Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/f4a2fef04ed28b7fb96ead68b4dba164ae11ed5d.roa
File:                     f4a2fef04ed28b7fb96ead68b4dba164ae11ed5d.roa (raw, json)
Hash identifier:          ggK3W/BVesdPO1AIZtU/GuElDAbddtjM/vtDL/31UMU=
Subject key identifier:   24:CA:FC:72:F3:85:08:6F:FE:63:07:A6:D9:0A:02:3F:DB:35:C3:2B
Certificate issuer:       /CN=1bcfea8d0412e4c6eee276cfa4586b58320bdf8c
Certificate serial:       18719F
Authority key identifier: 25:62:D7:CD:09:64:F6:31:4C:A9:D6:01:5A:E4:A2:ED:F3:08:C8:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/f4a2fef04ed28b7fb96ead68b4dba164ae11ed5d.roa
Signing time:             Tue 18 Apr 2023 16:36:51 +0000
ROA not before:           Mon 17 Apr 2023 16:36:50 +0000
ROA not after:            Fri 18 Apr 2025 16:36:50 +0000
asID:                     270073
IP address blocks:        138.118.200.0/22 maxlen: 24
                          2803:23e0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1601951 (0x18719f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bcfea8d0412e4c6eee276cfa4586b58320bdf8c
        Validity
            Not Before: Apr 17 16:36:50 2023 GMT
            Not After : Apr 18 16:36:50 2025 GMT
        Subject: CN=f4a2fef04ed28b7fb96ead68b4dba164ae11ed5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fc:21:f5:0c:c8:b4:53:f1:14:2a:37:ea:54:
                    28:6c:d0:46:15:b8:13:83:13:b5:fc:fa:3f:33:a1:
                    fd:ab:36:d1:4b:52:61:97:8f:ef:a9:bc:47:1e:79:
                    e4:b9:be:45:5b:d0:ba:18:16:b6:72:30:4c:f4:98:
                    c5:7a:bb:05:4f:0a:a8:f8:c2:d6:00:c1:4f:4c:6c:
                    bb:4e:f9:31:fc:55:5d:16:46:8c:1b:5d:02:93:23:
                    0c:63:f6:2c:fb:c4:8a:f7:d6:14:65:ba:4c:82:38:
                    78:03:fd:47:22:49:29:f1:aa:c6:26:f8:ee:60:ba:
                    2e:17:95:7c:2c:92:52:c2:cb:e9:be:05:bc:8d:e2:
                    e8:1c:15:de:01:f0:88:33:10:9a:98:de:86:e9:3d:
                    17:58:4d:c9:f5:46:ab:23:60:98:b6:c5:00:d7:9c:
                    4c:ae:ac:4e:80:54:e0:99:a3:1b:de:ce:0c:11:1a:
                    b8:cc:e1:87:31:23:20:3b:6f:3d:8a:fd:f6:df:e1:
                    c1:3b:59:88:4f:2a:21:6a:b1:ea:cb:88:8d:3e:8f:
                    d6:79:b3:79:f7:43:ce:6b:5f:a8:a2:a7:93:6d:7c:
                    00:4a:de:b9:e5:b6:97:85:b1:f5:5e:34:1b:47:0c:
                    38:dd:20:28:f1:e4:61:b9:73:3c:2f:dc:a5:a1:d6:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CA:FC:72:F3:85:08:6F:FE:63:07:A6:D9:0A:02:3F:DB:35:C3:2B
            X509v3 Authority Key Identifier:
                keyid:25:62:D7:CD:09:64:F6:31:4C:A9:D6:01:5A:E4:A2:ED:F3:08:C8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/f4a2fef04ed28b7fb96ead68b4dba164ae11ed5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/135632df-9761-412f-9c4f-0111d9aff3ad/1bcfea8d0412e4c6eee276cfa4586b58320bdf8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.200.0/22
                IPv6:
                  2803:23e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:70:58:98:c2:41:77:8c:99:a1:b9:a1:c4:82:24:d8:6f:ef:
         c8:ec:f2:ce:43:25:cc:5f:dd:50:62:26:55:53:f2:0f:19:50:
         16:52:f3:f2:61:08:ac:6a:22:12:ed:49:5f:eb:09:b6:bf:b6:
         27:ee:2c:43:f8:57:eb:42:97:df:82:6a:28:cf:b3:47:a3:47:
         25:ad:01:cc:8b:b6:9b:eb:3e:97:91:6c:d6:68:4d:84:66:e8:
         79:b8:b3:4f:c6:84:16:de:e0:b2:e2:78:77:1b:de:de:6c:8a:
         35:04:f8:86:2e:9b:99:38:ef:a4:5e:3f:f3:97:f6:8d:91:1a:
         1e:fb:31:1f:2e:fe:dc:fc:4c:3b:ae:cf:14:21:f6:35:8d:38:
         08:90:59:5b:27:3e:4a:08:bd:2c:87:01:08:0a:5b:ea:0b:b3:
         44:28:36:9d:3c:26:52:75:7a:34:a1:68:a5:b8:cb:31:b9:fb:
         42:bc:a8:33:f8:33:55:b1:34:c3:c4:66:72:9e:4c:b2:c5:be:
         8e:df:6c:b5:f6:6f:61:47:06:a1:cd:06:fb:82:f4:65:07:75:
         62:4d:d0:cd:fe:34:c8:bc:85:83:7b:ed:de:f9:25:9a:b4:4e:
         17:17:ae:f7:73:35:26:58:68:82:26:ef:ac:f1:b1:4d:66:68:
         64:d6:93:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----