Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/fc8337ef3f6f1120ed7539a371fdd48ce9693514.roa
File:                     fc8337ef3f6f1120ed7539a371fdd48ce9693514.roa (raw, json)
Hash identifier:          hI+JA8PZ/MEJ7QqyNQGHhup9CTqE3ldIMrN6joimcNs=
Subject key identifier:   11:5F:F5:0A:42:81:C7:42:D2:5F:33:BF:F7:EB:F8:A0:9F:2E:A9:56
Certificate issuer:       /CN=1248882eb1c8e66ab5c23f667362567e6d7db671
Certificate serial:       248D99
Authority key identifier: 5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/fc8337ef3f6f1120ed7539a371fdd48ce9693514.roa
Signing time:             Fri 03 Nov 2023 18:59:24 +0000
ROA not before:           Fri 03 Nov 2023 18:59:24 +0000
ROA not after:            Mon 03 Nov 2025 18:59:24 +0000
asID:                     263781
IP address blocks:        138.118.104.0/22 maxlen: 24
                          2803:1440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395545 (0x248d99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1248882eb1c8e66ab5c23f667362567e6d7db671
        Validity
            Not Before: Nov  3 18:59:24 2023 GMT
            Not After : Nov  3 18:59:24 2025 GMT
        Subject: CN=fc8337ef3f6f1120ed7539a371fdd48ce9693514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5b:68:35:7a:14:fe:91:94:fa:ec:61:63:98:
                    64:b3:53:06:11:49:d7:c8:29:ad:ae:91:8e:26:02:
                    4c:91:b2:bb:ec:94:83:39:8d:80:a0:f6:ac:8d:07:
                    63:b5:f8:a3:37:74:ac:5c:84:0d:64:0a:ac:4b:34:
                    40:fc:09:78:c2:b9:76:af:d3:0c:af:e1:1f:06:64:
                    6c:05:28:b5:6b:a3:0e:35:e8:32:15:22:4e:3a:0c:
                    77:36:ef:25:ee:81:14:2a:e2:a4:66:37:18:5a:7d:
                    9f:12:9b:f6:44:2a:8d:dd:d6:8e:13:a8:27:4a:ea:
                    87:1e:76:0f:b2:b8:4c:d5:45:31:b9:02:af:5c:57:
                    7d:1e:b2:77:e0:e2:27:95:8f:30:7a:be:a4:bd:f4:
                    91:ed:68:db:6c:e2:99:62:11:15:7b:43:ac:dc:bb:
                    22:37:38:b7:c3:ad:92:40:09:ac:86:66:f9:22:07:
                    be:43:8c:2d:d0:d4:21:79:17:7d:00:0c:0e:54:ba:
                    14:4b:e0:b7:8f:e3:80:cb:85:87:6e:60:b1:87:d7:
                    86:30:74:21:a2:3b:49:c9:66:9a:19:a8:06:79:73:
                    34:b9:47:1a:58:66:49:bc:ad:a7:43:b4:01:78:6b:
                    b3:94:5c:b8:42:3f:7a:88:92:19:61:10:92:44:d1:
                    b5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5F:F5:0A:42:81:C7:42:D2:5F:33:BF:F7:EB:F8:A0:9F:2E:A9:56
            X509v3 Authority Key Identifier:
                keyid:5E:BD:EC:8C:B5:BB:EC:06:16:5E:8C:39:DD:BC:7A:E2:61:91:8A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1248882eb1c8e66ab5c23f667362567e6d7db671.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/fc8337ef3f6f1120ed7539a371fdd48ce9693514.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0cee299d-f822-4f9d-8f19-5687c20027bd/1248882eb1c8e66ab5c23f667362567e6d7db671.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.104.0/22
                IPv6:
                  2803:1440::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:45:f0:f4:e1:36:21:f4:34:4d:54:a4:92:c4:cd:c3:74:bd:
         e0:72:d0:96:9f:28:87:47:a5:29:84:ae:34:df:b9:d5:68:74:
         b3:f0:f3:98:dc:dc:4c:7f:83:81:e4:2b:d8:15:40:b2:62:e6:
         af:f0:e0:70:21:a8:f7:0f:76:f7:ba:a8:29:47:5e:26:ce:ce:
         94:2f:f1:e8:78:5a:82:f9:dd:ba:74:0a:dd:03:4a:1d:35:9c:
         23:c9:16:71:cf:aa:5d:d3:3b:99:96:a4:1c:cc:33:6b:ae:9e:
         b5:be:39:b2:3c:07:79:7a:53:b8:d2:61:78:36:bb:7a:ec:f8:
         88:a9:c7:aa:1d:1a:21:25:ff:14:35:96:8b:c3:33:31:c9:bd:
         3e:49:cf:39:ed:5f:3d:d8:7c:cb:2f:9c:53:49:50:9d:d5:30:
         7a:9d:a8:05:2d:ff:f4:15:34:3a:8e:0d:21:38:c6:98:4d:64:
         cd:98:f9:8f:c1:c2:c6:10:2c:24:cb:ca:1d:d3:a7:a9:86:2d:
         71:0e:f2:d7:4e:70:ab:25:3f:61:c9:44:8b:a5:a9:d4:45:59:
         76:0d:84:d3:0c:80:f7:d1:47:3a:e3:c9:d2:a8:ba:36:86:36:
         a4:bf:f8:e7:43:18:43:d4:64:6c:96:ca:8d:f5:3f:84:72:69:
         ec:4e:ec:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----