Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/c07795895f6112f4af00834e1e6f8e967f81f598.roa
File:                     c07795895f6112f4af00834e1e6f8e967f81f598.roa (raw, json)
Hash identifier:          UNGaTxyzIow0xQn7WJkVV5GWAMxlVWBrSNcB5DPL+S0=
Subject key identifier:   9C:4A:99:18:D3:5E:4D:EE:04:58:00:BC:36:F7:D0:05:E7:1F:55:4D
Certificate issuer:       /CN=3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7
Certificate serial:       0FCD94
Authority key identifier: 54:07:E3:26:0E:37:3F:FA:85:65:42:62:04:BA:57:D5:22:12:FB:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/c07795895f6112f4af00834e1e6f8e967f81f598.roa
Signing time:             Thu 13 Jan 2022 14:44:30 +0000
ROA not before:           Thu 13 Jan 2022 03:00:00 +0000
ROA not after:            Sat 13 Jan 2024 03:00:00 +0000
asID:                     269974
IP address blocks:        138.122.4.0/22 maxlen: 22
                          2803:d440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035668 (0xfcd94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7
        Validity
            Not Before: Jan 13 03:00:00 2022 GMT
            Not After : Jan 13 03:00:00 2024 GMT
        Subject: CN=c07795895f6112f4af00834e1e6f8e967f81f598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:55:9b:24:9f:5d:51:8a:4f:13:29:ec:bb:
                    ec:00:13:14:68:18:92:51:10:42:39:9f:2f:61:2a:
                    51:48:19:91:04:dc:07:ca:a7:e6:a9:93:e8:2c:7a:
                    0b:dc:a4:16:2f:9d:8d:c3:72:64:8d:4f:21:79:47:
                    3c:70:59:49:33:53:c1:db:b1:e7:4e:38:d6:3d:18:
                    e7:59:ab:3f:a1:82:4d:0f:3c:45:8d:b2:29:6e:49:
                    42:af:75:62:80:df:35:e5:f9:8e:46:f1:5c:de:ae:
                    78:9e:a3:42:c3:1a:89:ca:dc:95:74:a6:38:60:7b:
                    86:9a:7e:c2:7e:ba:4b:17:c3:92:11:27:b9:0a:82:
                    0e:8d:3d:59:19:d6:f0:06:45:db:55:da:6d:68:87:
                    55:f5:80:46:38:11:71:9c:94:a1:4a:02:7b:98:c6:
                    61:9b:f7:04:c2:74:49:46:5c:8a:ca:14:de:f3:c0:
                    92:a0:0e:b3:16:cc:05:fd:41:4a:f3:04:4a:83:fd:
                    ea:11:8f:f6:eb:92:f5:e3:ba:94:a5:ae:1a:83:c4:
                    79:d1:a2:40:aa:29:42:1b:09:10:fe:8f:50:77:8a:
                    1f:a2:2e:38:1a:6d:51:4c:81:5e:59:0e:cb:06:be:
                    87:d4:6d:5e:d6:c4:91:d1:bf:e1:75:bd:fb:f2:d1:
                    12:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4A:99:18:D3:5E:4D:EE:04:58:00:BC:36:F7:D0:05:E7:1F:55:4D
            X509v3 Authority Key Identifier:
                keyid:54:07:E3:26:0E:37:3F:FA:85:65:42:62:04:BA:57:D5:22:12:FB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/c07795895f6112f4af00834e1e6f8e967f81f598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.4.0/22
                IPv6:
                  2803:d440::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:cf:45:90:2a:47:7f:7c:f2:8c:f6:a2:ac:4b:95:41:b5:f7:
         d5:32:ad:8c:84:88:e3:17:ec:d0:7f:a0:de:c3:cd:5e:a1:e5:
         5f:4c:94:12:26:3d:b9:79:56:38:e6:14:fd:42:28:bb:15:fa:
         4d:2c:20:c4:c8:11:43:ad:89:a2:21:82:f3:74:d7:82:94:c1:
         43:ce:a7:52:ad:06:f3:b3:34:70:16:46:7e:85:2a:7c:ee:6f:
         c1:5d:41:0a:83:e2:ca:80:19:ba:8a:aa:db:7f:a3:34:d0:e9:
         c8:b0:bd:7b:3e:38:8c:bb:d7:b2:d3:e2:13:48:fd:70:0c:10:
         bd:72:19:94:a3:b5:66:52:76:26:8b:0c:00:9c:08:45:dd:5c:
         60:a2:28:e8:89:a3:71:9e:8f:ce:cb:a2:da:f1:9b:af:f5:92:
         59:1a:e7:88:f2:0f:f0:7f:63:c1:12:9d:e5:1f:3e:ad:86:f7:
         05:00:56:f5:8e:9d:42:e9:02:b6:cb:88:2e:29:84:bc:85:a6:
         ba:d4:b5:c8:81:0f:2c:2a:9e:8f:c8:d1:e2:b8:1e:66:08:17:
         11:40:8c:f6:65:0a:b7:52:23:8b:c9:e0:36:6d:c5:d5:7f:a4:
         aa:66:63:60:6d:9b:de:e3:77:0c:e9:e8:0f:bd:19:89:f7:fd:
         18:63:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----