Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/1dc9b9bfe52b99b57f9c0e38a907e2f22605ed08.roa
File:                     1dc9b9bfe52b99b57f9c0e38a907e2f22605ed08.roa (raw, json)
Hash identifier:          7p/BW1GjPHwXRaCe0XkuiGHqQ0D5jihqE+HqgA4lbZA=
Subject key identifier:   5D:B1:0E:B9:40:CB:95:69:7F:AB:FD:8B:9B:DA:CF:F0:A2:E3:F9:0A
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24B8E2
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/1dc9b9bfe52b99b57f9c0e38a907e2f22605ed08.roa
Signing time:             Mon 30 Oct 2023 12:06:54 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     52509
IP address blocks:        201.182.139.0/24 maxlen: 24
                          138.204.248.0/24 maxlen: 24
                          2001:13c7:601a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406626 (0x24b8e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=1dc9b9bfe52b99b57f9c0e38a907e2f22605ed08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f2:cc:ae:17:ac:ac:18:39:b5:35:97:b2:ee:
                    3c:8f:8a:8e:ac:f9:d4:0b:5f:2f:d3:78:d5:9a:2e:
                    b4:14:df:11:69:bd:64:cb:13:86:f0:c7:0b:f2:29:
                    08:97:48:73:08:37:35:c1:82:1b:63:60:ac:11:e0:
                    5c:21:20:3e:ff:ee:57:bf:0c:c4:11:3c:61:1c:f6:
                    e7:61:29:f4:5e:bd:a3:75:21:77:96:8c:1c:30:39:
                    e3:57:1c:58:70:2c:92:f3:19:7b:a6:13:20:43:70:
                    2b:24:cc:ce:f4:4e:95:32:5f:09:4b:2d:f9:09:02:
                    24:58:da:14:21:ce:57:97:b8:fb:35:89:14:21:9c:
                    4d:ca:ae:9a:20:af:1f:fb:d8:c1:52:a2:fc:99:5f:
                    2d:61:ab:b9:a2:90:d6:6b:d5:81:a7:5c:1b:e5:3b:
                    06:07:a3:4c:30:4f:fa:e0:5b:e3:cc:54:83:bd:b2:
                    71:7b:70:b7:54:da:49:97:d4:63:68:cb:fd:08:04:
                    1a:ba:2c:1a:17:a4:e9:1f:67:87:a0:9f:68:35:1f:
                    54:9a:76:29:8f:05:9c:1f:1d:3d:7b:80:78:e1:c8:
                    5a:63:92:44:a6:fb:9a:b6:a0:f4:61:03:a0:ea:4e:
                    c2:52:6c:09:8a:be:ff:83:20:d1:ed:0e:02:62:bb:
                    d5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B1:0E:B9:40:CB:95:69:7F:AB:FD:8B:9B:DA:CF:F0:A2:E3:F9:0A
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/1dc9b9bfe52b99b57f9c0e38a907e2f22605ed08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.248.0/24
                  201.182.139.0/24
                IPv6:
                  2001:13c7:601a::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:19:c5:fd:bb:8d:10:99:3b:48:b9:35:68:83:77:9b:df:dc:
         17:1d:6d:49:78:54:1d:83:b2:21:0e:a5:0f:ac:8c:f6:84:d9:
         a9:47:4c:64:c8:80:01:ec:f6:f2:7c:ed:d4:df:40:b8:49:31:
         d2:61:87:4b:7e:ab:3c:25:b5:10:79:e3:4d:fa:b8:4a:74:51:
         cf:92:f1:0e:42:d0:3c:18:73:ef:78:a5:e8:d3:65:41:55:72:
         f8:39:8e:98:2f:ed:19:80:f2:06:fd:8a:f0:08:25:97:f5:07:
         d0:53:21:57:f3:d0:60:73:38:81:54:fa:09:c2:78:5a:6c:81:
         f4:81:1a:be:cd:06:f8:e6:cd:0c:36:74:20:eb:9f:b9:1f:a8:
         b5:ce:88:3e:65:02:4c:17:89:35:b0:55:62:18:a7:08:cd:69:
         a5:20:d2:01:ae:fc:6b:fe:4f:36:65:c3:03:f6:99:89:47:53:
         b8:6f:76:d6:11:3d:e6:a2:54:3c:f1:4e:03:2d:ba:ac:34:e6:
         49:df:b2:17:ee:10:82:af:ac:ad:06:48:a8:6f:1b:e4:e0:43:
         b7:8a:42:bf:74:5b:66:1c:28:5e:91:90:09:09:99:af:9c:37:
         6d:12:9e:fc:bd:b5:12:75:84:17:c2:af:ca:b3:18:8d:3f:47:
         fa:f1:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----