Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/afddec5d5bb555a2877fe8e5a1109396309c4bec.roa
File:                     afddec5d5bb555a2877fe8e5a1109396309c4bec.roa (raw, json)
Hash identifier:          xLW8ZHzkKUyalJvSKo+qdDjGvPiMrLxbUp/fwZXUE/E=
Subject key identifier:   AA:31:EF:C0:04:F3:49:D0:AF:04:2B:C1:84:76:0B:19:AB:E1:9A:C0
Certificate issuer:       /CN=1c34aa1623d42a0b6186e98309cecbae27a9189f
Certificate serial:       06FC
Authority key identifier: ED:52:7F:D5:40:DC:6E:5F:89:99:F1:21:C0:D8:26:60:41:56:DF:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c34aa1623d42a0b6186e98309cecbae27a9189f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/afddec5d5bb555a2877fe8e5a1109396309c4bec.roa
Signing time:             Wed 27 Oct 2021 12:53:54 +0000
ROA not before:           Wed 27 Oct 2021 03:00:00 +0000
ROA not after:            Fri 27 Oct 2023 03:00:00 +0000
asID:                     263777
IP address blocks:        138.204.4.0/22 maxlen: 24
                          168.227.252.0/22 maxlen: 24
                          170.239.32.0/22 maxlen: 24
                          2803:2240::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1788 (0x6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c34aa1623d42a0b6186e98309cecbae27a9189f
        Validity
            Not Before: Oct 27 03:00:00 2021 GMT
            Not After : Oct 27 03:00:00 2023 GMT
        Subject: CN=afddec5d5bb555a2877fe8e5a1109396309c4bec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e7:d3:f7:34:0b:c2:af:74:db:5b:39:d6:64:
                    75:a9:ef:40:6c:98:cc:5b:f0:40:f2:e0:49:cb:5b:
                    6e:74:41:fd:ab:20:97:30:e4:aa:da:98:1b:24:41:
                    7d:08:ec:45:29:21:c4:df:2c:2f:b6:e7:56:21:4a:
                    66:b1:20:e3:ae:81:06:6f:64:72:f1:5f:0c:5a:c8:
                    6d:38:92:3c:c8:27:69:54:32:04:2a:95:39:b9:17:
                    6c:3b:a8:0f:8b:7a:de:e3:a9:ee:1b:bd:38:bf:a1:
                    63:23:15:30:3a:6f:c5:f1:be:92:8d:b7:17:8d:f1:
                    cd:ce:53:80:35:6d:e5:ed:8f:fc:8e:b0:b5:68:eb:
                    bd:24:26:83:82:86:2c:99:a2:03:44:ae:52:12:7c:
                    29:91:1e:f3:47:70:b2:1a:f7:ab:67:2e:82:27:0f:
                    9a:9b:62:0f:0e:21:f4:06:7a:9c:a1:7f:e4:b4:00:
                    d8:66:c9:5f:70:9b:d8:18:cf:2c:d2:11:da:aa:3a:
                    9d:6f:d3:13:65:51:b8:64:ac:99:1e:17:1a:e4:2a:
                    0b:98:09:52:ab:7d:d8:0f:ab:5b:a2:78:47:be:96:
                    95:6b:34:36:c1:3a:4a:85:a1:e4:f0:bd:eb:b3:75:
                    f7:2c:16:b8:d6:e0:39:ff:03:7d:73:ed:6d:3e:91:
                    06:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:31:EF:C0:04:F3:49:D0:AF:04:2B:C1:84:76:0B:19:AB:E1:9A:C0
            X509v3 Authority Key Identifier:
                keyid:ED:52:7F:D5:40:DC:6E:5F:89:99:F1:21:C0:D8:26:60:41:56:DF:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c34aa1623d42a0b6186e98309cecbae27a9189f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/afddec5d5bb555a2877fe8e5a1109396309c4bec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1336921-2396-4adb-a1c0-336ca008842e/1c34aa1623d42a0b6186e98309cecbae27a9189f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.4.0/22
                  168.227.252.0/22
                  170.239.32.0/22
                IPv6:
                  2803:2240::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:ac:08:ae:18:0f:1a:29:b9:d9:94:ce:ea:93:01:11:42:7b:
         cc:2c:cb:43:d9:6f:37:b7:df:b5:cd:41:96:4a:db:7b:2f:14:
         e6:4f:f6:e8:12:f2:41:bb:a6:5c:0d:1c:3f:eb:3e:1b:2c:da:
         f9:56:dd:97:4a:78:ff:ad:2e:42:c8:42:09:06:12:4f:35:1d:
         39:2e:2c:36:76:b1:dd:a5:9a:a9:3a:6f:fd:7a:ac:9c:fd:54:
         6a:07:0f:1e:73:3c:bb:0e:e9:58:87:67:35:b2:5f:08:ed:ff:
         fb:12:92:f8:e7:fa:42:4d:ec:63:be:54:a9:b3:f7:e8:99:96:
         96:ed:49:09:ba:a1:c6:b7:cb:56:41:8a:05:1d:29:f8:8c:84:
         d1:74:c6:6b:22:42:74:25:bb:0c:66:94:26:43:84:f5:69:ef:
         f4:c9:d3:00:84:ca:e3:0c:e3:01:72:29:e2:40:c9:4e:89:14:
         2c:0e:ef:5c:d5:b7:86:26:30:2a:b9:16:c7:2d:01:96:0c:a7:
         22:8d:52:31:50:f4:89:e3:eb:90:2c:4a:eb:1f:0c:22:ff:74:
         31:fe:4b:26:84:e2:a3:8d:87:cc:06:87:60:a7:eb:58:d0:a5:
         6d:7f:21:fd:87:97:b1:76:06:60:e2:8d:4c:54:f3:19:6e:4b:
         34:a4:f0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----