Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/8121b9feb3f8c0997f5a07db90fb77ab671671b1.roa
File:                     8121b9feb3f8c0997f5a07db90fb77ab671671b1.roa (raw, json)
Hash identifier:          WNLzyLZtH2emUc3edRlIRHTfmIIZYpjEAVpxg1La/ss=
Subject key identifier:   06:1A:E4:CF:7B:0D:0C:9C:BD:8E:49:64:EB:0B:08:35:DE:23:2B:92
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       248F1E
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/8121b9feb3f8c0997f5a07db90fb77ab671671b1.roa
Signing time:             Mon 30 Oct 2023 12:06:41 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     61520
IP address blocks:        138.204.249.0/24 maxlen: 24
                          2001:13c7:601b::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395934 (0x248f1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=8121b9feb3f8c0997f5a07db90fb77ab671671b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4e:70:26:60:3d:02:e6:15:e6:7e:24:82:03:
                    94:a0:6e:77:20:dc:18:2b:53:50:e9:2c:d7:4f:12:
                    67:e6:5b:72:a2:4a:a5:43:e9:8e:51:50:ad:59:c1:
                    29:22:00:08:34:68:4a:56:d2:93:47:db:7b:8a:34:
                    0d:e2:fb:16:f6:c9:c2:79:3c:8b:eb:51:12:49:f3:
                    77:d2:03:94:f8:ec:75:55:a6:d6:64:8b:4a:c5:38:
                    12:1d:ff:38:42:b8:28:27:0b:a7:95:58:ea:f7:d7:
                    39:bc:8e:92:aa:eb:c4:eb:f7:db:bf:6a:d0:a5:dc:
                    da:45:8d:e4:29:c1:de:c0:95:41:f9:cc:31:0e:2e:
                    46:33:3c:dd:32:bb:cf:97:3a:2b:95:0a:dd:3c:de:
                    97:fd:91:fc:40:e8:05:e6:cb:de:6b:e8:f6:dc:87:
                    19:f2:6c:20:30:83:ee:cd:d6:73:c4:75:fc:d0:ee:
                    67:5d:3d:7d:7b:5c:b8:98:8b:c8:9a:9d:eb:ea:29:
                    bb:d1:50:27:89:3e:a7:3a:ac:63:ac:d5:e7:b5:66:
                    fa:7b:17:c5:07:01:96:34:8d:5c:39:5c:e9:07:f5:
                    c7:a3:8b:59:56:f3:c9:10:3c:c4:94:5e:13:85:df:
                    1d:c6:2a:95:91:5f:6b:6a:c1:21:91:45:19:2a:a5:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1A:E4:CF:7B:0D:0C:9C:BD:8E:49:64:EB:0B:08:35:DE:23:2B:92
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/8121b9feb3f8c0997f5a07db90fb77ab671671b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.249.0/24
                IPv6:
                  2001:13c7:601b::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:0e:a3:85:f7:a8:7e:e2:37:0c:6f:2d:31:b5:8a:44:4e:c2:
         5c:5a:9a:89:91:eb:ce:35:fe:0d:12:a1:24:14:c7:18:ca:49:
         cc:ae:db:18:a7:e8:32:33:6b:21:47:87:cd:6d:f0:93:51:5c:
         7e:f7:e4:28:99:4e:2e:37:ac:79:34:5f:e6:99:b4:c6:0a:eb:
         77:da:56:8d:7a:a7:46:c9:24:54:f9:1f:2f:12:34:0e:32:76:
         8d:4a:65:10:8d:13:be:b9:18:5b:84:55:eb:16:f4:bb:b8:b4:
         0f:6a:4e:f5:ff:e9:fb:40:48:cc:f3:1d:cf:09:d1:ea:42:4a:
         be:8e:6f:c9:2f:0a:59:d6:9b:28:23:3e:04:15:71:40:c5:9c:
         d3:1d:f1:07:1b:c2:3b:01:f0:70:40:da:80:14:c3:14:35:6c:
         84:1a:a4:13:4c:26:bd:90:05:ce:4d:64:d9:ec:e9:58:31:86:
         07:de:c0:99:ee:22:be:19:6b:1f:98:a1:9e:ca:7f:47:ce:fc:
         68:f7:75:98:35:09:58:0c:19:bf:69:ed:0a:4c:d3:ca:9b:c8:
         22:65:52:22:1f:1d:49:6f:97:3e:51:69:ee:03:d9:a7:6b:2e:
         7d:e1:82:45:02:4e:67:d0:15:67:0b:02:5b:ea:2c:66:ae:fc:
         44:e2:83:02
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDJI8eMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjMxMDMw
MTIwNjM1WhcNMjUxMDMwMTIwNjM1WjAzMTEwLwYDVQQDEyg4MTIxYjlmZWIzZjhj
MDk5N2Y1YTA3ZGI5MGZiNzdhYjY3MTY3MWIxMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlk5wJmA9AuYV5n4kggOUoG53INwYK1NQ6SzXTxJn5ltyokql
Q+mOUVCtWcEpIgAINGhKVtKTR9t7ijQN4vsW9snCeTyL61ESSfN30gOU+Ox1VabW
ZItKxTgSHf84QrgoJwunlVjq99c5vI6SquvE6/fbv2rQpdzaRY3kKcHewJVB+cwx
Di5GMzzdMrvPlzorlQrdPN6X/ZH8QOgF5svea+j23IcZ8mwgMIPuzdZzxHX80O5n
XT19e1y4mIvImp3r6im70VAniT6nOqxjrNXntWb6exfFBwGWNI1cOVzpB/XHo4tZ
VvPJEDzElF4Thd8dxiqVkV9rasEhkUUZKqXbmwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFAYa5M97DQycvY5JZOsLCDXeIyuSMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzgxMjFiOWZlYjNmOGMwOTk3ZjVhMDdkYjkwZmI3N2FiNjcxNjcxYjEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAIrM+TAPBAIAAjAJAwcAIAETx2AbMA0GCSqGSIb3DQEBCwUA
A4IBAQBhDqOF96h+4jcMby0xtYpETsJcWpqJkevONf4NEqEkFMcYyknMrtsYp+gy
M2shR4fNbfCTUVx+9+QomU4uN6x5NF/mmbTGCut32laNeqdGySRU+R8vEjQOMnaN
SmUQjRO+uRhbhFXrFvS7uLQPak71/+n7QEjM8x3PCdHqQkq+jm/JLwpZ1psoIz4E
FXFAxZzTHfEHG8I7AfBwQNqAFMMUNWyEGqQTTCa9kAXOTWTZ7OlYMYYH3sCZ7iK+
GWsfmKGeyn9Hzvxo93WYNQlYDBm/ae0KTNPKm8giZVIiHx1Jb5c+UWnuA9mnay59
4YJFAk5n0BVnCwJb6ixmrvxE4oMC
-----END CERTIFICATE-----