Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/dc163052836d4530945fefdf8a592c01d8e71f3a.roa
File:                     dc163052836d4530945fefdf8a592c01d8e71f3a.roa (raw, json)
Hash identifier:          DnAxcdI+ddbvNv9x/W6A6B+gq6bhMP4nn5a/lEUJ43U=
Subject key identifier:   91:6F:CD:B0:19:61:AD:A0:41:83:BB:3A:6D:98:A8:F8:A7:FE:6D:B9
Certificate issuer:       /CN=3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7
Certificate serial:       1D16C9
Authority key identifier: 54:07:E3:26:0E:37:3F:FA:85:65:42:62:04:BA:57:D5:22:12:FB:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/dc163052836d4530945fefdf8a592c01d8e71f3a.roa
Signing time:             Mon 10 Jul 2023 18:27:20 +0000
ROA not before:           Sun 09 Jul 2023 18:27:20 +0000
ROA not after:            Thu 10 Jul 2025 18:27:20 +0000
asID:                     269974
IP address blocks:        138.122.4.0/22 maxlen: 22
                          2803:d440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906377 (0x1d16c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7
        Validity
            Not Before: Jul  9 18:27:20 2023 GMT
            Not After : Jul 10 18:27:20 2025 GMT
        Subject: CN=dc163052836d4530945fefdf8a592c01d8e71f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:87:4f:4a:2d:c5:cc:1f:ca:f9:94:72:76:
                    86:fb:3f:fd:c5:10:0f:21:b7:84:df:e4:f1:9d:bf:
                    35:6f:dd:ff:23:99:54:82:7c:95:82:af:57:60:56:
                    1b:7f:89:07:c7:d4:2b:18:20:dc:c7:c8:21:d1:56:
                    24:75:49:3b:72:19:cc:6e:25:7c:78:c4:86:db:12:
                    d5:3a:6e:17:dd:eb:cf:99:bd:ec:a7:b6:e3:89:e4:
                    6c:41:29:ee:3e:d4:b6:2d:38:21:a5:67:b5:59:32:
                    3f:49:41:ec:65:a8:16:df:78:d9:fc:19:0d:82:1d:
                    7b:86:45:b5:de:53:05:b6:3f:b9:b7:52:ae:02:2d:
                    ee:cc:67:e4:4b:da:16:4f:1c:3f:ad:71:c1:3b:68:
                    03:7d:5a:f1:3c:b7:94:e7:51:50:92:73:6c:c7:4f:
                    24:ec:bb:64:a8:e7:7f:60:c8:f5:16:f6:28:af:e8:
                    47:17:c6:8d:a4:b2:c7:5f:75:c3:98:d7:0d:3a:bd:
                    47:68:ad:73:68:30:f8:e3:ec:82:13:70:9c:86:8b:
                    6e:ae:a0:55:44:c1:32:cf:62:48:47:de:b1:b1:cd:
                    a2:23:f1:1b:ee:fe:0f:e6:6a:41:e8:6d:ff:80:d2:
                    b5:a5:7f:a8:90:82:a7:2a:08:7a:13:49:66:69:3c:
                    30:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6F:CD:B0:19:61:AD:A0:41:83:BB:3A:6D:98:A8:F8:A7:FE:6D:B9
            X509v3 Authority Key Identifier:
                keyid:54:07:E3:26:0E:37:3F:FA:85:65:42:62:04:BA:57:D5:22:12:FB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/dc163052836d4530945fefdf8a592c01d8e71f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.4.0/22
                IPv6:
                  2803:d440::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:16:34:b5:6e:a2:e5:27:4c:02:31:2b:e7:91:9b:dd:95:c8:
         a1:ba:51:66:ec:ae:93:fe:ba:61:57:f0:44:90:4d:f5:50:fb:
         5b:83:15:67:d2:b7:0e:e3:81:0e:15:3a:20:f4:61:c2:6d:3c:
         c0:3c:c6:7f:7e:73:c3:14:6f:2b:6f:ae:ee:ac:2f:36:37:88:
         83:4a:94:76:e7:e6:2e:d9:c8:e5:48:aa:a5:e0:1f:24:5d:52:
         16:eb:ef:f1:29:ac:7f:0d:69:83:18:d4:e4:58:3e:10:0b:48:
         58:94:ef:d0:38:a8:29:69:13:3e:2f:45:a5:a6:54:9d:b9:e8:
         05:77:f9:a8:5b:f7:f4:52:0b:24:dd:63:6c:35:16:d1:22:98:
         2b:38:1f:fe:bc:91:23:97:16:8f:be:92:2e:6d:6f:f7:a3:9c:
         ee:58:9e:cb:9b:6a:d7:6a:e7:83:40:38:79:ff:8a:93:61:ff:
         2a:64:73:a6:a6:7a:73:e6:94:3d:f1:1d:07:dd:e4:dc:70:f9:
         77:3b:b4:b0:df:7d:ed:d5:63:6c:69:9c:5c:5e:db:83:66:98:
         28:ea:5a:7f:5e:70:79:c9:91:e5:7a:30:07:e8:40:bb:d0:34:
         fe:74:5b:cc:2e:04:70:7d:25:0a:8d:af:0d:95:83:bc:a0:23:
         11:00:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----