Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/b8f24c0a1617b3aa62edb503717f9a33f0ad0aba.roa
File:                     b8f24c0a1617b3aa62edb503717f9a33f0ad0aba.roa (raw, json)
Hash identifier:          dky0nS8loiWxOmDhCPwHhyKHBNZotNdMW6hKrQynO3M=
Subject key identifier:   FF:88:0D:4F:13:0C:B9:C8:D0:A4:D5:89:4A:95:69:FE:B8:74:05:16
Certificate issuer:       /CN=dc0080782942a0e1f47428183d06112e6a9aa3d8
Certificate serial:       0D215C
Authority key identifier: CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/b8f24c0a1617b3aa62edb503717f9a33f0ad0aba.roa
Signing time:             Wed 24 Mar 2021 14:47:02 +0000
ROA not before:           Wed 24 Mar 2021 14:47:02 +0000
ROA not after:            Tue 24 Mar 2026 14:47:02 +0000
asID:                     16906
IP address blocks:        138.94.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860508 (0xd215c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc0080782942a0e1f47428183d06112e6a9aa3d8
        Validity
            Not Before: Mar 24 14:47:02 2021 GMT
            Not After : Mar 24 14:47:02 2026 GMT
        Subject: CN=b8f24c0a1617b3aa62edb503717f9a33f0ad0aba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:84:8b:4e:50:ee:fd:4c:3d:b7:f6:4c:d2:ed:
                    1f:dc:78:e4:14:b4:16:97:c0:3e:69:c7:84:ed:dc:
                    4d:50:f2:8b:00:c1:d9:ce:79:f3:44:9b:a5:78:0f:
                    0d:db:78:c7:88:f8:07:cf:b8:ef:19:ab:0e:e1:7c:
                    16:a0:09:66:68:f4:69:92:d3:a8:de:bc:f0:8b:69:
                    5c:3e:5e:84:61:ea:39:98:be:00:c6:03:a1:c8:95:
                    5b:28:e0:e2:94:0d:97:be:80:cd:4b:1d:7e:0c:8d:
                    da:e9:96:f0:3d:7b:62:c3:65:47:55:d4:11:8a:15:
                    25:49:67:cd:b2:44:4e:05:bb:39:a1:83:29:46:a9:
                    1e:73:88:3e:5e:a8:4b:10:4e:8d:aa:e0:eb:a0:92:
                    be:b1:11:c9:94:a1:19:ec:ef:62:4d:af:7b:79:58:
                    0a:b7:6d:ae:c7:f1:02:f3:9e:33:af:d4:12:81:49:
                    ee:74:00:d0:5e:04:94:2c:51:f1:b5:29:8f:30:fc:
                    99:c9:e5:35:50:60:2c:bf:ab:99:40:36:c4:31:25:
                    fa:42:41:83:d2:82:6d:ba:6d:d6:bb:08:b6:6d:4b:
                    91:b6:4c:1f:a7:b9:08:ac:73:97:93:64:74:93:4a:
                    ef:f5:7e:26:40:da:f8:12:e4:06:95:70:92:a3:0a:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:88:0D:4F:13:0C:B9:C8:D0:A4:D5:89:4A:95:69:FE:B8:74:05:16
            X509v3 Authority Key Identifier:
                keyid:CF:BD:C1:03:6D:8F:F6:26:39:A7:35:F1:90:2A:33:4B:26:32:AD:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc0080782942a0e1f47428183d06112e6a9aa3d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/b8f24c0a1617b3aa62edb503717f9a33f0ad0aba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dae1bc47-422c-402f-bf0e-c30f492a22dc/dc0080782942a0e1f47428183d06112e6a9aa3d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:d2:8c:b5:0e:38:22:af:32:b2:0f:c7:e4:19:67:48:77:e0:
         83:13:a1:e0:f0:71:72:18:83:8b:bf:b3:86:5d:a9:8d:e5:cd:
         56:1d:19:40:17:57:e4:f6:5d:a1:1c:a2:7f:75:24:8d:ec:bf:
         2f:5e:3e:c3:45:82:eb:04:77:60:bf:03:50:61:07:22:e2:ba:
         49:a2:10:e2:5e:18:90:29:5a:55:83:ad:7d:35:e7:83:a0:70:
         f2:c3:a4:73:ed:bc:88:9c:41:b9:16:53:23:90:6e:af:20:e1:
         cc:12:10:2f:ab:87:21:9c:e8:23:ae:d0:18:04:ec:56:56:17:
         f6:9c:a0:e3:b7:dd:99:75:bd:66:b0:b0:9e:9f:d8:fe:35:21:
         60:1d:91:8e:82:0e:56:69:ee:f7:76:ed:fc:79:ea:a9:39:77:
         a5:cc:40:90:9f:d2:6f:3c:22:91:e1:3e:13:f3:18:73:13:0a:
         11:4e:33:f2:22:aa:a3:83:11:33:6c:56:b0:9f:f9:4b:07:b8:
         73:c4:79:4f:5d:97:b8:8c:4f:85:0b:88:6e:7c:af:86:15:70:
         ab:96:e9:54:43:28:17:71:6b:ac:ce:1f:61:bb:da:75:65:69:
         52:29:54:22:b6:26:ed:a1:c3:7b:c2:30:3e:7e:16:57:54:9e:
         a0:06:7e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----