Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0168514e-e31c-4ad0-9b99-c21e6b58e983/84885fb05c43c83088db670e315d92a65826948d.roa
File:                     84885fb05c43c83088db670e315d92a65826948d.roa (raw, json)
Hash identifier:          2EWphz+XD8Ymy2jGufPjtFsPjEOdysY4HhafkVioSpE=
Subject key identifier:   14:EF:8E:E7:00:CD:84:E7:1C:91:A1:05:E4:F7:93:3F:47:74:5E:82
Certificate issuer:       /CN=e08b233ae5fff785bf227739cbb036acc7d18ab2
Certificate serial:       213276
Authority key identifier: 5A:7C:F6:2C:9C:87:74:87:37:17:D9:E0:54:CF:89:3E:E9:B2:B5:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e08b233ae5fff785bf227739cbb036acc7d18ab2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0168514e-e31c-4ad0-9b99-c21e6b58e983/84885fb05c43c83088db670e315d92a65826948d.roa
Signing time:             Mon 26 Jun 2023 15:31:35 +0000
ROA not before:           Sun 25 Jun 2023 15:31:35 +0000
ROA not after:            Thu 26 Jun 2025 15:31:35 +0000
asID:                     263749
IP address blocks:        138.94.56.0/22 maxlen: 24
                          2803:8040::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175606 (0x213276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e08b233ae5fff785bf227739cbb036acc7d18ab2
        Validity
            Not Before: Jun 25 15:31:35 2023 GMT
            Not After : Jun 26 15:31:35 2025 GMT
        Subject: CN=84885fb05c43c83088db670e315d92a65826948d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e8:ae:be:0e:73:09:bd:a6:3a:d4:c1:9f:d1:
                    22:a1:a7:39:88:7e:8c:4d:62:94:a5:9b:a5:3b:99:
                    f9:74:52:24:8a:c9:21:95:43:0d:63:55:43:40:4d:
                    84:c2:f2:b1:9c:7d:9b:6c:13:1c:81:f1:ac:23:13:
                    ca:cf:79:7f:c6:2d:e8:b4:cb:27:f5:7c:dc:6a:2d:
                    0e:5e:e8:9a:22:1e:67:fb:76:91:aa:33:ad:5b:6a:
                    cd:44:bb:21:d6:a5:c0:37:b2:b6:6e:f3:6a:5c:b6:
                    6f:91:0f:f2:42:98:b9:cd:db:be:ce:be:53:9f:d2:
                    06:33:ab:ca:3b:7c:54:4e:2e:ac:fa:9c:94:46:d1:
                    99:ca:c3:ff:fa:63:30:fd:04:9d:fc:1a:f5:81:91:
                    d9:da:a3:13:a5:c5:0d:45:35:4d:d9:f9:8a:70:89:
                    13:70:93:e9:9b:e2:32:06:d1:a2:0b:7d:07:6a:c2:
                    e8:ec:1b:37:34:9a:fe:32:cf:70:82:83:cd:4b:95:
                    96:a3:37:63:3f:50:c5:66:33:48:4f:1c:dc:6b:9b:
                    21:6b:9d:0e:4a:c0:bc:5e:e8:88:c5:50:3c:33:c6:
                    04:73:d5:71:56:43:91:ae:f3:9b:5a:8d:b9:ce:c7:
                    11:74:6a:9d:be:48:08:ec:56:bc:55:8c:3b:e9:0b:
                    db:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:EF:8E:E7:00:CD:84:E7:1C:91:A1:05:E4:F7:93:3F:47:74:5E:82
            X509v3 Authority Key Identifier:
                keyid:5A:7C:F6:2C:9C:87:74:87:37:17:D9:E0:54:CF:89:3E:E9:B2:B5:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e08b233ae5fff785bf227739cbb036acc7d18ab2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0168514e-e31c-4ad0-9b99-c21e6b58e983/84885fb05c43c83088db670e315d92a65826948d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0168514e-e31c-4ad0-9b99-c21e6b58e983/e08b233ae5fff785bf227739cbb036acc7d18ab2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.56.0/22
                IPv6:
                  2803:8040::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:16:97:54:4b:7a:7e:60:18:ab:21:b1:74:64:e1:7a:0f:6d:
         ae:d2:c9:d1:16:72:b6:06:6b:47:23:68:89:ee:2a:f8:c9:8c:
         e5:de:99:d0:a5:a5:35:14:b4:68:89:55:e3:57:d0:d4:16:51:
         40:55:cb:35:07:c3:ea:24:51:ce:56:74:c8:9a:46:8c:08:f6:
         b4:25:a5:cd:a9:5e:e0:db:c7:79:1d:43:c7:d1:f0:83:ae:09:
         88:33:1e:c9:c0:54:21:4e:75:99:2d:a3:00:23:86:49:41:fd:
         27:65:1d:bb:c9:5a:b6:9d:9f:0b:75:13:05:39:5f:57:a1:0c:
         fb:cf:77:be:51:be:dd:a2:da:d8:07:17:88:6b:f4:f3:38:29:
         49:0f:f5:67:76:91:11:e4:e2:df:3a:6b:17:67:57:c1:df:2c:
         d8:c6:76:d0:c3:65:45:47:8b:5d:2c:d4:40:00:d1:75:a0:45:
         33:ae:32:a7:85:07:0a:3b:b1:fd:64:11:f7:26:93:21:45:25:
         27:40:6f:b1:7c:3d:f1:ee:43:a5:a4:75:22:0a:7d:63:bd:10:
         1e:49:53:46:4e:e8:3d:fb:81:7a:0a:35:ed:ec:ba:9f:f9:a6:
         ad:54:2f:95:35:b9:e1:d5:32:05:0b:20:e2:21:e8:91:e1:52:
         0f:c2:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----