Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/dd7ca1c99da7f286fec85b2e00a1aa4dffb6711a.roa
File:                     dd7ca1c99da7f286fec85b2e00a1aa4dffb6711a.roa (raw, json)
Hash identifier:          mmwWH6r6hchEeybYWFpcgwf8r7hKST73l3Nfvv/qqpM=
Subject key identifier:   72:71:50:47:14:19:76:9E:A1:A1:E0:1F:D4:0C:87:1E:90:9B:2D:B2
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       027451
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/dd7ca1c99da7f286fec85b2e00a1aa4dffb6711a.roa
Signing time:             Fri 10 Sep 2021 16:08:11 +0000
ROA not before:           Fri 10 Sep 2021 03:00:00 +0000
ROA not after:            Sun 10 Sep 2023 03:00:00 +0000
asID:                     263833
IP address blocks:        138.255.168.0/22 maxlen: 22
                          2803:8640::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160849 (0x27451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Sep 10 03:00:00 2021 GMT
            Not After : Sep 10 03:00:00 2023 GMT
        Subject: CN=dd7ca1c99da7f286fec85b2e00a1aa4dffb6711a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:7a:8e:2a:26:7f:10:73:b0:39:dc:0d:62:
                    13:66:91:b1:6f:ab:7e:41:e1:74:dc:b0:d8:96:d4:
                    a6:27:f9:c8:76:a2:f5:ec:21:36:9c:f9:96:9b:12:
                    41:42:9d:4d:29:06:d7:67:40:c8:c1:00:5f:63:0b:
                    0d:e5:cc:3f:0d:b8:aa:3d:20:7d:60:be:50:f9:bb:
                    46:86:76:15:98:de:5a:50:ec:0e:30:6c:bb:ec:c8:
                    05:a8:c7:4c:52:e0:ac:bb:f8:80:a4:70:25:21:3a:
                    af:0a:54:ad:7b:18:68:de:79:1a:5c:24:94:1d:84:
                    3c:5a:a6:ef:b7:22:6b:dc:6f:f3:f9:62:c4:f5:ea:
                    23:bc:fb:83:0b:1d:b0:5b:47:89:14:8c:3b:3d:a2:
                    b0:40:9c:cf:40:2f:f5:11:6f:6b:41:9f:4b:12:a2:
                    65:b0:f0:df:fb:40:2c:ef:3d:92:ba:bc:84:75:9e:
                    53:0e:fc:bc:06:72:95:02:ec:3a:5b:03:40:d3:d1:
                    b0:8b:bb:dc:eb:97:fd:05:a4:75:95:f0:1e:64:bf:
                    c5:e4:24:d9:e4:d8:03:40:be:09:8d:09:31:ed:9e:
                    ee:6e:52:5a:4d:af:fa:ef:66:6b:51:74:11:10:49:
                    33:58:52:35:7a:1a:7f:31:78:63:b9:4c:40:16:28:
                    cf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:71:50:47:14:19:76:9E:A1:A1:E0:1F:D4:0C:87:1E:90:9B:2D:B2
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/dd7ca1c99da7f286fec85b2e00a1aa4dffb6711a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.168.0/22
                IPv6:
                  2803:8640::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:0f:5e:61:5d:94:bf:f0:a5:92:34:90:9a:c0:21:9d:a3:0c:
         9b:04:15:f5:0d:18:a4:0d:0b:81:20:a6:86:e2:8c:c3:3a:35:
         19:da:b1:f0:be:77:5e:bf:91:85:2d:2e:a6:39:6d:d9:a1:2d:
         0a:48:b5:94:ac:ec:a2:1c:4b:7e:3b:2b:b2:1b:28:ad:4c:90:
         3f:de:1a:94:aa:91:a9:a2:e5:8e:a6:bc:4d:34:f9:17:3b:76:
         da:57:99:f8:2f:74:ea:e2:85:87:c4:01:33:31:d6:a6:5e:0c:
         45:2d:38:ea:3b:2d:db:e8:1f:d1:d1:53:15:71:60:be:7c:64:
         63:cc:df:23:c0:c7:af:bc:91:df:64:4e:03:70:4d:2a:a3:0b:
         2a:26:b5:76:ec:a8:aa:be:33:13:96:66:6a:bd:a1:52:db:d0:
         81:d6:3b:68:4b:66:b8:9d:b3:c3:56:5f:ae:e6:b5:97:52:ac:
         4f:be:fa:24:66:c5:15:1c:35:38:06:63:8c:27:bb:55:10:b6:
         d2:36:d6:29:fe:f2:bc:2c:6e:0a:a1:13:04:9a:2c:e3:fa:48:
         a5:7c:b3:6e:33:63:76:40:cc:6c:18:8e:e9:7c:80:72:51:6f:
         db:1f:de:da:74:00:34:8e:bc:6a:9d:ce:0e:f2:49:89:a1:77:
         00:5a:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----