Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/38aba7ec31f2bc7c8f7a4065f0d72743c031f34a.roa
File:                     38aba7ec31f2bc7c8f7a4065f0d72743c031f34a.roa (raw, json)
Hash identifier:          nsrvjXiEOOT8siaMeg3FgrmUi8dXFog10g1kb6dfpiI=
Subject key identifier:   24:14:02:FD:C3:FE:21:18:4E:8D:66:E5:B8:F8:C1:6E:BB:9C:01:02
Certificate issuer:       /CN=4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59
Certificate serial:       06A6DF
Authority key identifier: D1:4D:33:63:F4:7B:29:05:08:B3:F0:09:DF:FD:EC:A9:F9:71:9A:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/38aba7ec31f2bc7c8f7a4065f0d72743c031f34a.roa
Signing time:             Wed 24 Mar 2021 14:29:45 +0000
ROA not before:           Wed 24 Mar 2021 14:29:45 +0000
ROA not after:            Tue 24 Mar 2026 14:29:45 +0000
asID:                     264657
IP address blocks:        170.244.128.0/22 maxlen: 24
                          201.158.120.0/21 maxlen: 24
                          2803:6980::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435935 (0x6a6df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59
        Validity
            Not Before: Mar 24 14:29:45 2021 GMT
            Not After : Mar 24 14:29:45 2026 GMT
        Subject: CN=38aba7ec31f2bc7c8f7a4065f0d72743c031f34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:04:04:4c:66:f6:49:7f:ba:d9:b1:84:ce:22:
                    eb:f8:c5:0c:1d:41:fd:07:96:e7:1c:b6:d4:cf:93:
                    03:b7:60:af:77:f3:db:14:5e:c3:88:ef:fa:87:95:
                    9e:05:7d:92:50:4c:36:f5:0c:46:7c:82:ec:9f:32:
                    1a:0f:cb:31:20:24:78:61:52:70:e9:ac:ad:09:91:
                    bd:62:7c:c2:3c:98:1b:e1:84:97:09:cd:e8:da:b2:
                    12:30:31:5e:e8:bb:a2:b2:e4:1d:9b:f3:da:ac:f1:
                    78:72:fc:1e:83:00:a9:91:b3:5a:04:fb:59:58:34:
                    68:ba:1c:a0:4f:cf:1c:3b:f2:9b:ab:a8:c2:32:f9:
                    8f:c1:e9:ef:5a:71:ee:6b:8c:56:d2:b1:79:89:3a:
                    2d:39:b4:4f:2c:c6:34:e0:ef:6f:f9:bb:cc:ed:c8:
                    8d:d2:f9:c3:e3:1d:25:7c:ae:1e:8e:2b:8b:69:8a:
                    94:cb:f1:ab:73:7a:56:cd:b5:fc:1f:64:42:eb:f6:
                    77:4a:b5:1e:a2:05:b4:33:de:50:44:ba:87:a1:fd:
                    ed:e8:00:72:2b:c9:33:dc:7b:a8:4c:f0:60:8d:20:
                    e8:c9:ed:7b:24:b6:34:11:12:9a:e6:70:d8:ab:4e:
                    61:8a:1d:a2:6a:fe:20:4f:25:17:87:0e:a3:d5:bc:
                    22:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:14:02:FD:C3:FE:21:18:4E:8D:66:E5:B8:F8:C1:6E:BB:9C:01:02
            X509v3 Authority Key Identifier:
                keyid:D1:4D:33:63:F4:7B:29:05:08:B3:F0:09:DF:FD:EC:A9:F9:71:9A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/38aba7ec31f2bc7c8f7a4065f0d72743c031f34a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.128.0/22
                  201.158.120.0/21
                IPv6:
                  2803:6980::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:38:c1:c5:dc:08:d1:97:33:e0:dd:6a:a5:fe:a9:d1:3e:91:
         0e:6c:88:ad:49:47:88:99:ba:64:8b:d5:50:2a:1e:07:2a:3d:
         75:2d:8a:6d:65:74:72:88:32:3c:21:6c:41:d6:3a:fd:c4:7b:
         3c:aa:67:79:67:ed:ab:5b:db:73:67:92:8b:00:bb:fc:4b:72:
         57:3b:02:69:06:48:b6:46:94:8c:62:65:6f:70:bd:08:63:77:
         b7:b5:49:cb:8b:a8:d1:2a:4c:50:bd:4d:62:9e:58:c2:ec:5a:
         4f:b1:de:d5:44:03:ed:05:b2:08:de:81:26:69:59:b1:3b:ab:
         08:2d:e1:cc:af:38:a9:40:a5:6a:9b:29:ad:7f:5f:19:c4:d6:
         e1:9d:4d:3f:62:c7:2c:a4:32:99:f9:1c:68:eb:de:d4:2a:4f:
         af:ba:68:32:2d:28:13:1f:62:41:da:51:97:54:2e:b4:5a:68:
         da:14:46:f4:c1:c9:24:2c:20:db:ec:2c:b4:a1:43:ad:c6:99:
         71:ce:80:c2:f2:f2:d9:6c:71:9d:95:36:3d:d8:84:03:44:fc:
         a8:e2:33:38:30:e6:0d:c4:9d:b6:88:90:a0:3f:2b:6c:02:72:
         04:b4:7d:d8:56:7a:cb:0e:fa:28:50:f7:b6:18:0e:77:17:f4:
         b3:ea:12:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----