Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/846a3d6d24abbce99ffc597d7731622fc0cdc3bd.roa
File:                     846a3d6d24abbce99ffc597d7731622fc0cdc3bd.roa (raw, json)
Hash identifier:          dQp/NOMlcD5UZwF2Be/wWSJUw1hW3yZDU2nYxj633C8=
Subject key identifier:   06:58:8C:5F:18:A2:52:34:06:CF:4E:69:34:5C:90:8B:33:D9:DB:38
Certificate issuer:       /CN=5c9a685c651c7dbc1b745783be477a3e3d647d2c
Certificate serial:       153B
Authority key identifier: 06:F0:F8:7C:30:B4:36:12:2F:12:23:43:FC:82:A1:80:FD:A7:55:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c9a685c651c7dbc1b745783be477a3e3d647d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/846a3d6d24abbce99ffc597d7731622fc0cdc3bd.roa
Signing time:             Wed 24 Mar 2021 14:32:56 +0000
ROA not before:           Wed 24 Mar 2021 14:32:56 +0000
ROA not after:            Tue 24 Mar 2026 14:32:56 +0000
asID:                     262159
IP address blocks:        138.36.76.0/22 maxlen: 24
                          143.137.112.0/22 maxlen: 24
                          168.228.132.0/22 maxlen: 24
                          170.239.120.0/22 maxlen: 24
                          179.60.112.0/20 maxlen: 24
                          190.211.224.0/20 maxlen: 24
                          2803:2880::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5435 (0x153b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c9a685c651c7dbc1b745783be477a3e3d647d2c
        Validity
            Not Before: Mar 24 14:32:56 2021 GMT
            Not After : Mar 24 14:32:56 2026 GMT
        Subject: CN=846a3d6d24abbce99ffc597d7731622fc0cdc3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:fa:b6:47:11:b6:8a:6b:4a:a5:bc:74:a3:
                    ee:b1:ad:21:9a:55:0e:0a:6c:69:3d:a0:ac:30:58:
                    40:8d:40:c9:71:2b:ef:d7:88:2d:dd:89:54:2b:4a:
                    6e:cc:14:13:5e:2e:07:63:17:47:5a:bd:65:67:1b:
                    56:9a:8d:da:a7:08:95:7c:85:f4:ee:a2:92:4a:3d:
                    00:8a:6a:be:75:b9:11:a5:3f:42:dc:c1:d9:73:52:
                    a0:19:34:2c:85:fa:5e:72:9d:98:87:0d:b4:14:34:
                    2c:7a:35:06:2c:2a:3f:5a:1e:a9:d1:f9:cb:54:35:
                    e9:13:2f:92:6d:eb:29:72:e9:1f:2e:e0:8c:06:39:
                    b4:bb:78:aa:5e:1d:6d:8b:b4:38:2b:65:39:cf:ff:
                    1d:f4:75:0c:f7:e4:63:34:05:0f:62:05:61:00:35:
                    99:95:6f:e2:d3:91:62:2b:78:fa:bc:11:3d:ee:0a:
                    73:45:89:ff:3e:18:b2:e5:cf:ae:f3:06:c1:e8:3e:
                    b4:9b:a8:db:84:9c:f1:aa:47:83:2a:fa:1c:55:90:
                    d1:e1:9e:53:3e:f5:57:70:e3:4c:07:10:63:11:67:
                    61:ba:bb:46:eb:ab:78:05:80:d1:19:e2:35:db:1b:
                    cf:7b:f4:4e:00:74:9b:c1:4b:cf:e6:be:21:87:e8:
                    52:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:58:8C:5F:18:A2:52:34:06:CF:4E:69:34:5C:90:8B:33:D9:DB:38
            X509v3 Authority Key Identifier:
                keyid:06:F0:F8:7C:30:B4:36:12:2F:12:23:43:FC:82:A1:80:FD:A7:55:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5c9a685c651c7dbc1b745783be477a3e3d647d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/846a3d6d24abbce99ffc597d7731622fc0cdc3bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed3763af-8b75-4a23-9c88-fde96bb99b26/5c9a685c651c7dbc1b745783be477a3e3d647d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.76.0/22
                  143.137.112.0/22
                  168.228.132.0/22
                  170.239.120.0/22
                  179.60.112.0/20
                  190.211.224.0/20
                IPv6:
                  2803:2880::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:fa:81:cd:73:1a:d5:5a:64:54:21:7d:2a:bd:f1:1b:80:44:
         ad:ed:62:70:7c:9f:74:15:52:2b:64:0f:34:0a:f8:1a:20:c0:
         38:d7:6b:d2:c9:ff:2a:a4:29:9b:f2:2a:ae:bd:68:c7:10:73:
         55:44:05:0f:61:40:62:a2:37:02:ee:f0:ee:3b:4f:50:ee:9e:
         2a:b0:df:53:33:70:6a:6f:9d:e1:a3:3c:b9:09:e5:df:29:9d:
         6b:4c:24:a0:c7:3e:2f:27:3f:ab:d1:a2:ad:66:d2:b9:24:11:
         fb:bd:52:6a:b8:5d:5a:92:92:8b:a2:fb:82:33:bb:f2:12:f2:
         b4:4c:54:3b:7a:61:83:15:f3:8b:31:d1:09:c7:30:af:77:f5:
         61:e2:63:7b:cb:2f:8f:d7:69:98:26:31:29:c9:08:fc:2e:88:
         a6:01:a3:16:26:5c:06:7b:15:48:5a:5c:ff:09:51:be:4d:f2:
         b4:f8:e2:17:04:be:d8:f6:ed:f4:dc:81:ca:1a:7a:e2:07:a8:
         e4:bf:c4:fa:70:ad:4f:83:f7:35:32:e6:32:f6:d7:af:9a:60:
         5f:33:81:c6:0e:85:61:b9:73:53:3c:1d:e0:3a:44:0f:dd:0f:
         7a:db:10:7a:b4:cb:9b:d6:24:02:f6:9c:d4:67:0f:21:e5:50:
         bc:8b:53:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----