Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5f29686-59e2-4fad-8653-7fc07961c4bd/d05345e58cc24ca260aaac4a815d0e26ed52641f.roa
File:                     d05345e58cc24ca260aaac4a815d0e26ed52641f.roa (raw, json)
Hash identifier:          Rh3Gkux/RbuKzXC4dhyAISjwALwcm2YKrTaiIeGs/4w=
Subject key identifier:   84:5E:23:D4:34:66:8D:3F:12:A4:95:89:05:CD:40:5F:88:80:B9:5E
Certificate issuer:       /CN=e19e50de13aba69e2b8868b6c7a93b568c42c527
Certificate serial:       062F77
Authority key identifier: 4F:79:C4:26:AF:08:B1:97:1B:92:5B:79:02:88:34:52:C4:95:35:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e19e50de13aba69e2b8868b6c7a93b568c42c527.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5f29686-59e2-4fad-8653-7fc07961c4bd/d05345e58cc24ca260aaac4a815d0e26ed52641f.roa
Signing time:             Wed 24 Mar 2021 14:34:25 +0000
ROA not before:           Wed 24 Mar 2021 14:34:25 +0000
ROA not after:            Tue 24 Mar 2026 14:34:25 +0000
asID:                     61466
IP address blocks:        138.117.68.0/22 maxlen: 24
                          168.205.204.0/22 maxlen: 24
                          170.79.40.0/22 maxlen: 24
                          186.5.232.0/21 maxlen: 24
                          190.13.116.0/22 maxlen: 24
                          201.148.212.0/22 maxlen: 24
                          2800:a60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405367 (0x62f77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19e50de13aba69e2b8868b6c7a93b568c42c527
        Validity
            Not Before: Mar 24 14:34:25 2021 GMT
            Not After : Mar 24 14:34:25 2026 GMT
        Subject: CN=d05345e58cc24ca260aaac4a815d0e26ed52641f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:07:e6:5f:25:c4:fc:7a:71:54:f9:a1:1c:74:
                    8e:a2:fd:0f:d2:e4:f3:9f:b1:f0:a3:ae:dc:2c:fe:
                    54:eb:7f:08:83:b0:65:1a:e6:62:d9:ed:dd:0b:57:
                    ab:27:1c:00:2e:e6:d6:5c:58:ce:7e:54:c2:e6:9c:
                    9c:1e:ca:82:60:2c:40:02:27:e0:ff:a5:82:f0:90:
                    de:ce:2f:8f:92:c5:c4:32:cf:2e:39:5f:5c:a8:e5:
                    e3:9c:67:c8:9b:05:a7:a4:74:8c:4d:ff:a8:5d:14:
                    7d:b0:93:2f:77:a5:48:09:db:24:61:30:13:10:0a:
                    f0:1b:57:85:06:fd:f8:e4:76:24:7d:db:35:81:5f:
                    89:d2:b4:f2:bc:92:21:c8:57:4b:fa:00:95:ad:a9:
                    18:a8:03:59:c2:db:ff:af:bb:6c:af:ff:2b:1f:24:
                    2b:ac:08:4d:f4:e2:48:cb:b3:e6:f2:96:6f:d7:42:
                    45:bb:2e:b1:e2:19:b7:bf:fb:aa:51:7f:d0:95:fc:
                    0f:3a:a7:03:e2:f1:fe:9f:6e:08:8b:58:8c:fe:28:
                    29:a6:b8:44:10:3b:a7:f0:a6:76:49:9b:0d:c9:18:
                    b4:76:e6:34:29:fa:0e:f4:10:16:e6:31:1b:32:a9:
                    40:d2:9c:03:a8:9d:5d:c0:78:29:dd:9b:29:cf:5f:
                    cd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5E:23:D4:34:66:8D:3F:12:A4:95:89:05:CD:40:5F:88:80:B9:5E
            X509v3 Authority Key Identifier:
                keyid:4F:79:C4:26:AF:08:B1:97:1B:92:5B:79:02:88:34:52:C4:95:35:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e19e50de13aba69e2b8868b6c7a93b568c42c527.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5f29686-59e2-4fad-8653-7fc07961c4bd/d05345e58cc24ca260aaac4a815d0e26ed52641f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5f29686-59e2-4fad-8653-7fc07961c4bd/e19e50de13aba69e2b8868b6c7a93b568c42c527.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.68.0/22
                  168.205.204.0/22
                  170.79.40.0/22
                  186.5.232.0/21
                  190.13.116.0/22
                  201.148.212.0/22
                IPv6:
                  2800:a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:32:c3:9f:3d:e6:9c:8c:09:ce:a7:df:fa:b6:af:e4:a7:f4:
         86:1d:7e:94:0a:99:0c:b0:1c:21:6b:7d:56:dc:28:cf:5c:89:
         16:bd:9f:aa:1c:99:02:ae:de:e9:51:49:d7:e3:56:78:18:c6:
         fc:55:30:73:6a:c5:36:49:4f:b5:6a:fb:eb:d4:50:47:12:ce:
         61:1c:0f:5e:61:a0:6f:0f:6b:6a:49:0f:c7:47:7c:b9:aa:2f:
         7a:1c:cc:9f:9a:04:07:1f:6e:ff:e6:14:72:9e:98:b4:ef:5c:
         c0:51:2b:42:86:6e:49:81:50:54:69:18:b1:9a:c8:bc:c6:6b:
         3c:2f:8d:00:9a:bf:b0:2a:d3:54:38:0f:a7:9a:b6:99:01:f5:
         98:73:14:97:d3:ba:a7:eb:1b:68:c6:d6:24:d0:c7:a4:43:b5:
         71:ae:1d:64:69:c2:20:c6:b9:bf:86:51:10:79:1a:e7:cf:7f:
         f5:8c:d6:58:5f:af:29:fb:1a:54:65:b7:b7:c1:6d:92:c1:cd:
         27:df:5e:64:bf:20:08:3e:f9:91:18:7a:da:7a:2b:7d:8e:1d:
         e7:44:ad:6f:95:1a:b7:42:ea:76:d5:01:1c:f4:28:16:e9:4f:
         f8:ab:75:7c:d8:4e:09:76:c1:eb:4c:28:61:e0:19:e8:ab:57:
         a8:b5:70:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----