Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/ef1cb492abea8b4da1cb42e44e42721680d63315.roa
File:                     ef1cb492abea8b4da1cb42e44e42721680d63315.roa (raw, json)
Hash identifier:          4q3RPxROxjFoqnyPXIDscB5r2hiav7gF3MSX03Rlpdw=
Subject key identifier:   B3:CB:86:1C:71:FB:58:0B:FF:D0:52:71:39:35:66:7B:02:6B:A1:0A
Certificate issuer:       /CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
Certificate serial:       2492AF
Authority key identifier: F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/ef1cb492abea8b4da1cb42e44e42721680d63315.roa
Signing time:             Mon 30 Oct 2023 12:06:43 +0000
ROA not before:           Mon 30 Oct 2023 12:06:35 +0000
ROA not after:            Thu 30 Oct 2025 12:06:35 +0000
asID:                     61521
IP address blocks:        138.204.250.0/24 maxlen: 24
                          201.182.130.0/24 maxlen: 24
                          2001:13c7:601c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2396847 (0x2492af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Validity
            Not Before: Oct 30 12:06:35 2023 GMT
            Not After : Oct 30 12:06:35 2025 GMT
        Subject: CN=ef1cb492abea8b4da1cb42e44e42721680d63315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4f:0a:9b:7a:7c:70:9c:6a:86:65:ee:c4:22:
                    85:0d:ca:83:a6:04:02:9d:dc:7e:fd:42:ae:67:b4:
                    84:7f:98:75:9b:10:ef:5a:23:82:64:73:56:9b:7e:
                    67:b2:62:45:7b:36:ab:2b:f0:57:e8:42:c0:ed:fe:
                    89:93:00:b4:b3:bd:fa:ef:7e:41:ef:d5:dd:75:3b:
                    29:f7:ea:5e:a0:6a:c6:96:9c:9f:04:89:5a:b1:68:
                    3f:8d:68:25:b9:dd:20:2c:61:b4:33:fe:a8:f5:82:
                    28:5d:47:b8:a3:28:7a:df:fa:04:6f:56:ac:52:db:
                    5b:be:67:c5:c4:07:b5:fa:f8:dc:c2:93:83:c8:ce:
                    b9:40:5f:80:00:ee:c9:3e:fa:b9:0a:b3:93:6c:8a:
                    b1:f0:b7:41:c9:31:0f:88:ee:6c:b7:58:e0:be:42:
                    22:fa:55:97:f1:96:0f:62:90:15:ba:2f:24:f4:54:
                    e4:14:03:de:64:2e:43:6c:de:d4:ac:6e:91:2a:17:
                    52:91:79:22:5d:35:c3:22:3c:5c:53:f5:6d:f6:8a:
                    b3:74:bb:90:76:d4:73:4b:8d:7b:f5:c3:3a:e1:1f:
                    51:14:2a:67:f0:1f:09:74:36:f8:99:d3:79:e9:2b:
                    29:ed:cc:e9:57:94:66:4a:01:33:ba:8b:e3:52:5b:
                    58:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CB:86:1C:71:FB:58:0B:FF:D0:52:71:39:35:66:7B:02:6B:A1:0A
            X509v3 Authority Key Identifier:
                keyid:F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/ef1cb492abea8b4da1cb42e44e42721680d63315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.250.0/24
                  201.182.130.0/24
                IPv6:
                  2001:13c7:601c::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:ad:7b:9f:2e:f1:df:b1:34:bf:80:bc:1d:1d:53:b5:70:1b:
         45:7f:ec:e1:be:61:41:91:cd:45:8d:72:bb:1a:4a:09:43:2f:
         ea:0d:80:36:c2:fd:8b:19:c8:33:8a:5f:19:48:65:4b:ad:91:
         3a:c9:41:ec:f4:6e:83:c9:6b:cb:b1:ee:d8:6e:6d:58:84:e3:
         35:53:13:4a:3a:c0:fb:be:48:75:d8:47:95:eb:63:7c:f5:47:
         85:08:aa:9e:b5:ed:0b:a0:31:ff:ad:96:1f:16:92:0a:34:b4:
         10:31:94:ba:47:24:40:dc:b3:a6:5d:36:42:a5:f2:eb:50:bb:
         b1:a0:cf:c8:ed:e0:98:c4:46:f0:4c:81:ac:84:47:ab:f1:c4:
         06:51:25:29:f4:ab:14:14:bb:a0:34:68:59:e6:f3:04:b5:25:
         ed:17:b4:09:3f:74:50:6e:b6:91:ef:51:06:2e:cc:d3:1e:cf:
         79:f7:d6:79:37:4f:6f:3f:53:a4:c1:88:39:6c:e7:62:82:26:
         73:e7:c6:4a:26:2b:f0:fd:21:72:74:24:a9:4c:4d:12:a5:a1:
         ea:26:67:9a:90:c0:da:ea:8e:0f:95:ff:9a:01:98:d1:47:2c:
         71:88:77:59:5a:e1:f6:4b:c7:35:ee:eb:16:39:9d:30:84:b3:
         63:27:49:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----