Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/9481124498f6212c92adbae464a3f4eeb65eb071.roa
File:                     9481124498f6212c92adbae464a3f4eeb65eb071.roa (raw, json)
Hash identifier:          E1osBKFMmg+RPd8AdBHepmxCuC8BrI78s6dCxYa8cYo=
Subject key identifier:   FF:AB:07:2B:F7:D2:B7:5C:D2:40:EA:6A:C8:72:32:02:56:4E:54:1D
Certificate issuer:       /CN=fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c
Certificate serial:       1E54D8
Authority key identifier: E9:04:9F:BD:E0:65:A3:72:D2:B6:C4:AE:F9:EB:3A:67:F4:11:D2:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/9481124498f6212c92adbae464a3f4eeb65eb071.roa
Signing time:             Tue 21 Mar 2023 16:21:17 +0000
ROA not before:           Mon 22 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265688
IP address blocks:        138.117.84.0/22 maxlen: 22
                          138.117.84.0/23 maxlen: 23
                          138.117.86.0/23 maxlen: 23
                          138.117.84.0/24 maxlen: 24
                          138.117.85.0/24 maxlen: 24
                          138.117.86.0/24 maxlen: 24
                          138.117.87.0/24 maxlen: 24
                          2803:1840::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1987800 (0x1e54d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c
        Validity
            Not Before: Mar 22 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=9481124498f6212c92adbae464a3f4eeb65eb071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:70:a1:67:7e:94:85:da:23:e8:63:d9:77:79:
                    43:8a:90:92:5b:f4:0c:76:61:6a:f2:93:d6:51:44:
                    63:bc:7e:f2:23:e1:16:94:cc:51:55:3e:a1:37:11:
                    13:eb:8f:2d:82:f8:9a:39:6f:0e:f8:17:34:67:ee:
                    3a:f9:13:49:0e:cd:cf:ee:dd:07:0c:98:2e:71:20:
                    25:ae:d4:f6:a5:20:e4:38:38:02:da:53:ec:eb:78:
                    b9:40:f6:45:c4:cc:4d:7e:d8:8e:17:c8:e1:7a:3b:
                    a8:4d:04:17:c9:ca:1f:0c:b9:da:62:a7:16:7a:f2:
                    bf:d2:95:9a:c6:5d:51:90:1d:54:0d:84:c4:35:6c:
                    dd:71:44:7e:09:64:75:41:76:53:d1:4c:90:32:63:
                    9b:a8:62:95:ec:8c:de:98:e4:6c:44:90:34:87:85:
                    6c:e2:c7:55:f0:29:29:f4:24:dc:75:45:d9:8a:ed:
                    7e:21:ce:19:a4:79:c9:09:c4:f9:e1:25:b1:27:9b:
                    64:e8:ca:64:75:0a:34:de:1e:6e:f9:70:b4:70:51:
                    1c:cd:88:f3:c0:9f:27:e1:ed:57:f8:0d:d8:36:53:
                    13:63:4d:23:73:80:d7:0e:bd:6a:06:56:3e:e1:11:
                    e6:8e:c9:3e:77:25:92:19:93:bd:01:8a:08:c7:b7:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AB:07:2B:F7:D2:B7:5C:D2:40:EA:6A:C8:72:32:02:56:4E:54:1D
            X509v3 Authority Key Identifier:
