Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/4f33b299defc5a6accf4f821ba0bc1aa76f1edb4.roa
File:                     4f33b299defc5a6accf4f821ba0bc1aa76f1edb4.roa (raw, json)
Hash identifier:          2kflkRPSgY0GTl/T8uGl1UtunTNArDKI1Af6lSjTX5U=
Subject key identifier:   9A:4D:45:A9:06:28:3E:58:6D:D9:D6:0A:86:4E:C7:AB:77:DD:42:07
Certificate issuer:       /CN=35dce422626a57eb82f943d8d37ec630e859534c
Certificate serial:       12B32B
Authority key identifier: D6:B0:BD:81:2B:25:D9:7F:0C:AB:8F:80:7E:5F:3E:85:75:19:0B:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35dce422626a57eb82f943d8d37ec630e859534c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/4f33b299defc5a6accf4f821ba0bc1aa76f1edb4.roa
Signing time:             Tue 19 Oct 2021 12:05:15 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     263823
IP address blocks:        138.219.216.0/24 maxlen: 24
                          138.219.217.0/24 maxlen: 24
                          138.219.218.0/24 maxlen: 24
                          138.219.219.0/24 maxlen: 24
                          2803:1a40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1225515 (0x12b32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35dce422626a57eb82f943d8d37ec630e859534c
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=4f33b299defc5a6accf4f821ba0bc1aa76f1edb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:9f:1f:af:60:fd:28:97:36:95:47:74:88:
                    89:b6:9b:a8:6e:1e:e6:c4:72:3c:c6:f9:13:1d:46:
                    11:12:3f:8e:fa:40:b5:ed:7e:a9:f6:52:29:61:75:
                    89:e4:3c:ff:2c:a3:bf:bb:ea:c1:e6:89:e4:fc:3d:
                    0c:e6:e8:03:2a:6f:73:96:a9:47:8f:70:ab:4d:61:
                    2e:d0:b3:ce:bb:d6:cf:ce:77:50:2e:f0:6e:df:45:
                    22:99:16:99:1e:94:67:75:39:0f:bb:28:d3:de:50:
                    7e:84:8e:74:98:6d:59:35:89:63:9d:f8:e4:4f:08:
                    6d:32:c5:ae:fa:51:24:9a:26:27:15:b9:f8:77:b1:
                    e7:ee:2f:d0:4a:87:20:db:50:66:40:52:5c:9b:dc:
                    66:d6:81:e4:41:1e:7d:f9:4f:ec:c5:a4:21:d5:94:
                    f1:24:4e:0e:ec:62:7b:18:32:70:1e:11:90:36:02:
                    93:7c:96:da:3a:a6:03:6b:f5:e2:f8:a1:33:22:2c:
                    0f:3b:60:5a:34:7e:4b:06:2c:a6:3d:69:a7:3c:b1:
                    2d:cf:b4:6a:19:11:e2:5d:26:6e:4c:02:3b:c0:7f:
                    b4:6b:7c:7d:0b:54:17:c5:a1:3f:fc:df:69:96:cd:
                    95:51:7a:cd:dc:a0:da:d8:fb:e9:96:1f:a0:40:4d:
                    90:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4D:45:A9:06:28:3E:58:6D:D9:D6:0A:86:4E:C7:AB:77:DD:42:07
            X509v3 Authority Key Identifier:
                keyid:D6:B0:BD:81:2B:25:D9:7F:0C:AB:8F:80:7E:5F:3E:85:75:19:0B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35dce422626a57eb82f943d8d37ec630e859534c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/4f33b299defc5a6accf4f821ba0bc1aa76f1edb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f088d18d-3efe-4604-864c-cb55834af003/35dce422626a57eb82f943d8d37ec630e859534c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.216.0/22
                IPv6:
                  2803:1a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         cb:ab:59:75:19:61:0d:66:b0:0e:6d:b6:45:99:3f:a5:c7:f1:
         02:fb:44:0f:27:c0:ff:fa:47:d7:8e:3b:44:76:5a:6d:a9:b7:
         9b:08:ee:85:60:bd:1a:86:2e:1f:d2:5a:f5:5e:3b:36:bf:4e:
         25:e3:7d:cb:8e:f5:b1:6c:12:63:b4:12:99:1e:4c:66:d1:b4:
         fd:aa:18:8c:3c:55:69:b9:92:c5:a7:08:e5:47:8e:3a:1b:8f:
         ee:ff:68:f5:82:ce:5e:fe:20:f1:ad:03:36:03:f1:59:83:4f:
         ca:14:1b:30:ea:b3:fc:04:58:7f:ac:2a:7e:9b:36:d6:96:85:
         e0:9e:ac:29:e3:35:64:b8:b6:90:10:fd:06:e9:f4:13:df:3f:
         09:83:83:6c:2e:0b:ee:e1:4a:fa:57:ef:7f:30:21:4b:8b:bf:
         1a:df:df:61:0a:7d:92:a2:9d:14:b3:95:1e:5c:8d:d4:56:9a:
         41:cd:74:62:ae:e2:73:6e:1a:32:f9:7e:28:42:50:60:b2:c6:
         6c:18:b1:a5:a1:7f:84:f7:c0:c6:ac:00:47:e9:5a:36:09:c8:
         ca:f6:ff:84:76:c5:a0:cc:9d:69:42:31:9a:70:08:89:c2:11:
         4a:8c:a7:6e:56:e7:0d:3d:2d:2e:f5:0b:29:6a:44:d3:b7:20:
         18:58:fe:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----