Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/e4d54010357e8b865b12b87e5700ff09a285b753.roa
File:                     e4d54010357e8b865b12b87e5700ff09a285b753.roa (raw, json)
Hash identifier:          SefXjUn1ywQuwtYtvnh0eVBwLHKnhe23qrAmImU4kxU=
Subject key identifier:   A5:78:12:53:7D:94:3B:95:4F:D6:4B:65:6B:2A:44:88:E6:03:78:FA
Certificate issuer:       /CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
Certificate serial:       20C60A
Authority key identifier: 9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/e4d54010357e8b865b12b87e5700ff09a285b753.roa
Signing time:             Wed 14 Jun 2023 04:36:37 +0000
ROA not before:           Tue 13 Jun 2023 04:36:37 +0000
ROA not after:            Sat 14 Jun 2025 04:36:37 +0000
asID:                     263795
IP address blocks:        138.204.108.0/23 maxlen: 24
                          138.204.110.0/24 maxlen: 24
                          190.105.168.0/22 maxlen: 24
                          2803:ac40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147850 (0x20c60a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39cac9b8258cbecd7f49618f9f9179bb699f6cfe
        Validity
            Not Before: Jun 13 04:36:37 2023 GMT
            Not After : Jun 14 04:36:37 2025 GMT
        Subject: CN=e4d54010357e8b865b12b87e5700ff09a285b753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6d:22:ae:f0:0c:63:5f:e0:a6:68:e4:4a:f5:
                    fd:c9:58:b4:7b:1b:2d:dc:86:48:3d:51:c9:08:63:
                    65:c4:24:0f:18:e2:58:58:0c:c9:27:35:7b:25:a1:
                    22:06:09:fc:1d:58:d4:66:25:b1:11:c2:6a:93:59:
                    db:a2:cc:68:d4:6d:74:79:d1:a6:06:a0:1a:c8:62:
                    56:78:28:ee:7d:e3:0b:03:9b:65:a5:2a:fe:9b:46:
                    68:6f:9a:5e:84:e4:66:97:4b:91:11:46:07:bf:26:
                    c8:3e:a0:b4:1e:40:73:e3:8d:e8:28:1e:59:71:8c:
                    85:99:77:b7:32:0a:ed:9a:a0:1e:7d:0a:91:aa:ac:
                    2a:e7:87:49:53:fc:18:6e:5a:c4:8a:cd:36:b3:c1:
                    a8:7a:23:22:9b:81:7f:97:45:7c:73:4b:9f:10:37:
                    75:19:d5:38:4f:19:16:59:c5:11:86:72:71:cf:58:
                    93:e8:ef:4f:96:b5:6a:9f:4e:be:f6:de:f3:14:85:
                    1c:4d:25:d4:1e:05:98:8c:ff:ff:ed:eb:22:70:c8:
                    48:1d:9e:e2:52:ed:4f:b6:77:9d:ef:ee:fa:3c:dc:
                    cd:d7:41:48:fc:dc:11:5e:ad:61:7a:2d:e5:d9:77:
                    8d:e9:45:fd:d9:df:23:43:82:53:80:ca:90:b3:4d:
                    2e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:78:12:53:7D:94:3B:95:4F:D6:4B:65:6B:2A:44:88:E6:03:78:FA
            X509v3 Authority Key Identifier:
                keyid:9E:C7:8A:28:C0:2E:E6:96:77:B3:45:42:8A:E0:95:FD:92:99:FA:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/e4d54010357e8b865b12b87e5700ff09a285b753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d176b0b-dfdd-4095-a6b4-eccb47ba5a51/39cac9b8258cbecd7f49618f9f9179bb699f6cfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.108.0-138.204.110.255
                  190.105.168.0/22
                IPv6:
                  2803:ac40::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:fb:30:56:84:b0:72:20:0f:c4:ad:45:56:58:c9:15:8b:f4:
         43:57:fd:ab:3a:c1:de:1a:f6:a0:bb:5b:f3:cc:ea:36:22:16:
         17:fa:5e:bc:5c:1f:11:b0:12:6f:36:46:97:8d:a4:81:8e:ed:
         84:70:59:f5:26:3d:6d:67:c7:75:d5:f5:e5:88:a9:42:3b:3e:
         b0:e5:35:d1:6d:52:c8:b3:f7:73:5f:af:c9:2c:0e:71:86:61:
         ef:27:dc:36:5d:85:13:36:bd:e9:d9:b4:38:66:cf:2e:f1:74:
         44:ef:58:01:78:58:cc:50:c5:f6:c3:a2:03:c9:cb:06:ac:64:
         61:2f:4c:f5:4f:1c:f4:58:68:a1:64:b1:6b:a0:66:4e:87:a5:
         a8:fe:c0:89:49:84:45:bb:fd:6a:d3:ea:2c:4d:d1:fc:80:78:
         22:c6:71:c2:6a:8a:30:a6:87:46:d2:05:c6:9c:97:c5:ab:22:
         3f:64:df:35:6d:2d:67:83:af:9c:9a:fe:a9:db:49:13:b9:2a:
         ff:9e:25:32:a0:b8:97:8f:b5:ce:fc:9f:a7:2a:cd:6e:fe:01:
         4b:92:f7:4d:fe:09:f3:ef:4a:d2:8a:b7:b7:8c:7a:7b:e2:6f:
         08:35:7c:0e:64:47:bd:5a:d0:10:c7:1b:c1:a0:e2:f1:21:b3:
         32:56:58:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----