Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9aa1d16-4213-43bf-a661-00cb484c18c9/e40c095df5c6bb3c603e545d6508d661a5308ebd.roa
File:                     e40c095df5c6bb3c603e545d6508d661a5308ebd.roa (raw, json)
Hash identifier:          s+m9/UV3qcMpKFIaUTc5FaMMkoQHE52hfJPefzdRspI=
Subject key identifier:   22:01:4B:C6:92:2C:13:F4:48:D5:1B:05:3F:88:11:6F:A9:A4:2E:D3
Certificate issuer:       /CN=7e80f91e780a625cca35dfc27d18ede75da0bb6a
Certificate serial:       0F2782
Authority key identifier: B3:55:22:80:71:A0:E2:A3:40:29:8B:26:9D:32:86:4F:A3:40:4B:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e80f91e780a625cca35dfc27d18ede75da0bb6a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9aa1d16-4213-43bf-a661-00cb484c18c9/e40c095df5c6bb3c603e545d6508d661a5308ebd.roa
Signing time:             Fri 25 Jun 2021 08:16:21 +0000
ROA not before:           Fri 25 Jun 2021 03:00:00 +0000
ROA not after:            Thu 25 Jun 2026 03:00:00 +0000
asID:                     263222
IP address blocks:        138.94.240.0/22 maxlen: 24
                          143.137.192.0/22 maxlen: 24
                          161.0.112.0/21 maxlen: 24
                          170.0.244.0/22 maxlen: 24
                          170.82.216.0/22 maxlen: 24
                          2803:4680::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993154 (0xf2782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e80f91e780a625cca35dfc27d18ede75da0bb6a
        Validity
            Not Before: Jun 25 03:00:00 2021 GMT
            Not After : Jun 25 03:00:00 2026 GMT
        Subject: CN=e40c095df5c6bb3c603e545d6508d661a5308ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:81:a6:88:02:66:7f:41:ac:42:d7:45:c1:
                    1b:5f:07:9f:46:62:e5:de:52:40:70:cc:8d:b3:d9:
                    52:a0:8a:f5:40:2e:32:20:3c:cc:fe:bd:69:d7:b5:
                    e1:66:d2:8d:fc:44:c7:74:62:db:05:1f:e5:b2:01:
                    9e:87:54:4f:0f:66:0d:86:c9:97:8c:c4:79:a4:8d:
                    13:e9:4c:a2:38:9e:ec:9d:52:9c:64:f2:a0:69:7d:
                    8e:23:c4:7f:13:4f:dc:37:39:10:25:b2:5d:6a:00:
                    f8:c1:a4:82:05:95:7b:d5:aa:5a:e0:86:3c:50:46:
                    91:34:e4:a0:6f:dc:31:5e:1f:d7:44:65:6f:b4:62:
                    83:62:d9:29:c9:5d:b0:dc:aa:99:25:c2:6e:67:aa:
                    24:14:52:b0:b5:98:b7:58:c7:b3:e9:15:7f:40:d7:
                    79:cd:b8:c7:c2:28:8c:9c:11:9e:da:05:b9:9c:3a:
                    1f:1b:f6:91:a3:83:b6:58:18:a8:e4:21:f4:15:29:
                    eb:48:3e:8c:33:eb:f7:22:60:0b:a2:95:05:4d:d6:
                    eb:eb:60:4c:22:84:8e:f7:83:e5:41:0b:86:1d:2a:
                    07:cf:ab:b1:2a:b9:e3:83:de:dc:47:8d:be:d8:d1:
                    ab:44:5f:12:a0:99:d7:3d:1e:c4:e7:5e:e0:7d:b5:
                    80:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:01:4B:C6:92:2C:13:F4:48:D5:1B:05:3F:88:11:6F:A9:A4:2E:D3
            X509v3 Authority Key Identifier:
                keyid:B3:55:22:80:71:A0:E2:A3:40:29:8B:26:9D:32:86:4F:A3:40:4B:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e80f91e780a625cca35dfc27d18ede75da0bb6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9aa1d16-4213-43bf-a661-00cb484c18c9/e40c095df5c6bb3c603e545d6508d661a5308ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9aa1d16-4213-43bf-a661-00cb484c18c9/7e80f91e780a625cca35dfc27d18ede75da0bb6a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.240.0/22
                  143.137.192.0/22
                  161.0.112.0/21
                  170.0.244.0/22
                  170.82.216.0/22
                IPv6:
                  2803:4680::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:1c:2c:a6:bb:46:61:35:cf:b6:00:95:e3:34:5c:88:91:7e:
         0a:ce:36:10:f8:df:95:4f:64:9e:02:8d:13:9d:f7:53:cf:47:
         50:53:3e:23:5a:5c:a8:3b:18:79:1b:47:43:db:4a:f0:4d:ef:
         a1:4c:bc:53:96:dd:5a:aa:4a:21:30:32:e9:95:1a:d6:bf:48:
         aa:9c:8e:9f:0e:16:f4:4b:9f:dd:ab:d7:14:f9:93:c7:0c:87:
         4d:50:ec:14:2d:03:ff:ea:a2:fe:ee:f6:c6:f6:53:c4:90:66:
         ce:e4:16:26:32:cb:9c:65:4f:b4:8b:43:27:da:ae:d8:3d:e1:
         dc:08:e0:12:90:92:ad:86:2d:c3:27:2e:4b:09:00:ff:9a:d7:
         43:9c:e0:5b:0d:ef:c9:f5:dd:7a:9d:8a:cb:3e:7f:97:4d:db:
         fb:3d:ec:81:f8:16:44:4c:b0:63:ca:59:58:f5:c2:18:e0:3f:
         77:2d:32:47:54:40:4c:8e:39:e0:00:4f:19:f7:95:05:b0:44:
         b1:d0:6f:17:96:46:55:51:b4:8f:b3:72:38:5f:d9:b4:86:ba:
         3f:56:a9:66:9e:71:ed:d5:6a:4e:31:8e:e3:84:f2:49:52:66:
         e9:43:4f:c0:f4:fe:30:71:c7:29:7a:36:63:ae:4f:39:a9:eb:
         3c:19:b4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----