
                IPv6:
                  2803:4040::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:ea:f2:38:ed:12:63:cc:52:fe:5c:25:c6:0e:51:59:12:9a:
         ed:a8:e2:7f:5e:73:58:62:b2:16:99:2d:2f:19:71:93:5b:fb:
         9c:98:63:61:9c:33:64:b3:e7:92:21:1f:f8:a4:38:bf:43:83:
         02:29:46:7f:80:9d:14:48:d0:52:a4:7c:4c:b0:64:af:27:ec:
         c5:1b:19:ec:b6:a4:4a:1b:55:ee:cc:cc:72:cf:84:7a:c8:8a:
         44:9f:32:eb:f5:3c:86:c9:07:b8:e1:da:12:d2:ba:65:7f:f9:
         c2:05:1b:ed:28:54:76:e8:42:a9:bf:60:38:2b:8b:da:d6:78:
         c5:f1:09:9c:c9:f1:72:f4:9e:ed:ab:5c:6d:02:fa:43:da:6e:
         84:8b:ff:f3:fd:ca:80:87:8a:36:21:a4:b3:3d:67:61:3b:c9:
         bf:bd:97:b7:4a:86:88:b4:a4:79:60:c2:e2:f3:ec:e4:4e:01:
         17:75:4b:1b:c3:3f:83:0a:b5:08:41:be:f1:87:1c:30:72:76:
         32:b7:ba:d4:f4:3c:ac:cc:71:64:45:62:18:f5:f3:59:06:02:
         62:b3:67:9b:5b:76:fb:8e:14:62:61:5e:b6:0c:9f:5d:33:47:
         46:b5:5e:02:6a:72:8c:44:85:cd:11:e8:ed:79:a8:9c:30:af:
         d8:6a:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----