Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/82994ea1da725fcdea9c7cc99915d4d967f21ff1.roa
File:                     82994ea1da725fcdea9c7cc99915d4d967f21ff1.roa (raw, json)
Hash identifier:          j2oKBhMFDBpoRZ2voFaTyShaqx5El2ZVqEYP2chqWOY=
Subject key identifier:   74:3D:F7:DE:6F:C5:BF:3A:65:FC:60:DA:2C:7A:94:61:67:72:C9:CD
Certificate issuer:       /CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
Certificate serial:       1B00D0
Authority key identifier: 29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/82994ea1da725fcdea9c7cc99915d4d967f21ff1.roa
Signing time:             Mon 03 Oct 2022 14:48:09 +0000
ROA not before:           Mon 03 Oct 2022 14:47:19 +0000
ROA not after:            Thu 03 Oct 2024 15:47:19 +0000
asID:                     263746
IP address blocks:        138.121.240.0/22 maxlen: 22
                          2803:6c40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769680 (0x1b00d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf3d12e8561859cc7cdf433de0d131a66c1a43b
        Validity
            Not Before: Oct  3 14:47:19 2022 GMT
            Not After : Oct  3 15:47:19 2024 GMT
        Subject: CN=82994ea1da725fcdea9c7cc99915d4d967f21ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:84:b8:30:5d:5a:c0:eb:37:3b:a8:29:7f:e3:
                    02:cb:90:10:d0:b7:17:c2:8a:b4:5a:3e:a7:bc:31:
                    11:45:a2:a7:aa:34:45:da:7f:82:ea:55:c8:7d:3d:
                    e1:5b:81:3c:c4:f8:e0:ce:95:de:8d:f5:95:b0:79:
                    b7:b7:fc:0e:d7:c6:70:5e:5b:b7:e2:fd:b0:ad:78:
                    c6:6b:67:65:e5:3f:c5:f6:92:f8:19:eb:0e:d4:7f:
                    2c:db:4b:c5:93:53:04:a7:9c:0c:f9:25:02:19:19:
                    f2:ed:f8:05:aa:99:81:69:b4:50:28:ec:5e:ba:9b:
                    7f:c2:82:b2:e3:a9:71:c4:54:58:38:f8:db:ac:fc:
                    e1:a8:67:72:ba:9b:5d:9c:1d:00:ab:fb:1f:ec:ac:
                    89:a4:d7:71:67:82:35:8f:4a:75:dc:2d:20:4d:7c:
                    4b:f9:e0:85:bb:af:90:b4:44:cb:0e:ec:68:7d:95:
                    35:b4:b4:26:ef:87:fb:c6:4a:eb:c9:00:94:31:12:
                    dd:42:0d:b4:3c:68:0e:3c:b5:a4:3d:3a:83:48:7e:
                    43:b7:4b:f5:fb:26:ec:49:30:af:a8:c6:fe:a2:04:
                    ca:23:09:e0:a4:ea:d4:20:cb:fa:e6:9c:23:c3:bc:
                    d8:43:c1:1a:34:f3:56:23:e2:6d:65:4b:95:46:4e:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:3D:F7:DE:6F:C5:BF:3A:65:FC:60:DA:2C:7A:94:61:67:72:C9:CD
            X509v3 Authority Key Identifier:
                keyid:29:CE:0E:D7:67:F1:1B:7E:6F:C5:91:DE:73:6F:70:51:0B:2D:FB:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/82994ea1da725fcdea9c7cc99915d4d967f21ff1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a55bd147-b47d-46e7-b41a-725d6cd53c38/2bf3d12e8561859cc7cdf433de0d131a66c1a43b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.240.0/22
                IPv6:
                  2803:6c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:09:62:81:3d:14:b0:17:41:94:df:fc:02:eb:4a:9f:6d:ad:
         74:88:6d:79:99:50:24:8f:19:c6:45:5e:00:04:ff:8b:f8:07:
         15:b9:bc:02:a8:ff:df:3f:55:bd:50:0f:7e:ad:a3:bb:2f:60:
         25:64:28:56:6e:b3:70:41:61:42:a7:1f:c0:f1:2d:37:b0:df:
         d9:52:bd:11:92:bb:f9:14:83:36:6c:33:3e:bd:d0:60:8f:42:
         e4:7d:be:b2:06:ec:57:07:cd:0b:f3:d0:ef:ad:61:80:e3:e3:
         ce:78:8a:a9:c8:5c:80:9f:21:c3:4e:d9:b9:55:db:70:9b:3b:
         1d:97:38:a7:39:aa:b3:1d:7f:b1:cb:5b:ab:ea:2e:53:33:aa:
         f6:e5:ca:3a:67:68:1e:8e:92:ce:56:5e:37:d6:39:e4:bf:c1:
         7f:dc:82:3c:03:89:52:a2:eb:96:bb:b5:71:5e:3b:f4:11:cd:
         e2:33:24:18:06:f0:e1:ef:bc:8c:51:4b:6e:a5:45:7d:f5:c6:
         40:01:d6:83:82:34:78:d2:64:e4:76:34:11:13:c7:28:cc:fd:
         a0:2a:9c:ed:69:b4:c2:3f:e7:91:de:c7:2d:74:9d:0c:66:9e:
         2f:0d:80:58:2b:d2:fe:26:e4:b9:f3:b6:88:1e:6b:79:2c:fe:
         45:4d:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----