Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/8c361c2bffa76c2b34e8aca302ecca3edb7f149a.roa
File:                     8c361c2bffa76c2b34e8aca302ecca3edb7f149a.roa (raw, json)
Hash identifier:          HwZFfY5KUECn3mpPGDTBVCv9m8O1S/+94+TMSDDJOXk=
Subject key identifier:   09:C6:44:80:97:6A:C2:77:68:6D:7F:75:71:14:2D:97:97:D8:89:E1
Certificate issuer:       /CN=15cc5e31ff1fd8bfd449b0137858987f6db03d4c
Certificate serial:       1EB5C4
Authority key identifier: F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/8c361c2bffa76c2b34e8aca302ecca3edb7f149a.roa
Signing time:             Mon 02 Oct 2023 15:24:27 +0000
ROA not before:           Sun 01 Oct 2023 15:24:27 +0000
ROA not after:            Thu 02 Oct 2025 16:24:27 +0000
asID:                     263814
IP address blocks:        138.219.16.0/22 maxlen: 24
                          2803:7240::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2012612 (0x1eb5c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15cc5e31ff1fd8bfd449b0137858987f6db03d4c
        Validity
            Not Before: Oct  1 15:24:27 2023 GMT
            Not After : Oct  2 16:24:27 2025 GMT
        Subject: CN=8c361c2bffa76c2b34e8aca302ecca3edb7f149a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:97:43:63:4c:9a:ae:fb:83:f0:ef:64:0e:
                    8e:08:76:81:8e:57:f3:f5:3e:9a:92:20:d0:63:22:
                    7f:98:ca:f5:0a:94:58:28:b4:6a:79:b4:81:2d:f4:
                    6c:d1:65:98:3d:9c:17:c2:d6:a5:03:e7:e4:68:d0:
                    8f:08:9b:e6:57:44:ee:48:5f:79:81:07:8b:22:e2:
                    8c:8f:56:50:fb:7e:4e:ba:79:4c:9b:ca:d6:4b:34:
                    6d:98:c9:d1:92:a8:80:d0:e0:5d:14:a9:8f:9e:4f:
                    1b:a6:f1:37:08:eb:d0:a1:dc:3c:49:90:79:97:fe:
                    c7:fb:4b:c4:7e:98:10:cb:b5:10:cf:2b:1e:b2:bd:
                    5e:74:59:e2:65:eb:27:73:95:32:5c:b8:81:6a:91:
                    d8:fc:95:68:03:98:55:a1:ad:d2:ea:66:1d:da:33:
                    f1:51:07:5b:39:57:4f:2c:2d:37:45:57:4c:32:2e:
                    69:69:f6:40:2a:6e:7c:6c:be:28:84:ed:97:da:b3:
                    31:4a:7c:5d:8b:de:62:19:a8:23:34:31:bf:6e:20:
                    e5:95:13:54:66:e3:6a:c0:4c:de:25:a4:52:fe:6d:
                    b9:fb:e7:e1:00:8d:3e:a4:7e:c8:63:6d:44:fc:ee:
                    c9:bc:e4:3c:fb:cc:36:03:91:6a:5f:27:7e:c1:59:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C6:44:80:97:6A:C2:77:68:6D:7F:75:71:14:2D:97:97:D8:89:E1
            X509v3 Authority Key Identifier:
                keyid:F9:DE:9A:F0:1B:A8:91:DF:F3:C8:3D:37:DA:40:26:64:DF:5B:36:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/8c361c2bffa76c2b34e8aca302ecca3edb7f149a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24bca26d-3d24-45b6-87a1-a8be72f0af5a/15cc5e31ff1fd8bfd449b0137858987f6db03d4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.16.0/22
                IPv6:
                  2803:7240::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:cc:0f:2f:42:54:1c:e5:f7:04:63:cf:d2:7a:3d:59:0d:0a:
         54:9a:5d:25:71:f3:29:81:0b:5a:83:53:22:5e:e2:c8:6d:3b:
         fa:a3:20:d4:40:df:bd:1d:d3:77:3a:cd:12:5c:8d:56:62:bd:
         c9:ba:1a:01:10:8a:a9:d3:79:aa:e8:4b:bf:6b:03:48:c2:68:
         8f:79:91:6f:3c:93:a2:03:b9:50:ab:39:97:96:34:90:fe:a5:
         7e:4f:0c:84:a8:98:16:0b:93:7b:11:ce:eb:c8:71:94:9a:2c:
         c3:d3:ce:b2:12:37:2d:07:eb:51:25:1b:19:46:b2:6a:f7:54:
         a1:d4:4a:33:c1:f4:87:c4:f7:2b:5a:3b:44:bf:d1:1d:cf:1d:
         c9:c7:3e:74:dc:16:80:60:8a:ba:55:34:56:ca:9d:a0:88:1b:
         c3:ec:dc:88:c9:b0:00:b1:dc:73:52:f5:0d:e0:53:57:65:dd:
         8c:87:b1:91:67:3c:e6:47:84:14:a0:29:26:13:f0:64:bd:67:
         8e:e5:ef:5f:13:fe:e6:f0:e6:1f:1e:1a:c5:0a:07:47:2b:8f:
         c5:57:82:ee:d9:16:88:a5:8c:71:90:bd:21:36:5d:2a:88:50:
         d5:fc:38:47:0d:4a:c3:ca:f8:70:c7:60:58:8d:5d:46:c1:41:
         e8:02:ad:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----