Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/3b4f4143cea7a6b8c1994b84abecdeb845714574.roa
File:                     3b4f4143cea7a6b8c1994b84abecdeb845714574.roa (raw, json)
Hash identifier:          YtASLe/oBkdHwiU4godHPUsu7zpNk4B/nq0aTezeC3U=
Subject key identifier:   2F:55:DC:F9:F2:08:C5:E3:A2:8B:C2:D4:93:CE:73:02:50:A3:E3:BA
Certificate issuer:       /CN=fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c
Certificate serial:       13B4E5
Authority key identifier: E9:04:9F:BD:E0:65:A3:72:D2:B6:C4:AE:F9:EB:3A:67:F4:11:D2:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/3b4f4143cea7a6b8c1994b84abecdeb845714574.roa
Signing time:             Wed 22 Dec 2021 21:39:29 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265688
IP address blocks:        138.117.84.0/22 maxlen: 24
                          2803:1840::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291493 (0x13b4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=3b4f4143cea7a6b8c1994b84abecdeb845714574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e2:75:be:d9:b6:ac:d6:32:d6:e2:07:55:2c:
                    a7:c4:55:e6:37:0d:87:ab:6f:c4:35:c8:e6:7a:b7:
                    be:73:80:79:e4:e0:28:ae:74:a3:85:bd:05:8e:5f:
                    39:7e:fd:11:9c:0c:a4:95:b2:7d:c8:94:f8:77:4b:
                    57:d2:52:d6:ec:60:31:0f:89:46:64:cf:c7:ef:92:
                    f0:fb:f9:49:2e:0c:4a:66:41:b5:1d:8c:b2:4e:64:
                    76:44:d4:ce:3f:c0:0c:58:85:52:c8:39:14:38:73:
                    bf:9f:78:84:77:5a:a9:e6:0a:a1:e8:b2:3a:97:4d:
                    37:c3:ff:0e:b0:8f:7d:b1:44:23:8e:b1:9f:4b:0d:
                    ab:d0:5a:f9:33:9a:be:92:dd:78:1e:6e:2b:3c:1b:
                    3a:27:ca:8a:86:7e:1d:b9:9f:29:9b:cd:49:dc:6b:
                    9e:2d:6a:23:eb:37:04:9c:4d:d8:d1:87:08:e2:98:
                    f1:44:ba:c4:c5:0c:89:c4:f9:ef:64:cf:0e:d5:97:
                    bf:8a:c9:8e:32:ee:fe:15:a4:44:8a:e5:8e:0c:2f:
                    31:66:c3:6e:ca:9b:8a:bd:2d:49:6b:fc:95:c2:b9:
                    f3:87:65:93:d9:69:fb:ec:23:d1:3c:1d:fc:bb:33:
                    12:55:18:71:80:96:1b:80:d9:e2:37:12:b7:4b:56:
                    a6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:55:DC:F9:F2:08:C5:E3:A2:8B:C2:D4:93:CE:73:02:50:A3:E3:BA
            X509v3 Authority Key Identifier:
                keyid:E9:04:9F:BD:E0:65:A3:72:D2:B6:C4:AE:F9:EB:3A:67:F4:11:D2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/3b4f4143cea7a6b8c1994b84abecdeb845714574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.84.0/22
                IPv6:
