Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/792c9898285c856dca11cb19e2009a33fe899910.roa
File:                     792c9898285c856dca11cb19e2009a33fe899910.roa (raw, json)
Hash identifier:          ZWCbuW3RP4s1e4e4ny7xyAnspUI68VgtOCOBAKrYqYU=
Subject key identifier:   5B:7C:C1:0F:64:7C:B4:E8:BA:C5:1B:C1:E9:65:3A:79:46:5A:0C:70
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24D2C4
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/792c9898285c856dca11cb19e2009a33fe899910.roa
Signing time:             Mon 30 Oct 2023 12:07:09 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     61552
IP address blocks:        138.204.254.0/24 maxlen: 24
                          2801:168::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2413252 (0x24d2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=792c9898285c856dca11cb19e2009a33fe899910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f0:70:bb:25:a8:96:9f:59:cc:b6:c6:b6:7b:
                    07:7b:30:a5:f3:81:0d:14:e5:3d:ac:d6:18:80:6f:
                    d3:3c:b9:df:bf:ce:1f:94:0b:ab:5c:ee:6d:3e:07:
                    ba:b3:01:8e:27:7d:0a:c5:08:86:40:de:fa:e3:25:
                    c1:da:61:f9:33:97:7f:fb:ab:ac:27:ac:d1:ab:75:
                    a0:84:93:c9:fb:7f:e4:af:04:41:5f:a8:4b:f5:93:
                    80:9c:ec:9b:df:43:d6:7d:2e:f3:3f:f6:fe:57:3f:
                    12:d8:49:ba:fb:f1:48:e5:8f:8b:c1:05:96:69:7b:
                    50:90:dc:bd:04:4b:86:f0:03:d4:f8:9a:38:02:da:
                    d1:af:e1:8c:44:2f:49:fd:47:94:a3:f4:45:22:45:
                    bd:d4:b3:de:3d:85:81:e4:71:da:72:bd:da:12:57:
                    71:3e:0b:40:ca:9e:32:12:5c:15:8a:56:f4:79:7d:
                    e7:61:93:79:8c:0a:9d:2a:62:a5:76:93:93:61:7a:
                    6d:c6:4e:49:a6:4b:e3:a6:8a:53:3f:12:83:22:b0:
                    8a:86:f5:63:a9:ef:1e:17:57:55:30:4e:0a:a1:bf:
                    9a:80:1c:8b:ab:cd:35:f9:99:d3:76:fa:92:83:f8:
                    83:7f:1d:7c:6d:61:d4:3b:fc:89:1e:4f:8c:f5:a2:
                    a9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7C:C1:0F:64:7C:B4:E8:BA:C5:1B:C1:E9:65:3A:79:46:5A:0C:70
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/792c9898285c856dca11cb19e2009a33fe899910.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.254.0/24
                IPv6:
                  2801:168::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:c5:dc:e5:04:0b:11:64:3f:aa:78:cd:e6:2a:af:9a:a5:bc:
         f2:ad:69:f5:8c:cf:fe:da:57:ed:a5:03:bb:a7:74:19:f4:4e:
         bf:ea:f0:77:0e:18:1e:1b:e5:0f:ed:c3:78:63:7e:8e:42:d1:
         41:32:00:78:67:80:09:56:d4:c8:31:d7:46:92:cd:64:1b:36:
         9e:81:ea:1f:2c:8c:92:b2:76:fd:e7:b1:ec:46:5d:d9:b7:02:
         99:e1:58:6e:04:bc:06:24:02:40:1f:d3:48:3b:83:36:55:13:
         bb:26:49:e9:e2:45:12:82:03:35:cf:d6:38:0b:58:31:0a:86:
         d7:8f:0e:fb:5d:f3:48:19:6c:2d:53:47:f8:52:b1:59:c2:24:
         cd:44:a6:e4:e9:b1:b0:81:93:98:c5:ca:8d:c1:9c:c8:4b:0c:
         b0:b9:12:ca:94:9d:63:6f:ad:f6:08:27:34:f0:d0:09:04:ee:
         30:2d:50:83:21:e2:41:76:4b:31:b4:e6:15:b7:07:25:95:30:
         4f:16:42:90:08:d7:99:f5:02:0b:29:5d:53:b1:22:22:f8:1a:
         de:0f:a2:14:2a:87:c1:08:0b:62:26:58:48:33:5c:75:6b:7f:
         c0:ad:fb:87:7a:ba:05:af:18:e7:f1:71:21:19:d1:9b:08:75:
         a3:30:ef:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----