Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/cfc4a24746f50627887f41ee7e0f65e6a9832f1a.roa
File:                     cfc4a24746f50627887f41ee7e0f65e6a9832f1a.roa (raw, json)
Hash identifier:          SHG5kLn036KrcB8exnpJJ64ubDyv2Wz4/mOmiKOq5dI=
Subject key identifier:   00:55:1E:1E:A5:AA:DD:1C:E5:B3:5C:B9:AE:FB:02:EE:54:3C:8D:3F
Certificate issuer:       /CN=cec1e6d8a1f33037dace1b9778780270c02863f0
Certificate serial:       17250F
Authority key identifier: A6:DC:CB:1E:24:96:F6:51:2D:02:3C:A1:39:91:D2:85:E5:63:D2:2C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec1e6d8a1f33037dace1b9778780270c02863f0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/cfc4a24746f50627887f41ee7e0f65e6a9832f1a.roa
Signing time:             Wed 05 Apr 2023 18:52:51 +0000
ROA not before:           Mon 22 Mar 2021 14:31:59 +0000
ROA not after:            Tue 24 Mar 2026 14:31:59 +0000
asID:                     263790
IP address blocks:        138.121.104.0/22 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516815 (0x17250f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec1e6d8a1f33037dace1b9778780270c02863f0
        Validity
            Not Before: Mar 22 14:31:59 2021 GMT
            Not After : Mar 24 14:31:59 2026 GMT
        Subject: CN=cfc4a24746f50627887f41ee7e0f65e6a9832f1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:d0:bb:f5:85:d8:b6:39:83:32:5d:80:b4:
                    97:86:03:ee:47:69:56:75:c7:8c:73:f1:6f:b1:f9:
                    73:e2:9f:3c:1c:73:91:a4:1a:f8:dc:09:09:da:7f:
                    52:cd:01:f7:b2:1f:40:84:9a:bf:be:3d:fe:1a:a2:
                    74:9f:85:22:3b:37:6b:38:e3:3a:e5:e7:01:fb:2b:
                    fd:81:e6:9a:e3:4b:67:44:06:97:50:45:64:5d:a5:
                    5c:5c:a9:7e:0c:8d:d1:97:69:0c:5f:c1:0a:95:b9:
                    56:da:e2:d0:b0:5e:06:7c:c0:bc:ca:f5:14:17:08:
                    ee:d6:4b:96:b6:96:fd:12:b8:c7:5e:f5:be:4b:45:
                    07:8b:9b:11:05:f3:18:55:6c:35:2d:f4:ea:e9:3e:
                    58:86:3c:fd:c3:01:79:f8:ff:4f:8b:9d:a7:dd:ec:
                    de:66:00:bc:94:15:56:b9:5f:d4:57:64:8a:4b:03:
                    30:c4:c6:be:3f:a1:f0:d2:3e:1e:11:d5:06:6e:78:
                    fa:8c:dd:0f:53:2d:16:b3:83:95:ca:33:b7:43:d9:
                    1a:c8:21:50:84:27:d7:3f:20:ad:c1:6a:ed:a9:e4:
                    0d:20:33:90:a2:e2:f2:55:3a:a0:5d:41:7d:25:0b:
                    5e:12:92:ca:34:a7:f5:b5:2a:a8:48:a7:75:f0:4d:
                    30:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:55:1E:1E:A5:AA:DD:1C:E5:B3:5C:B9:AE:FB:02:EE:54:3C:8D:3F
            X509v3 Authority Key Identifier:
                keyid:A6:DC:CB:1E:24:96:F6:51:2D:02:3C:A1:39:91:D2:85:E5:63:D2:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cec1e6d8a1f33037dace1b9778780270c02863f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/cfc4a24746f50627887f41ee7e0f65e6a9832f1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25dcc90b-ca27-44dc-935e-5413d68faebd/cec1e6d8a1f33037dace1b9778780270c02863f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b1:ae:23:4f:2f:ed:43:c8:14:6b:69:2b:bc:c5:12:d1:9b:c1:
         75:57:bf:fa:10:60:05:d2:f0:13:ca:a0:05:5e:50:0a:c0:f5:
         1c:4c:78:7d:8c:e1:91:2f:21:4b:ad:15:48:77:75:71:d0:b6:
         14:bd:ee:55:94:c2:ea:89:f4:6a:cf:4e:79:c4:d1:ad:dc:a4:
         55:a4:a4:73:7f:db:cc:38:68:11:54:0b:a6:b5:ad:f1:42:69:
         4d:a2:36:f0:78:20:8c:b6:8c:34:b0:9a:30:e8:c1:9b:bb:5b:
         81:b8:7f:9f:8f:da:c2:6f:0a:7e:cd:39:b8:78:5f:7c:78:be:
         63:e4:a3:b9:cd:85:71:a6:93:5f:fa:3c:5d:15:50:1b:d3:47:
         51:2a:c3:66:06:65:3b:1b:db:53:55:0f:de:b0:27:4b:9e:91:
         c0:42:c1:b9:b8:07:4b:7e:98:ab:7a:ac:3e:71:1e:48:2b:fb:
         b6:6b:e2:57:98:9c:04:ed:e2:0a:4c:31:b0:91:a8:4c:67:c7:
         ad:04:78:e0:d1:4c:f9:1e:30:f5:2b:18:06:8c:bf:e8:3f:9a:
         ab:5e:16:b6:2a:a2:e9:04:be:09:27:08:cd:02:00:04:78:93:
         21:af:d0:d5:12:96:3a:d6:e3:55:03:79:dc:e0:22:b0:02:9b:
         71:14:ff:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----