                keyid:E9:04:9F:BD:E0:65:A3:72:D2:B6:C4:AE:F9:EB:3A:67:F4:11:D2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/9481124498f6212c92adbae464a3f4eeb65eb071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.84.0/22
                IPv6:
                  2803:1840::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:42:c8:fd:f3:f9:f0:07:32:5e:31:9b:a3:29:af:b6:80:69:
         4c:5d:06:01:5b:56:f4:c0:4b:8a:26:8d:9f:23:5a:24:70:6d:
         6c:cd:d3:12:4c:77:f6:d3:bd:f8:5a:45:b3:e4:18:07:ee:d0:
         33:2b:1f:d7:d0:f0:40:ed:4e:1c:28:71:f4:b5:6d:7f:82:27:
         b3:3a:30:a2:6a:45:1f:e6:78:c8:b1:1b:08:1c:a8:f3:58:51:
         e8:69:97:2a:e1:58:14:8f:74:ec:b1:8b:c9:05:85:c3:09:f9:
         f8:71:7c:c7:43:8f:bb:45:3b:6f:a2:cd:cd:81:3e:27:2c:2f:
         84:49:ed:1d:f5:b7:e7:2f:e2:91:08:cf:72:a7:a8:e6:b0:2a:
         9d:e2:ce:7f:55:56:7a:2f:17:e9:fa:1e:9a:ed:d9:fa:ff:17:
         f1:29:eb:6f:19:ee:c6:00:cd:ae:b7:d7:99:39:97:78:69:d0:
         47:ae:52:45:46:a1:07:92:4d:b9:ad:9b:65:f3:48:f4:ed:75:
         c2:b0:6e:3f:4b:99:17:c4:af:f3:34:3c:b8:75:b6:72:75:05:
         bb:6e:12:90:11:04:4d:8d:18:9b:d5:e9:63:3d:f5:c7:e5:42:
         4b:b1:43:82:cb:b0:e6:01:90:9a:db:c4:1e:f2:27:f0:c5:84:
         a4:3e:e6:31
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDHlTYMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGZm
ZmRhZjlmNjZiYjg4ZWY0MDAxMGQ3YWQ5MGE2ZDIwYWIxNGVkNGMwHhcNMjEwMzIy
MDMwMDAwWhcNMjYwMzI0MDMwMDAwWjAzMTEwLwYDVQQDEyg5NDgxMTI0NDk4ZjYy
MTJjOTJhZGJhZTQ2NGEzZjRlZWI2NWViMDcxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArnChZ36Uhdoj6GPZd3lDipCSW/QMdmFq8pPWUURjvH7yI+EW
lMxRVT6hNxET648tgviaOW8O+Bc0Z+46+RNJDs3P7t0HDJgucSAlrtT2pSDkODgC
2lPs63i5QPZFxMxNftiOF8jhejuoTQQXycofDLnaYqcWevK/0pWaxl1RkB1UDYTE
NWzdcUR+CWR1QXZT0UyQMmObqGKV7IzemORsRJA0h4Vs4sdV8Ckp9CTcdUXZiu1+
Ic4ZpHnJCcT54SWxJ5tk6MpkdQo03h5u+XC0cFEczYjzwJ8n4e1X+A3YNlMTY00j
c4DXDr1qBlY+4RHmjsk+dyWSGZO9AYoIx7dM4wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFP+rByv30rdc0kDqashyMgJWTlQdMB8GA1UdIwQYMBaAFOkEn73gZaNy0rbE
rvnrOmf0EdLJMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmZmZGFm
OWY2NmJiODhlZjQwMDEwZDdhZDkwYTZkMjBhYjE0ZWQ0Yy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjliYTQ5OTYtZGI4Ny00NzQzLTg4NzMtOTA5MzA0
NmMzMjczLzk0ODExMjQ0OThmNjIxMmM5MmFkYmFlNDY0YTNmNGVlYjY1ZWIwNzEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iOWJhNDk5Ni1kYjg3LTQ3NDMtODg3My05MDkz
MDQ2YzMyNzMvZmZmZGFmOWY2NmJiODhlZjQwMDEwZDdhZDkwYTZkMjBhYjE0ZWQ0
Yy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAop1VDANBAIAAjAHAwUAKAMYQDANBgkqhkiG9w0BAQsFAAOC
AQEAWULI/fP58AcyXjGboymvtoBpTF0GAVtW9MBLiiaNnyNaJHBtbM3TEkx39tO9
+FpFs+QYB+7QMysf19DwQO1OHChx9LVtf4InszowompFH+Z4yLEbCByo81hR6GmX
KuFYFI907LGLyQWFwwn5+HF8x0OPu0U7b6LNzYE+JywvhEntHfW35y/ikQjPcqeo
5rAqneLOf1VWei8X6foemu3Z+v8X8SnrbxnuxgDNrrfXmTmXeGnQR65SRUahB5JN
ua2bZfNI9O11wrBuP0uZF8Sv8zQ8uHW2cnUFu24SkBEETY0Ym9XpYz31x+VCS7FD
gsuw5gGQmtvEHvIn8MWEpD7mMQ==
-----END CERTIFICATE-----