Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/7320460352cb84be754faa94d73ee3fc83e7112f.roa
File:                     7320460352cb84be754faa94d73ee3fc83e7112f.roa (raw, json)
Hash identifier:          QvOUg4X4dh9giDcXQe0GJNxwKVQ3tH8QJtMp8095hJg=
Subject key identifier:   AE:2B:3E:30:B1:20:33:9B:41:E1:92:67:4D:53:7E:6F:DF:FB:2A:F3
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24BEA7
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/7320460352cb84be754faa94d73ee3fc83e7112f.roa
Signing time:             Mon 30 Oct 2023 12:06:58 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     64103
IP address blocks:        138.204.251.0/24 maxlen: 24
                          2001:13c7:601d::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2408103 (0x24bea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=7320460352cb84be754faa94d73ee3fc83e7112f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:8f:af:9f:45:17:f4:cd:93:26:8b:fa:90:
                    b4:d3:51:de:19:33:94:48:11:ee:c8:42:aa:fd:cd:
                    b1:9c:a2:cf:a0:fc:a2:86:c2:61:0c:90:9f:80:8e:
                    69:f5:37:db:da:62:2c:ce:6b:8f:d5:34:28:28:18:
                    bd:c7:c5:7f:ef:3d:c3:ae:a8:a2:d1:0c:42:9b:1e:
                    20:2a:6c:2c:1d:83:6f:5f:e4:03:e3:5f:4c:5b:98:
                    2f:a2:a5:f0:ab:ec:a8:46:34:0d:c1:8c:9a:2e:35:
                    f0:f4:fc:db:10:5b:95:1b:73:dc:b0:ac:64:2e:c7:
                    03:c4:79:db:52:60:c0:37:e7:a3:61:67:3e:4a:e3:
                    86:18:5a:cf:d4:f1:bb:9e:75:3e:47:a3:8a:cc:df:
                    77:18:d1:21:d3:5d:f4:cc:b2:97:5f:76:c4:c3:f7:
                    84:b0:f3:7b:8f:3c:39:4a:89:d6:61:8c:aa:62:aa:
                    8e:0b:91:64:a2:58:cc:e2:88:ec:41:bc:90:db:dd:
                    e4:14:cf:cc:1d:3f:ae:6d:0b:f3:e6:4d:58:33:23:
                    4b:84:6a:14:bb:be:ae:a1:e8:20:2a:d4:09:90:75:
                    f2:4b:b5:bc:b1:22:ac:a3:92:2b:69:0a:70:12:88:
                    86:5e:0d:c0:e2:96:91:d3:70:43:b4:7c:fe:21:af:
                    27:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:2B:3E:30:B1:20:33:9B:41:E1:92:67:4D:53:7E:6F:DF:FB:2A:F3
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/7320460352cb84be754faa94d73ee3fc83e7112f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.251.0/24
                IPv6:
                  2001:13c7:601d::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:fd:0a:53:a0:90:83:dd:a3:f6:d5:d3:46:82:88:bd:a2:2a:
         d9:6c:d8:6b:04:8c:23:fe:77:69:84:ea:b7:03:06:98:68:39:
         14:c1:46:de:8b:4a:b8:59:74:1a:50:c3:71:d8:c8:a2:15:d2:
         ba:85:06:21:31:e2:fe:a3:23:88:b5:6d:4a:60:f0:46:7f:96:
         74:21:43:4c:7e:b4:cf:00:93:27:69:ec:40:17:21:0c:76:99:
         d8:eb:a8:2c:79:e3:2c:88:1b:7f:82:16:e6:49:92:95:d1:8a:
         15:53:fc:68:b9:30:0a:1a:0f:3c:c8:7f:2e:1b:03:97:d3:e0:
         28:6f:2b:65:d2:65:0d:1b:8b:22:e2:1f:a6:a2:d6:1e:ee:58:
         8f:1d:6e:fa:f8:df:82:98:0d:f5:a1:8a:23:38:99:44:f0:88:
         f9:14:4b:95:68:a8:6b:e5:e5:80:24:1f:bc:ed:90:5c:3c:2d:
         59:a1:bf:02:8a:9b:b9:35:bb:f6:41:f1:ae:f0:b0:99:30:1f:
         1b:f8:d9:bf:57:85:45:e2:c9:16:40:36:24:68:8b:b8:f4:a3:
         87:ea:d9:9c:d8:db:37:5d:e2:6d:fb:c3:2d:3c:0b:ef:a2:f9:
         02:7b:a6:4f:e6:68:00:cf:01:69:ad:3f:86:87:87:b3:2b:04:
         84:98:cb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----