Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/ef5b339cdfb987f5e391f20dc4f19cdaf7c4a199.roa
File:                     ef5b339cdfb987f5e391f20dc4f19cdaf7c4a199.roa (raw, json)
Hash identifier:          q0iNCGlMONlHdYINjZV9uPGm/B4aJsTfZY2EW7YvZgw=
Subject key identifier:   BD:54:40:21:E4:39:E6:9F:CB:AC:3C:78:F9:07:F4:BC:10:AE:57:DA
Certificate issuer:       /CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
Certificate serial:       2630
Authority key identifier: CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/ef5b339cdfb987f5e391f20dc4f19cdaf7c4a199.roa
Signing time:             Tue 12 Mar 2024 23:32:40 +0000
ROA not before:           Tue 12 Mar 2024 23:32:40 +0000
ROA not after:            Thu 12 Mar 2026 23:32:40 +0000
asID:                     262944
IP address blocks:        138.185.224.0/22 maxlen: 22
                          189.201.192.0/22 maxlen: 22
                          2806:205::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9776 (0x2630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
        Validity
            Not Before: Mar 12 23:32:40 2024 GMT
            Not After : Mar 12 23:32:40 2026 GMT
        Subject: CN=ef5b339cdfb987f5e391f20dc4f19cdaf7c4a199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bb:17:9f:ad:a1:19:63:d9:30:04:fb:b7:6a:
                    b4:40:18:4c:58:e4:55:6c:b2:13:8e:5d:6f:e5:f2:
                    67:2b:5d:67:c3:8e:65:06:31:31:36:d5:43:21:ac:
                    84:25:0a:f4:05:68:9c:63:a6:e5:6e:8d:c8:0b:2c:
                    10:26:c7:c1:b4:62:92:d3:9e:ec:07:13:87:52:88:
                    91:8c:1f:11:76:7c:5a:b3:07:6b:c0:ef:ad:81:bd:
                    7e:fb:b9:a0:c7:87:01:06:2e:08:d1:39:24:52:90:
                    f8:59:1f:99:86:2f:c2:bd:55:62:b1:e7:12:e4:9d:
                    ad:ae:5b:f8:8c:c3:87:0a:f5:fa:7a:70:d4:15:9c:
                    c1:f7:28:bc:24:dd:69:dc:eb:b9:ec:8e:f5:92:6d:
                    f4:aa:48:04:ea:a5:29:93:bc:dc:dd:8b:9f:5e:29:
                    cd:30:f5:82:cf:8a:cc:e4:3a:9f:29:d9:43:7c:6a:
                    89:9e:41:30:29:81:9c:2e:91:c8:ea:56:c1:a1:89:
                    ca:aa:43:1d:4b:61:ef:31:09:b9:d4:9e:b6:cd:84:
                    3f:6a:47:14:1c:5b:4e:13:a0:b7:16:38:0a:57:1b:
                    fa:2a:d9:38:8b:cc:de:82:82:f9:f5:fe:38:a9:c2:
                    b8:06:5d:25:e4:b1:10:0e:81:48:a2:a6:80:9a:15:
                    69:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:54:40:21:E4:39:E6:9F:CB:AC:3C:78:F9:07:F4:BC:10:AE:57:DA
            X509v3 Authority Key Identifier:
                keyid:CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/ef5b339cdfb987f5e391f20dc4f19cdaf7c4a199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.224.0/22
                  189.201.192.0/22
                IPv6:
                  2806:205::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:96:25:86:51:19:05:7c:fe:a0:78:98:e3:a8:2d:50:7d:e8:
         8f:2e:64:6c:49:6d:f3:60:00:ac:f8:fb:1e:56:88:c7:c9:9e:
         e0:a7:33:98:9e:96:f7:0b:12:06:cc:cf:4f:c8:59:57:75:47:
         7c:b0:39:0c:36:46:eb:d0:31:7b:28:8b:da:aa:4b:4d:11:63:
         bb:00:98:33:2f:cf:30:e8:1d:88:ca:e1:c1:8a:44:65:55:21:
         c3:34:c0:18:99:e3:43:7c:f3:c8:7d:83:50:d4:5d:51:3e:6e:
         7b:e3:ea:67:d6:14:e2:a6:78:ed:51:38:8a:1e:44:18:12:d2:
         84:ac:ea:6c:06:80:aa:9c:b6:68:26:b2:f3:1f:8e:2b:39:af:
         81:6d:e9:ad:e2:e0:52:b0:51:10:39:a9:20:b3:ba:1e:53:03:
         dd:e0:de:b3:1e:36:5d:c5:cd:e2:e3:88:9c:bb:da:d9:9b:55:
         35:1e:02:75:0a:46:9b:39:fd:20:e5:8c:76:fa:a5:8f:00:a3:
         3a:28:29:38:dc:55:42:c8:31:85:de:87:81:05:20:91:fe:3b:
         ea:f6:05:08:5e:a3:44:fa:84:28:d4:04:c1:1b:f0:ef:80:63:
         9c:7c:da:49:76:bf:96:2d:db:ec:da:6e:3f:e5:38:51:fd:58:
         9d:81:67:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----