Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/596fd940559c72f154bc9575b22d656a4f92eebb.roa
File:                     596fd940559c72f154bc9575b22d656a4f92eebb.roa (raw, json)
Hash identifier:          5EwCVwo3zDOGfEK/ii3K+8jT2Ud6UN27dyMkMaNC1d0=
Subject key identifier:   02:1A:33:45:BC:CF:F3:F7:B9:7A:C2:4E:61:1D:92:16:DF:64:9B:7D
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24D77F
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/596fd940559c72f154bc9575b22d656a4f92eebb.roa
Signing time:             Mon 30 Oct 2023 12:07:11 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     61553
IP address blocks:        201.182.138.0/24 maxlen: 24
                          138.204.255.0/24 maxlen: 24
                          2801:168:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2414463 (0x24d77f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=596fd940559c72f154bc9575b22d656a4f92eebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a8:f5:30:cf:c5:f2:01:53:d7:47:8b:5e:af:
                    40:dd:56:04:bc:ff:84:d1:5f:f9:cb:a0:4c:69:3c:
                    07:52:67:dc:e1:3f:8f:97:5f:1a:f5:75:30:ef:67:
                    67:6b:06:cd:f1:ab:a5:ed:fc:b5:6c:59:11:37:5c:
                    92:c2:53:50:48:87:e3:c4:44:97:66:cb:d4:72:2e:
                    e1:88:7d:23:2d:7a:43:b1:8d:18:e5:03:a5:ef:22:
                    e0:60:e2:9d:ac:cb:5f:bd:74:44:83:d6:0d:d6:9b:
                    95:64:2e:c9:93:6e:b8:f4:ad:ed:54:4c:b1:b5:ae:
                    92:fa:0c:1c:c2:9d:48:3e:17:23:ed:bd:ed:9c:a2:
                    f9:51:49:73:81:eb:d2:9c:9b:50:34:64:27:1f:b0:
                    f5:48:cd:3c:8e:3a:a9:cd:cd:42:51:c5:88:32:2c:
                    81:d6:35:5e:9d:67:0d:50:a8:85:2d:10:ce:4a:ef:
                    0e:e5:2e:aa:37:26:ec:ae:b3:24:81:b8:f3:bd:23:
                    7b:14:96:06:83:63:0d:18:79:2a:18:89:78:b2:16:
                    e6:6e:fb:51:8a:e7:02:1e:d5:c6:2e:91:14:58:af:
                    b3:3a:47:19:a9:a2:20:36:b8:b9:60:05:4b:ff:36:
                    64:6f:43:c1:01:db:ee:e8:b8:04:79:5a:2a:da:6f:
                    7a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:1A:33:45:BC:CF:F3:F7:B9:7A:C2:4E:61:1D:92:16:DF:64:9B:7D
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/596fd940559c72f154bc9575b22d656a4f92eebb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.255.0/24
                  201.182.138.0/24
                IPv6:
                  2801:168:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:ae:48:d8:ea:1f:44:f6:36:a3:78:9e:19:f6:0f:e2:06:43:
         ee:87:a9:f3:e3:86:d8:59:78:fb:78:8b:bb:4c:9b:dd:1a:0c:
         e4:39:c9:db:66:4b:50:87:0c:4e:d9:20:55:e3:46:1f:22:1a:
         ec:3a:07:1e:3a:72:74:c9:ef:b5:72:0d:95:34:8c:ee:1a:90:
         05:0a:6d:8f:38:ae:5d:9f:cf:9c:60:35:bf:95:89:83:a1:99:
         26:f5:18:e6:88:96:c8:90:e2:1d:1d:54:b6:70:68:41:fe:ca:
         c6:d9:38:b2:6d:a4:c8:02:8f:bb:13:6a:8c:c7:86:07:05:f5:
         28:e6:a0:e7:75:e2:99:2f:0d:91:98:86:36:bd:86:e4:e8:d9:
         88:ca:e5:bf:90:ad:aa:90:db:ba:c6:64:7f:61:8b:82:e2:ce:
         e9:cd:00:39:aa:40:ee:af:3c:e3:78:b9:66:c2:6e:fd:e5:3b:
         90:58:6c:18:d8:52:78:3f:d4:18:76:3b:a0:c4:f8:ee:56:11:
         a3:02:8b:63:90:0d:57:c9:dc:8b:24:ef:5b:21:f3:bf:83:70:
         76:34:91:2e:b5:52:f2:94:1f:cb:fd:50:54:a0:6f:ca:ef:39:
         c5:b2:fb:79:49:84:8e:67:8a:c0:3b:a4:a7:7a:9c:d9:85:0c:
         d1:a6:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----