Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/0dc5783826c16656d6e202a020e4bc4a07648755.roa
File:                     0dc5783826c16656d6e202a020e4bc4a07648755.roa (raw, json)
Hash identifier:          ivLJMwYQXlq6aoBTeBlZ5zQhFsLy5EAXkoj0TsW8LT4=
Subject key identifier:   7A:19:EA:A9:5B:5B:7C:D0:71:D1:C4:D0:60:3A:C5:30:13:53:F5:A2
Certificate issuer:       /CN=191101b10952d6795e5429d39bf676c36c363200
Certificate serial:       294FD0
Authority key identifier: 90:A9:19:9B:54:00:46:78:57:F8:5D:B3:CB:74:77:41:AF:95:1F:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/191101b10952d6795e5429d39bf676c36c363200.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/0dc5783826c16656d6e202a020e4bc4a07648755.roa
Signing time:             Mon 15 Apr 2024 11:38:40 +0000
ROA not before:           Mon 15 Apr 2024 11:38:40 +0000
ROA not after:            Wed 15 Apr 2026 11:38:40 +0000
asID:                     263739
IP address blocks:        138.59.0.0/22 maxlen: 28
                          2803:3f80::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2707408 (0x294fd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=191101b10952d6795e5429d39bf676c36c363200
        Validity
            Not Before: Apr 15 11:38:40 2024 GMT
            Not After : Apr 15 11:38:40 2026 GMT
        Subject: CN=0dc5783826c16656d6e202a020e4bc4a07648755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:5d:af:a7:35:79:5c:5c:fc:3e:a8:87:c2:
                    bc:f7:47:e3:38:a6:4e:25:82:a4:27:0e:95:33:58:
                    b1:34:c2:1b:82:31:2e:90:26:57:33:77:b0:8e:d6:
                    01:32:dc:4a:cc:11:57:d5:4d:64:43:7f:c4:51:7b:
                    ad:a6:f7:f3:00:3a:1d:1c:df:45:d2:0c:81:cd:cd:
                    fe:10:e2:94:e5:70:3d:ea:63:3c:38:d8:29:d2:03:
                    14:17:35:29:f8:75:2d:f0:84:91:a4:87:7d:29:49:
                    c4:e2:ec:48:b4:92:37:96:fc:ae:b2:1a:21:07:77:
                    76:ba:9a:ec:f0:77:27:02:70:5a:70:f6:99:98:61:
                    29:1a:e3:ce:95:30:30:f1:a8:11:9e:fe:fd:80:6f:
                    cd:8e:b4:30:35:1d:c7:80:44:bf:04:b3:c3:de:94:
                    38:c9:aa:20:8e:60:ab:c3:ae:73:42:81:1e:54:4e:
                    59:6f:f7:6e:4c:fd:78:b1:60:2d:55:9d:cd:08:16:
                    36:c1:15:d7:cf:2d:2f:0b:3e:83:29:24:5e:e3:2c:
                    a1:b4:5e:1e:c6:dc:54:5b:81:04:86:2f:f1:50:a6:
                    b6:8d:9c:c4:1c:5f:7d:7a:09:e4:bd:fb:7e:49:57:
                    12:2a:66:23:9e:75:23:30:7a:98:6d:76:4e:f9:aa:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:19:EA:A9:5B:5B:7C:D0:71:D1:C4:D0:60:3A:C5:30:13:53:F5:A2
            X509v3 Authority Key Identifier:
                keyid:90:A9:19:9B:54:00:46:78:57:F8:5D:B3:CB:74:77:41:AF:95:1F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/191101b10952d6795e5429d39bf676c36c363200.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/0dc5783826c16656d6e202a020e4bc4a07648755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/35edb4a0-d1cc-4489-b575-3c29f055b3c3/191101b10952d6795e5429d39bf676c36c363200.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.0.0/22
                IPv6:
                  2803:3f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:ac:1a:06:c9:0c:91:6e:96:fe:7f:56:ce:bf:84:3f:1c:5d:
         e3:8e:34:1c:55:b9:9b:52:17:fb:3e:cf:dd:46:83:c3:92:b2:
         69:b5:17:c4:9d:a8:0a:0b:10:13:a5:15:7e:d4:24:f1:52:9a:
         a3:2f:5e:3c:83:9f:0a:cd:58:d2:34:55:af:4a:23:de:05:fe:
         99:7b:b0:58:ba:c4:a9:ea:1f:83:4a:04:fa:de:66:a1:87:67:
         0f:77:e4:27:4d:69:18:f8:a8:fb:87:58:93:b0:08:85:b4:5a:
         a4:8b:bc:51:3d:39:20:6c:7d:86:9d:da:6c:0d:50:37:b5:b1:
         7f:be:81:5e:37:8e:3a:06:7c:7c:bd:03:63:47:d5:da:3a:81:
         70:13:97:ec:8d:3e:1d:92:68:51:3d:52:5b:d3:bc:1d:11:35:
         93:99:0c:2a:ae:26:e0:7a:ab:ae:c2:35:8e:bd:22:c1:4c:28:
         a7:3c:3a:bb:26:15:05:05:6e:0a:76:29:32:83:89:8a:5c:a9:
         72:fa:95:e5:3f:56:2b:2b:60:9b:6c:dc:33:27:20:9e:1e:94:
         cc:34:bd:20:92:2b:d4:fb:96:ec:21:52:32:23:d5:4a:1f:67:
         06:68:25:e6:50:41:b5:9e:33:2a:50:c2:ae:43:cb:b2:35:2c:
         3e:39:f5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----