Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/4edbcb0fade7dd51da7289f771cf7c05858c074c.roa
File:                     4edbcb0fade7dd51da7289f771cf7c05858c074c.roa (raw, json)
Hash identifier:          fH9lJ1OGgNoJtVKm3cmeEvrXmbZFr/PFsl/s2x26qqA=
Subject key identifier:   7B:0D:4F:17:7B:D4:88:8C:63:9A:6C:40:46:59:4F:52:B5:E9:B9:98
Certificate issuer:       /CN=15cc5e31ff1fd8bfd449b0137858987f6db03d4c
Certificate serial:       1AA397
Authority key identifier: F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/4edbcb0fade7dd51da7289f771cf7c05858c074c.roa
Signing time:             Sat 22 Apr 2023 08:30:01 +0000
ROA not before:           Fri 21 Apr 2023 08:30:01 +0000
ROA not after:            Sun 20 Apr 2025 08:30:01 +0000
asID:                     263814
IP address blocks:        138.219.16.0/22 maxlen: 22
                          2803:7240::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1745815 (0x1aa397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cc5e31ff1fd8bfd449b0137858987f6db03d4c
        Validity
            Not Before: Apr 21 08:30:01 2023 GMT
            Not After : Apr 20 08:30:01 2025 GMT
        Subject: CN=4edbcb0fade7dd51da7289f771cf7c05858c074c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b8:73:a3:90:7f:87:a5:75:45:25:b5:6f:09:
                    f0:dd:a4:ca:c7:aa:e8:7d:41:c4:30:f4:b4:88:cf:
                    f6:21:6b:72:43:12:6b:69:26:53:3f:48:6b:7c:07:
                    9f:8d:1d:8f:35:ee:d7:d9:4a:e4:e8:da:80:ce:4c:
                    f2:12:64:53:98:9c:f8:9c:94:dc:3f:80:7e:05:c0:
                    73:ac:3f:74:da:6d:70:10:22:7c:b8:d9:23:72:15:
                    7e:56:76:ba:f6:6c:f8:ec:9b:d6:ed:21:57:6c:27:
                    21:a7:90:ef:4b:46:ff:32:c7:8e:b1:cd:46:6d:f9:
                    89:b2:35:77:03:a1:e9:d7:86:5e:7e:15:80:07:86:
                    9f:fa:8e:40:9c:6d:18:22:49:b8:47:d1:ea:04:7f:
                    82:9c:f8:41:dc:44:59:3b:52:8d:a6:cb:12:f6:1e:
                    33:2a:ca:b8:25:63:c8:30:52:da:18:34:04:97:15:
                    40:ad:5b:c9:09:45:c2:25:4d:1f:f7:3f:84:fb:6b:
                    b4:24:04:da:9f:00:44:15:43:e2:64:26:a8:d6:ff:
                    68:01:85:31:a8:65:89:eb:e7:7c:18:fe:de:b4:e6:
                    13:35:33:47:78:90:af:8b:93:5a:e2:b5:74:ce:96:
                    19:0e:27:f0:46:7f:06:cc:79:f9:97:a8:8d:77:97:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:0D:4F:17:7B:D4:88:8C:63:9A:6C:40:46:59:4F:52:B5:E9:B9:98
            X509v3 Authority Key Identifier:
                keyid:F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/4edbcb0fade7dd51da7289f771cf7c05858c074c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.16.0/22
                IPv6:
                  2803:7240::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:5f:9c:e4:6e:0c:a6:50:38:38:1f:b5:41:7e:17:28:b3:ff:
         9f:a6:1c:34:9a:55:6d:07:73:4b:10:b5:55:0d:6b:a4:07:32:
         8a:54:f0:b0:35:fb:f6:11:50:b7:fa:80:7d:e8:d1:be:d5:ac:
         fd:cd:04:14:6d:f6:9b:2d:00:ce:13:2c:54:27:7b:03:69:25:
         6c:d7:d0:a5:af:8d:69:99:de:40:2f:07:51:25:6d:a6:aa:79:
         97:c5:66:5f:63:c4:76:ed:24:fc:74:ef:60:b5:dd:5f:cd:26:
         00:4b:c9:44:40:49:3c:0c:92:7b:dd:54:d5:74:04:8e:30:b2:
         15:10:e0:ba:72:19:10:3a:54:18:a1:0d:3e:62:5a:80:db:2d:
         87:0a:7b:e0:2b:8a:6a:03:35:d1:07:d0:6c:57:75:6d:14:c6:
         10:f6:e4:7c:b3:e6:c3:51:4c:ec:11:d6:87:a0:a4:54:8a:b0:
         c1:99:ea:05:08:d4:a8:f1:68:ca:f4:f7:ad:78:74:2c:88:40:
         21:aa:8c:af:da:9a:62:24:75:31:be:50:df:dd:46:2d:bd:96:
         af:6f:c5:d4:61:1a:e9:6f:93:24:dd:14:7d:bc:0e:1a:84:85:
         9f:9d:1c:93:1b:1c:6d:b2:a6:ac:cf:98:69:f3:82:0f:bc:7f:
         03:57:27:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----