Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/8652630269c01fcfc55fe3e4b1737b6f5e2522e7.roa
File:                     8652630269c01fcfc55fe3e4b1737b6f5e2522e7.roa (raw, json)
Hash identifier:          8OLiNsKC8LCR41TrCGxgJmOWEAOg9Lu52W5C611GkRU=
Subject key identifier:   E1:46:EC:90:78:A9:A2:89:0D:74:0D:C5:F2:18:7F:5A:B0:57:C9:ED
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       24C919
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/8652630269c01fcfc55fe3e4b1737b6f5e2522e7.roa
Signing time:             Mon 30 Oct 2023 12:07:02 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     64105
IP address blocks:        138.204.252.0/24 maxlen: 24
                          2001:13c7:601e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2410777 (0x24c919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=8652630269c01fcfc55fe3e4b1737b6f5e2522e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fb:1e:14:3f:4a:d6:6d:ad:4b:97:bc:69:14:
                    f8:76:b7:bf:e3:7f:2c:77:90:0e:aa:a9:75:fe:90:
                    4e:5c:a0:ad:9c:d9:1e:7b:35:df:2c:2d:36:74:2a:
                    51:c7:83:92:40:68:65:bd:a7:00:16:c2:ee:35:17:
                    e4:2b:f5:91:b8:91:98:fc:b8:7b:d7:bc:67:8f:9b:
                    74:f0:dc:cb:07:c9:1b:1d:8b:a9:f4:fe:71:38:e4:
                    0b:e7:2e:16:1d:d7:41:06:e9:00:ae:78:d0:71:24:
                    8b:1f:ef:66:bf:30:3d:55:e7:a4:fa:79:2b:d5:df:
                    97:02:bc:a2:e7:8d:17:89:29:7b:d1:bc:cb:ca:78:
                    cf:1a:36:83:36:8e:cd:ef:17:8a:e5:fd:25:f0:b1:
                    39:e7:ea:5b:d0:f4:95:3e:30:7b:83:44:c2:9a:92:
                    9d:8b:99:72:e1:0d:ab:de:50:8b:ca:76:76:9c:8f:
                    98:bc:b8:c2:79:a3:03:74:ad:7b:9e:71:4a:e0:4f:
                    2d:de:13:9c:36:47:20:5d:99:9d:a3:63:88:74:27:
                    fe:0b:2c:2c:4a:1d:5e:68:fa:45:a6:cd:5c:c4:16:
                    31:b6:1f:36:b0:fe:1a:45:2c:95:25:1c:b5:31:85:
                    02:19:96:79:b6:f3:78:e6:7f:d4:e0:d5:18:c1:b8:
                    19:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:46:EC:90:78:A9:A2:89:0D:74:0D:C5:F2:18:7F:5A:B0:57:C9:ED
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/8652630269c01fcfc55fe3e4b1737b6f5e2522e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.252.0/24
                IPv6:
                  2001:13c7:601e::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:a8:e5:2e:b6:85:38:7c:43:93:cc:3a:7d:d8:c7:25:55:ff:
         73:80:0f:33:f6:ee:7c:fe:12:42:bc:14:61:fd:32:28:6a:cb:
         08:38:0b:bc:53:ca:38:8a:91:32:b4:8b:cd:f4:e3:46:46:4b:
         49:22:d8:fe:ac:e3:79:33:00:5c:09:05:b6:b9:04:11:04:40:
         26:cd:68:6b:67:a3:56:7f:8a:d9:22:cd:59:ea:a4:b6:af:e1:
         97:a5:3f:15:f9:91:53:6c:83:3c:a5:4b:95:00:cd:fb:c5:c4:
         a2:41:3d:d1:cc:04:71:14:9a:7c:a4:4e:45:78:44:f4:f2:fb:
         ab:11:2d:f3:79:de:da:33:1b:04:5b:ec:22:35:1e:be:5c:16:
         46:da:2a:c1:82:63:04:77:10:9e:e1:d6:91:3c:f0:0b:2a:28:
         72:9e:89:84:d3:78:d6:ef:a5:16:ba:fe:30:6b:c7:23:49:67:
         6b:34:2b:36:36:79:a2:2e:f0:d9:f6:bc:37:28:82:73:8a:ab:
         8f:1c:fa:dd:6e:f5:69:b4:dc:0c:c7:2c:cd:d1:0d:a0:8b:ec:
         6c:b8:ab:6d:ad:5b:9a:40:53:8c:a8:6e:b0:69:19:ce:eb:63:
         7d:11:b6:dc:01:25:b6:16:e9:f0:a9:a3:5a:1c:ea:b5:d0:d3:
         88:7a:d6:73
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDJMkZMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDIx
MTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0ODljZWY4YmQyMGFlNzMwHhcNMjMxMDMw
MTIwNjM1WhcNMjUxMDMwMTIwNjM1WjAzMTEwLwYDVQQDEyg4NjUyNjMwMjY5YzAx
ZmNmYzU1ZmUzZTRiMTczN2I2ZjVlMjUyMmU3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAlfseFD9K1m2tS5e8aRT4dre/438sd5AOqql1/pBOXKCtnNke
ezXfLC02dCpRx4OSQGhlvacAFsLuNRfkK/WRuJGY/Lh717xnj5t08NzLB8kbHYup
9P5xOOQL5y4WHddBBukArnjQcSSLH+9mvzA9Veek+nkr1d+XAryi540XiSl70bzL
ynjPGjaDNo7N7xeK5f0l8LE55+pb0PSVPjB7g0TCmpKdi5ly4Q2r3lCLynZ2nI+Y
vLjCeaMDdK17nnFK4E8t3hOcNkcgXZmdo2OIdCf+CywsSh1eaPpFps1cxBYxth82
sP4aRSyVJRy1MYUCGZZ5tvN45n/U4NUYwbgZjQIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFOFG7JB4qaKJDXQNxfIYf1qwV8ntMB8GA1UdIwQYMBaAFPj+c0dce8gUSBxs
/73xGXd+C9leMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMjExMjRl
ZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3My5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00Nzc5LTllMjctODNiMWJk
MzAyNmUxLzg2NTI2MzAyNjljMDFmY2ZjNTVmZTNlNGIxNzM3YjZmNWUyNTIyZTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04ZjhkLTQ3NzktOWUyNy04M2Ix
YmQzMDI2ZTEvMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhiZDIwYWU3
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAIrM/DAPBAIAAjAJAwcAIAETx2AeMA0GCSqGSIb3DQEBCwUA
A4IBAQAHqOUutoU4fEOTzDp92MclVf9zgA8z9u58/hJCvBRh/TIoassIOAu8U8o4
ipEytIvN9ONGRktJItj+rON5MwBcCQW2uQQRBEAmzWhrZ6NWf4rZIs1Z6qS2r+GX
pT8V+ZFTbIM8pUuVAM37xcSiQT3RzARxFJp8pE5FeET08vurES3zed7aMxsEW+wi
NR6+XBZG2irBgmMEdxCe4daRPPALKihynomE03jW76UWuv4wa8cjSWdrNCs2Nnmi
LvDZ9rw3KIJziquPHPrdbvVptNwMxyzN0Q2gi+xsuKttrVuaQFOMqG6waRnO62N9
EbbcASW2FunwqaNaHOq10NOIetZz
-----END CERTIFICATE-----