Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/5dea7c944d234968aff6c11974ab26e416c061c5.roa
File:                     5dea7c944d234968aff6c11974ab26e416c061c5.roa (raw, json)
Hash identifier:          ClQpu6Mmr3WmOXB3idQZzCwqwttq8+YiKrlxXN2c1Qs=
Subject key identifier:   01:C0:FB:AE:9F:CA:79:29:DB:54:70:A9:AF:31:49:58:E6:23:C4:AB
Certificate issuer:       /CN=905680316617a29b241d379e0113b16e54308042
Certificate serial:       218BD4
Authority key identifier: 89:FA:23:44:5F:58:ED:8C:86:1C:A8:D5:0C:46:C3:4C:A4:79:DF:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905680316617a29b241d379e0113b16e54308042.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/5dea7c944d234968aff6c11974ab26e416c061c5.roa
Signing time:             Sat 09 Sep 2023 14:32:50 +0000
ROA not before:           Fri 08 Sep 2023 14:32:50 +0000
ROA not after:            Tue 09 Sep 2025 14:32:50 +0000
asID:                     264651
IP address blocks:        138.186.148.0/22 maxlen: 24
                          2803:fc40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2198484 (0x218bd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=905680316617a29b241d379e0113b16e54308042
        Validity
            Not Before: Sep  8 14:32:50 2023 GMT
            Not After : Sep  9 14:32:50 2025 GMT
        Subject: CN=5dea7c944d234968aff6c11974ab26e416c061c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:55:a7:14:9c:ed:60:7f:64:fc:16:6b:c6:5c:
                    59:5d:3d:03:ef:04:d8:b1:29:c3:bc:74:66:41:82:
                    48:b3:fb:32:d8:b2:33:15:b7:29:bf:38:af:bd:98:
                    67:32:4c:02:d3:a9:2c:3b:b5:13:85:db:35:0a:e1:
                    63:63:9a:b0:4a:7d:8e:03:7f:03:bc:71:0a:c0:02:
                    6c:58:d0:e9:d7:9d:46:1b:6f:4d:9b:20:0e:cb:55:
                    72:49:73:b8:cf:2b:69:de:de:f4:d9:33:2d:42:5a:
                    55:57:15:38:18:ef:71:b2:1f:95:5a:7d:26:54:13:
                    6b:02:11:0c:05:ce:a4:bc:11:b6:bb:43:41:58:ea:
                    40:b5:06:0f:42:5d:d4:13:f4:7a:95:01:86:a9:48:
                    72:d0:57:fd:a2:26:78:e9:a9:1a:9d:07:4b:ab:4b:
                    cc:22:c7:5e:66:1c:41:a8:a6:b9:b9:9d:ac:66:1c:
                    8c:2e:ce:c0:d6:f1:38:ee:91:03:47:03:95:59:f3:
                    83:3a:8a:57:f4:cf:48:06:3c:da:8a:87:21:ba:a0:
                    d1:6f:81:6c:50:cb:db:a9:f8:46:05:92:eb:df:27:
                    28:56:4f:4a:fb:5a:91:c7:fc:1b:12:f7:e3:26:4c:
                    60:34:d3:44:e5:3b:ec:75:b7:d8:0f:28:53:82:ba:
                    17:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C0:FB:AE:9F:CA:79:29:DB:54:70:A9:AF:31:49:58:E6:23:C4:AB
            X509v3 Authority Key Identifier:
                keyid:89:FA:23:44:5F:58:ED:8C:86:1C:A8:D5:0C:46:C3:4C:A4:79:DF:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/905680316617a29b241d379e0113b16e54308042.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/5dea7c944d234968aff6c11974ab26e416c061c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/17da8695-b259-47ee-94c1-e9ff7d13e2ef/905680316617a29b241d379e0113b16e54308042.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.148.0/22
                IPv6:
                  2803:fc40::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:c4:79:00:72:e8:04:db:72:31:2a:8a:82:dc:9a:30:87:b0:
         79:6e:8f:70:12:d2:15:43:f3:3b:f5:88:7a:04:35:d7:df:6d:
         02:7c:dc:2b:71:fa:4b:55:9e:f5:65:51:ff:6b:04:1c:87:f9:
         cd:bd:1d:86:5c:c1:62:28:8f:ca:a9:32:ae:6f:0b:73:cd:78:
         65:5a:a4:ad:10:e6:ee:85:ec:f8:52:cf:94:5f:8d:4f:3b:8f:
         b7:b1:61:ba:37:f0:80:ae:03:2d:77:45:11:ff:5a:9a:d5:d9:
         05:4c:b8:ba:1f:1d:62:ea:57:ac:0e:3a:2b:8d:d9:03:24:17:
         d4:41:8c:f0:a7:0a:f6:95:61:15:72:cd:9e:30:e1:62:5f:32:
         09:b9:fd:e6:11:5e:4d:22:7b:83:a9:d3:af:58:c5:4b:e1:e8:
         57:69:bc:f1:0a:7d:26:bb:df:1e:e2:da:cc:27:bd:19:78:c1:
         3c:b3:2f:8c:96:6b:49:63:c9:6e:76:05:fb:4d:aa:45:d9:15:
         61:d4:79:05:4d:8e:22:70:e7:dd:76:82:0d:4b:6e:47:11:e4:
         51:93:a5:7f:d2:e1:c5:a8:2c:30:78:fa:6f:45:eb:08:4c:50:
         3a:6c:93:ba:ec:11:11:01:b6:dc:0a:27:1e:20:27:54:cd:9b:
         11:bf:ea:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----