Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6fda820ca40dad2b4e4f275e5b53ab5c5790e076.roa
File:                     6fda820ca40dad2b4e4f275e5b53ab5c5790e076.roa (raw, json)
Hash identifier:          7ANOTAEM/wlNlwaz1i5aOvRwEHMGuAbLEuyvAJqej3o=
Subject key identifier:   41:B5:77:E4:CC:59:48:8F:A9:23:8E:4E:95:1E:AE:AC:B9:86:71:3C
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24801E
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6fda820ca40dad2b4e4f275e5b53ab5c5790e076.roa
Signing time:             Mon 30 Oct 2023 12:06:37 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     61505
IP address blocks:        138.204.246.0/24 maxlen: 24
                          2001:13c7:6018::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392094 (0x24801e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=6fda820ca40dad2b4e4f275e5b53ab5c5790e076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:23:44:f5:f2:9d:b7:33:f8:47:d2:4a:09:
                    a0:53:d6:5c:e9:e1:cd:90:c0:80:d9:ae:23:ba:2a:
                    28:15:79:a3:78:8f:6e:be:05:9b:e7:2e:47:8b:a9:
                    f9:0b:b9:06:a3:89:d4:b2:dd:01:d0:fb:32:5a:b4:
                    f0:5c:22:fa:2b:4a:37:77:85:76:05:9d:2b:04:f8:
                    09:a5:2b:fb:6e:af:25:cc:86:37:a3:bb:39:d9:5d:
                    b1:33:19:c1:92:1b:eb:a7:41:9d:ec:8a:3c:60:e0:
                    e5:69:cf:4c:df:db:25:dd:a3:92:9e:98:ae:6e:86:
                    7b:bf:68:3c:c8:10:90:f8:c8:16:e3:27:e3:95:f4:
                    dc:db:0f:96:83:a5:b5:44:de:2c:ee:cb:8f:b6:2b:
                    0d:99:ca:ac:a6:75:7a:48:41:25:72:c4:c9:7a:2f:
                    c9:b8:35:ab:24:39:69:f6:d5:a8:6b:29:47:a1:fa:
                    41:b4:f9:43:49:1a:08:d9:b0:a6:3e:12:23:50:8f:
                    02:d5:3f:c2:ea:4f:3a:4b:36:fa:ab:7a:2d:90:7a:
                    04:65:93:68:a1:40:8e:77:42:86:8d:50:a1:56:67:
                    0b:cb:f5:a7:d7:59:de:71:ed:11:d2:b6:eb:72:2e:
                    49:5f:1b:0e:19:34:ce:c6:49:19:2b:70:89:89:c2:
                    80:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B5:77:E4:CC:59:48:8F:A9:23:8E:4E:95:1E:AE:AC:B9:86:71:3C
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/6fda820ca40dad2b4e4f275e5b53ab5c5790e076.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.246.0/24
                IPv6:
                  2001:13c7:6018::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:80:ce:e8:28:e3:8d:6f:69:fd:53:37:46:a8:a9:33:65:56:
         22:c6:07:d2:0a:f5:eb:25:be:dc:25:2b:79:b6:1c:90:22:e3:
         be:de:bf:34:2b:ac:27:72:2c:bf:49:11:7b:06:0b:4f:6c:89:
         41:0d:36:b7:e8:c4:f0:3c:fd:02:25:39:03:12:23:8c:cb:cc:
         fb:c2:69:b2:5d:0b:d6:eb:45:de:f5:ee:0e:38:cc:bd:91:b3:
         ce:fa:0a:51:1f:59:1a:27:f5:98:b4:2d:76:78:e7:cf:ba:a4:
         0d:76:d9:5e:4f:14:dc:3d:68:07:f2:83:d7:0f:18:4b:4c:01:
         6f:a2:46:46:d8:60:07:46:f5:11:df:12:65:b9:9e:27:6a:27:
         6f:8a:11:87:a7:9d:fc:c5:aa:87:6e:43:c0:4c:91:f8:92:f4:
         f0:c5:a1:58:d2:83:b3:3c:ce:97:99:8f:3d:ca:df:f1:36:ce:
         64:f9:b2:13:57:12:0a:76:d8:d1:a1:ec:10:19:5a:34:14:2e:
         43:94:56:e7:dd:8f:9b:72:58:d7:d3:aa:be:f4:bc:30:41:4a:
         27:04:ed:a1:6b:d5:46:21:10:32:af:f3:7d:94:67:42:10:66:
         47:c8:a1:53:e4:e8:97:7a:4d:04:0e:d1:ce:be:18:26:da:78:
         c1:3b:d9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----