Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/8cfc9eabcca6df0fbe84c6c762b3f5c4542f27dc.roa
File:                     8cfc9eabcca6df0fbe84c6c762b3f5c4542f27dc.roa (raw, json)
Hash identifier:          h3Q4P4hK+jwhd20ZmLmMZ8cpIbc56+MRwSd8z0wVjtA=
Subject key identifier:   45:7F:F2:F5:8F:0D:B6:B0:DA:3F:25:06:52:0F:FF:EC:A8:36:2D:B7
Certificate issuer:       /CN=fc196811ad94bf06a04dbd9b9e1659b5f0e56908
Certificate serial:       21A6D7
Authority key identifier: 4B:13:A2:2E:F7:E5:86:9E:EF:DA:DE:14:B5:1A:40:55:D2:DC:DF:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/8cfc9eabcca6df0fbe84c6c762b3f5c4542f27dc.roa
Signing time:             Thu 08 Jun 2023 08:30:01 +0000
ROA not before:           Wed 07 Jun 2023 08:30:01 +0000
ROA not after:            Fri 06 Jun 2025 08:30:01 +0000
asID:                     267817
IP address blocks:        138.117.8.0/22 maxlen: 24
                          2803:7040::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2205399 (0x21a6d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc196811ad94bf06a04dbd9b9e1659b5f0e56908
        Validity
            Not Before: Jun  7 08:30:01 2023 GMT
            Not After : Jun  6 08:30:01 2025 GMT
        Subject: CN=8cfc9eabcca6df0fbe84c6c762b3f5c4542f27dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:e2:f6:d3:df:7a:87:32:bc:f4:2b:42:7e:
                    77:a5:c5:51:64:c2:9a:33:10:33:17:23:56:1a:d7:
                    1a:03:64:2d:c6:ba:2d:0e:4e:8d:a9:45:98:65:02:
                    45:ed:4d:94:d0:ef:0d:5e:c2:04:40:bd:59:c6:dc:
                    41:fc:e4:41:6d:d4:ee:8c:4e:df:a2:b3:63:83:f3:
                    e6:ce:c8:00:b9:d4:da:37:7b:63:8b:85:27:4b:02:
                    42:61:85:40:a5:75:03:07:6a:68:33:fb:1a:0d:14:
                    e3:07:74:a4:a2:d6:95:98:49:c3:34:2e:bd:76:05:
                    7d:7a:35:6a:27:13:5e:55:ab:b2:bb:6f:8d:a8:dc:
                    8f:df:3c:3f:ef:f6:fc:0d:31:6e:4d:25:c0:fb:59:
                    49:1b:ed:1c:f6:ed:af:c1:af:3d:a9:48:a8:b9:2d:
                    9c:ba:dc:07:e6:5e:97:46:a0:71:e9:3d:00:07:82:
                    ab:93:6b:40:ea:77:f9:68:21:4d:1f:11:ee:0a:85:
                    da:76:fd:a3:56:d0:66:a5:b4:8b:db:8e:0e:2c:d9:
                    f0:a4:d8:19:8d:0a:76:0d:ef:6d:ff:ee:29:41:a4:
                    85:cd:b2:b2:72:a3:73:b8:e4:28:7a:fa:da:0b:b0:
                    b9:35:b6:6c:14:bc:f9:1a:fc:fc:10:7e:18:2a:c9:
                    13:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7F:F2:F5:8F:0D:B6:B0:DA:3F:25:06:52:0F:FF:EC:A8:36:2D:B7
            X509v3 Authority Key Identifier:
                keyid:4B:13:A2:2E:F7:E5:86:9E:EF:DA:DE:14:B5:1A:40:55:D2:DC:DF:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/8cfc9eabcca6df0fbe84c6c762b3f5c4542f27dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/70e0edea-3383-4b41-b791-8886ac57e94f/fc196811ad94bf06a04dbd9b9e1659b5f0e56908.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.8.0/22
                IPv6:
                  2803:7040::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:6a:b4:c1:06:ed:58:72:d1:6e:5d:6b:5a:68:5c:7c:90:c3:
         a4:53:64:7a:35:87:01:26:22:ce:01:ba:d3:7b:96:bd:b6:33:
         2d:c0:17:8f:3c:ed:fe:1d:e2:7f:36:e4:f0:5f:df:81:21:58:
         81:c9:d1:2f:03:d8:a2:8b:04:ff:ff:56:ce:9e:97:64:5c:06:
         35:0a:21:e3:2d:a6:5d:b0:e9:23:00:c4:59:02:8c:4d:d8:a4:
         a4:f8:23:7b:c4:bb:39:25:eb:12:25:da:4b:ba:91:25:a6:36:
         d9:ca:a7:d5:9d:3c:68:fe:87:ad:52:5c:b2:5d:09:87:59:95:
         ca:4e:0c:1e:32:76:9f:33:63:96:9f:79:c9:63:af:ae:18:ac:
         ed:1e:8d:91:4c:7a:32:9a:fa:09:f1:7e:d6:d9:cb:ab:31:23:
         fe:11:67:c6:5b:b7:26:77:1d:e0:70:ee:07:4b:78:a8:dd:9d:
         4b:bb:0e:a2:e7:e4:db:71:ee:9d:e7:a7:20:7a:86:42:1d:0c:
         e3:fa:8e:27:c2:9a:27:62:51:98:70:ba:55:ac:72:4d:01:98:
         dd:36:be:dd:80:f2:2a:53:73:64:21:28:60:cb:7d:9c:45:26:
         3f:a2:3d:f4:58:8d:6b:10:7a:c7:52:72:b3:fc:bc:18:b7:73:
         37:aa:38:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----