                  2803:1840::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:4d:b1:df:46:3e:8e:96:77:bc:30:20:00:5c:c8:6d:43:d5:
         f3:21:41:8f:88:f2:38:8c:e6:20:12:7c:55:3e:e3:0e:62:77:
         ac:c5:17:ae:9d:09:95:b2:8e:42:9c:a6:0c:02:f8:52:3d:82:
         74:57:a7:2d:aa:94:e0:32:46:21:0e:13:e0:2e:d2:73:3d:46:
         d6:18:72:63:48:3f:31:fc:d0:81:17:59:56:3c:8d:85:23:14:
         69:f1:35:98:35:0e:be:af:e1:50:00:f9:56:80:17:f4:99:84:
         1b:78:fa:d2:9c:b0:9e:ec:d0:5e:19:63:da:bd:8a:6e:15:91:
         c9:60:d5:5d:39:d8:3f:b0:15:9e:a7:db:8a:f6:19:91:10:8a:
         75:87:9b:91:d7:d1:57:23:23:bb:c2:2a:03:4e:71:08:78:5f:
         7e:bb:63:2a:7b:51:3e:d0:57:35:c1:b2:be:ff:c6:97:68:75:
         f9:a2:57:36:16:31:4a:b0:ad:e9:02:11:99:7b:de:b6:b6:1a:
         b3:04:4f:9a:34:71:0d:cb:8c:dd:71:ec:f5:2f:c2:f3:73:4b:
         e5:45:23:5b:94:08:17:ac:8e:05:55:c9:c8:3d:3f:e7:42:3e:
         46:6a:40:ea:dd:08:ec:f3:da:bc:8b:28:1e:40:38:92:b9:96:
         53:7a:85:d4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDE7TlMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZm
ZmRhZjlmNjZiYjg4ZWY0MDAxMGQ3YWQ5MGE2ZDIwYWIxNGVkNGMwHhcNMjEwMzI0
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEygzYjRmNDE0M2NlYTdh
NmI4YzE5OTRiODRhYmVjZGViODQ1NzE0NTc0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAgOJ1vtm2rNYy1uIHVSynxFXmNw2Hq2/ENcjmere+c4B55OAo
rnSjhb0Fjl85fv0RnAyklbJ9yJT4d0tX0lLW7GAxD4lGZM/H75Lw+/lJLgxKZkG1
HYyyTmR2RNTOP8AMWIVSyDkUOHO/n3iEd1qp5gqh6LI6l003w/8OsI99sUQjjrGf
Sw2r0Fr5M5q+kt14Hm4rPBs6J8qKhn4duZ8pm81J3GueLWoj6zcEnE3Y0YcI4pjx
RLrExQyJxPnvZM8O1Ze/ismOMu7+FaREiuWODC8xZsNuypuKvS1Ja/yVwrnzh2WT
2Wn77CPRPB38uzMSVRhxgJYbgNniNxK3S1amqQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFC9V3PnyCMXjoovC1JPOcwJQo+O6MB8GA1UdIwQYMBaAFOkEn73gZaNy0rbE
rvnrOmf0EdLJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmZmZGFm
OWY2NmJiODhlZjQwMDEwZDdhZDkwYTZkMjBhYjE0ZWQ0Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjliYTQ5OTYtZGI4Ny00NzQzLTg4NzMtOTA5MzA0
NmMzMjczLzNiNGY0MTQzY2VhN2E2YjhjMTk5NGI4NGFiZWNkZWI4NDU3MTQ1NzQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOWJhNDk5Ni1kYjg3LTQ3NDMtODg3My05MDkz
MDQ2YzMyNzMvZmZmZGFmOWY2NmJiODhlZjQwMDEwZDdhZDkwYTZkMjBhYjE0ZWQ0
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAop1VDANBAIAAjAHAwUAKAMYQDANBgkqhkiG9w0BAQsFAAOC
AQEAAk2x30Y+jpZ3vDAgAFzIbUPV8yFBj4jyOIzmIBJ8VT7jDmJ3rMUXrp0JlbKO
QpymDAL4Uj2CdFenLaqU4DJGIQ4T4C7Scz1G1hhyY0g/MfzQgRdZVjyNhSMUafE1
mDUOvq/hUAD5VoAX9JmEG3j60pywnuzQXhlj2r2KbhWRyWDVXTnYP7AVnqfbivYZ
kRCKdYebkdfRVyMju8IqA05xCHhffrtjKntRPtBXNcGyvv/Gl2h1+aJXNhYxSrCt
6QIRmXvetrYaswRPmjRxDcuM3XHs9S/C83NL5UUjW5QIF6yOBVXJyD0/50I+RmpA
6t0I7PPavIsoHkA4krmWU3qF1A==
-----END CERTIFICATE-----