Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9d49e5c-02cd-4945-ba99-c937e5e223fa/407f4a17aef95d4a91f4f5c54c4c1fa2f95087f1.roa
File:                     407f4a17aef95d4a91f4f5c54c4c1fa2f95087f1.roa (raw, json)
Hash identifier:          C22EuSr8vE/fDzCVMobPYh9ZjTbo172AFTYE6+AXErw=
Subject key identifier:   91:3E:DC:CB:40:BB:FB:21:2D:45:7B:ED:49:19:F5:EE:D1:54:E4:74
Certificate issuer:       /CN=92e53ef21b36abac9feb3514004449810f6132fd
Certificate serial:       0D5D12
Authority key identifier: BE:AA:9B:45:FB:A6:E7:49:66:AE:F6:3F:BF:44:F5:F6:E6:4F:F9:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92e53ef21b36abac9feb3514004449810f6132fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9d49e5c-02cd-4945-ba99-c937e5e223fa/407f4a17aef95d4a91f4f5c54c4c1fa2f95087f1.roa
Signing time:             Wed 24 Mar 2021 14:31:43 +0000
ROA not before:           Wed 24 Mar 2021 14:31:43 +0000
ROA not after:            Tue 24 Mar 2026 14:31:43 +0000
asID:                     263729
IP address blocks:        138.36.148.0/22 maxlen: 24
                          2803:4f80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875794 (0xd5d12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92e53ef21b36abac9feb3514004449810f6132fd
        Validity
            Not Before: Mar 24 14:31:43 2021 GMT
            Not After : Mar 24 14:31:43 2026 GMT
        Subject: CN=407f4a17aef95d4a91f4f5c54c4c1fa2f95087f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:14:81:3e:55:a0:7e:09:eb:80:b0:76:c8:05:
                    2e:9b:f4:73:29:23:8d:bf:1b:b9:fd:16:0e:b6:82:
                    53:35:48:8c:4f:e3:7e:b1:1e:ef:4c:00:7c:a1:c6:
                    39:44:35:61:23:06:75:0e:ea:02:b6:13:a0:f1:da:
                    e0:9c:db:d2:a6:fd:a2:ac:df:81:8a:9f:b1:b2:69:
                    16:bb:f6:ae:2f:0f:3a:5e:09:47:5e:f1:17:19:9c:
                    5e:e0:e7:de:12:c4:ae:52:f7:12:83:af:9b:67:18:
                    b8:8f:9b:8f:17:b7:bc:be:9d:a8:37:e7:82:ba:5d:
                    87:09:29:cc:52:29:44:b7:df:58:43:83:b8:d3:bb:
                    31:09:f9:fc:26:44:7c:8d:90:00:0e:69:8d:b0:6b:
                    d3:a6:4e:1f:9b:08:1e:58:e4:ba:79:c3:9a:9c:9f:
                    91:8e:5c:cd:c2:43:34:aa:ce:dc:21:eb:64:05:77:
                    41:0d:d8:e1:78:fa:84:71:c5:5f:f8:20:76:0a:35:
                    33:33:e3:aa:72:37:99:f7:77:17:30:8b:dd:b3:de:
                    c1:6c:25:1a:98:69:84:d7:36:d0:29:bb:00:cd:34:
                    bc:cf:6b:2a:d0:46:b8:7b:28:4a:de:96:f0:d1:9f:
                    33:4e:c0:2d:3c:9c:ec:e9:f3:31:f0:67:23:df:a4:
                    e3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3E:DC:CB:40:BB:FB:21:2D:45:7B:ED:49:19:F5:EE:D1:54:E4:74
            X509v3 Authority Key Identifier:
                keyid:BE:AA:9B:45:FB:A6:E7:49:66:AE:F6:3F:BF:44:F5:F6:E6:4F:F9:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92e53ef21b36abac9feb3514004449810f6132fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9d49e5c-02cd-4945-ba99-c937e5e223fa/407f4a17aef95d4a91f4f5c54c4c1fa2f95087f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9d49e5c-02cd-4945-ba99-c937e5e223fa/92e53ef21b36abac9feb3514004449810f6132fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.148.0/22
                IPv6:
                  2803:4f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:84:d9:43:13:63:62:d8:1d:47:95:b9:12:17:e6:39:94:e7:
         d9:8f:8d:8e:7f:48:0e:52:65:96:9b:a1:8d:37:84:2c:35:71:
         23:41:85:b2:10:d6:08:66:e7:38:05:c7:93:a8:3d:54:8b:e8:
         1c:12:8a:65:d8:ca:90:00:0d:f9:8a:f3:f5:dc:03:b3:cf:77:
         b8:1d:2a:f0:61:b9:ff:c1:0f:98:f1:4a:12:3a:b2:6f:53:ff:
         87:42:df:a0:03:9d:04:59:83:a6:ff:ea:23:88:05:dc:14:e7:
         d6:1b:41:0d:3a:16:f4:14:49:25:a6:2e:ee:84:05:b7:00:31:
         3a:c5:53:2d:18:71:20:fc:79:18:b6:3b:b7:a2:6e:ad:9f:43:
         0c:24:05:5b:27:fe:14:6d:91:a6:a6:ae:3b:f0:04:ca:31:16:
         4c:cd:0f:7a:45:04:7c:7c:67:68:56:38:2d:25:6c:4c:dc:2b:
         8e:1e:48:68:b0:8f:89:71:ac:b4:4f:96:d5:3c:cc:84:51:7e:
         19:41:80:97:cf:77:fa:77:64:ca:40:7c:b7:6f:b9:da:c8:e1:
         0b:cc:13:d0:8f:f0:1d:e5:91:79:44:0c:75:17:78:13:61:13:
         e9:8d:33:52:51:0b:11:70:8d:c5:5d:ce:61:a5:bc:45:01:47:
         cb:53:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----