Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/5e326176499c905e4a25d05b7d52364d779c10c0.roa
File:                     5e326176499c905e4a25d05b7d52364d779c10c0.roa (raw, json)
Hash identifier:          2pEytsSNX4qYwvI1QC9/jT6nkUVcja/DWCf3X6ADDcY=
Subject key identifier:   92:7D:E8:0A:25:27:A5:2C:CD:E2:ED:FD:84:C6:C6:56:A7:0C:C8:68
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24733A
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/5e326176499c905e4a25d05b7d52364d779c10c0.roa
Signing time:             Mon 30 Oct 2023 12:06:35 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     61504
IP address blocks:        138.204.245.0/24 maxlen: 24
                          138.219.1.0/24 maxlen: 24
                          2001:13c7:6017::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388794 (0x24733a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=5e326176499c905e4a25d05b7d52364d779c10c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a4:03:19:3a:7c:55:5f:b9:15:26:c8:38:09:
                    fa:0a:11:01:2b:05:0a:cf:10:92:f9:27:ef:25:0c:
                    6e:bc:49:cc:89:49:23:fd:6b:30:d9:56:da:6b:15:
                    e1:29:fd:1a:8b:30:e3:16:b0:83:68:f5:d8:a1:de:
                    0c:ae:13:b1:36:b5:f8:1c:6c:8d:6c:ec:49:24:7a:
                    cc:d4:dd:0a:af:eb:a3:bb:b7:5e:1a:05:f2:dd:7b:
                    45:4d:4b:42:7e:f6:66:b9:91:0a:70:2b:53:cf:2b:
                    9c:da:e6:09:8c:08:8e:ad:4e:62:70:c4:4f:a2:6c:
                    07:e7:68:50:13:c9:48:2a:6c:a1:a7:ad:7d:fd:5d:
                    82:df:45:29:03:63:5b:05:2e:5a:67:bb:06:8d:67:
                    df:37:40:81:ec:5f:7b:2d:e0:94:49:2d:c2:b3:2a:
                    02:69:29:3f:1e:e6:e4:7e:58:d2:65:47:c2:ef:ba:
                    dc:a7:5e:d0:3c:3d:48:b8:43:7a:e0:08:f0:1e:cf:
                    6b:ce:18:bf:f3:36:d0:25:99:12:7c:1a:61:1b:93:
                    f0:ab:a6:c5:88:db:17:48:29:37:9f:3d:5b:11:12:
                    69:00:e1:ff:06:01:e6:04:a9:78:8f:00:81:2b:d4:
                    f4:b3:33:05:34:1e:17:79:3e:38:b7:e9:cb:10:c8:
                    62:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7D:E8:0A:25:27:A5:2C:CD:E2:ED:FD:84:C6:C6:56:A7:0C:C8:68
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/5e326176499c905e4a25d05b7d52364d779c10c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.245.0/24
                  138.219.1.0/24
                IPv6:
                  2001:13c7:6017::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:14:0b:0c:a9:7a:c9:c2:00:2e:d8:d2:6e:08:0a:8d:70:57:
         75:02:d8:10:e5:05:e7:2c:3b:ed:09:cc:63:3d:75:2d:76:0e:
         35:c1:59:16:2d:99:a7:7b:6b:69:de:14:8a:07:1c:d7:0b:78:
         6c:e4:41:b2:9b:18:33:ca:cf:3a:92:52:86:da:f6:e5:a1:71:
         f4:0c:00:b8:bf:61:57:16:5d:3a:af:cd:09:b2:e0:cd:a5:11:
         0a:1a:28:a7:ca:39:9f:44:66:af:e6:f2:b1:69:67:13:d6:83:
         ca:47:d2:72:98:c9:ad:91:10:80:10:6e:32:fb:57:a2:ce:f0:
         a4:d4:b6:c8:ff:30:34:53:70:a4:55:5a:2a:d0:a4:b9:9e:0f:
         2d:85:71:77:c3:52:c5:c1:ce:7f:d8:21:9a:05:45:49:48:3f:
         16:78:36:c2:dd:79:e0:1f:80:2d:59:d0:31:8c:ba:40:74:6f:
         d4:4c:04:b1:7f:dc:9d:04:44:80:79:4d:31:ba:7c:0f:93:55:
         4d:c6:51:a5:f2:d8:f1:39:38:a1:b2:2c:da:b6:b6:38:8e:ae:
         e5:3d:07:98:ac:de:0b:82:ab:db:44:cd:07:63:f9:4d:85:05:
         cc:0f:18:5d:e4:cf:18:c8:e4:e1:b3:39:9c:36:5b:90:06:6a:
         39:1c:62:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----