Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/2b0740b78fff0c79066e2fba1ca691480c735184.roa
File:                     2b0740b78fff0c79066e2fba1ca691480c735184.roa (raw, json)
Hash identifier:          16MSvgRikc+n5lUsVMe9s+9GBvwoOii8insjZU9YJJo=
Subject key identifier:   9B:F9:B2:AA:0F:7C:C0:A5:67:12:30:E3:3D:00:6C:14:8E:01:69:A2
Certificate issuer:       /CN=010b9d9c696fcfc6fcf94f280d1b1174a54c09fe
Certificate serial:       17F613
Authority key identifier: 4F:6B:F0:61:5E:B6:D2:E1:33:4E:13:A1:95:B5:87:F0:3C:27:0A:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/2b0740b78fff0c79066e2fba1ca691480c735184.roa
Signing time:             Sun 03 Mar 2024 08:31:03 +0000
ROA not before:           Sun 03 Mar 2024 08:31:03 +0000
ROA not after:            Tue 03 Mar 2026 08:31:03 +0000
asID:                     263755
IP address blocks:        138.121.124.0/22 maxlen: 24
                          2803:6440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570323 (0x17f613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=010b9d9c696fcfc6fcf94f280d1b1174a54c09fe
        Validity
            Not Before: Mar  3 08:31:03 2024 GMT
            Not After : Mar  3 08:31:03 2026 GMT
        Subject: CN=2b0740b78fff0c79066e2fba1ca691480c735184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:65:70:36:5a:1d:34:e4:7f:f1:c6:d8:b3:9a:
                    17:e9:9e:45:02:c3:24:20:cc:3f:f9:2f:db:c5:20:
                    3c:e6:7e:9c:80:a3:4d:c3:c2:cb:82:7e:02:03:06:
                    2d:ce:b1:49:d5:f7:3b:d2:48:a8:c3:05:b8:84:ec:
                    96:1c:48:8c:e8:b4:00:6a:2c:62:37:9a:10:e2:df:
                    2b:f1:2c:eb:f7:8c:5f:0e:a5:b4:3f:e9:c7:61:e9:
                    5d:79:f0:60:fa:1d:c3:3b:12:f5:8e:15:8a:96:78:
                    bc:09:10:af:9e:29:e7:1a:74:eb:e8:4c:82:5d:f4:
                    62:bc:47:e8:a8:fe:78:0f:1f:d0:2b:af:98:f0:e1:
                    df:7d:ff:1d:76:87:7e:3a:90:6f:3d:80:24:5d:c0:
                    a4:75:16:b6:f9:3a:80:89:cf:a0:2f:b3:9c:32:f0:
                    f3:42:3d:fb:5c:eb:78:5f:21:18:06:67:79:94:7a:
                    2b:ec:d0:cf:9d:15:d5:c4:3b:93:1c:40:64:fb:8c:
                    10:ed:97:61:cb:13:44:12:bd:f4:47:1e:29:5b:86:
                    86:e9:ca:3b:0b:a3:57:21:16:9b:e6:45:3d:58:8d:
                    99:7b:38:83:ff:a1:f7:1d:42:e9:40:a4:84:33:44:
                    ec:7e:c9:2a:f3:44:17:ba:28:e6:86:56:f6:5f:72:
                    ef:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F9:B2:AA:0F:7C:C0:A5:67:12:30:E3:3D:00:6C:14:8E:01:69:A2
            X509v3 Authority Key Identifier:
                keyid:4F:6B:F0:61:5E:B6:D2:E1:33:4E:13:A1:95:B5:87:F0:3C:27:0A:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/2b0740b78fff0c79066e2fba1ca691480c735184.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96f7d5e3-6359-4e79-b6f1-8a4916ecfbf3/010b9d9c696fcfc6fcf94f280d1b1174a54c09fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.124.0/22
                IPv6:
                  2803:6440::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:d4:fb:14:d0:41:ab:8b:65:0d:ae:ef:4e:f1:d7:12:e7:b4:
         19:03:10:6f:46:92:f6:5f:c2:68:97:ad:9b:50:f8:bc:b2:9a:
         f2:4a:97:54:5c:a3:32:34:2f:7e:73:2d:07:e5:55:16:9c:0b:
         1e:3c:63:d2:21:3a:a3:84:fa:f3:6d:77:61:8e:fe:12:9e:38:
         ff:a2:7b:98:d3:f4:16:34:52:f0:f2:49:42:f1:a1:ef:2b:c5:
         0a:e7:26:6d:bd:a9:39:fe:1e:ef:7b:5f:f0:8a:62:fc:61:84:
         b4:fc:25:e6:ce:53:a3:af:93:66:9c:b7:a8:de:2b:6f:51:e9:
         5a:51:33:33:38:c0:47:f3:96:36:58:90:4c:79:76:c5:b6:32:
         b5:a4:05:47:f8:7a:98:e0:97:cb:13:15:11:c2:8c:52:12:28:
         26:62:ff:1e:e2:a9:09:c9:a4:89:76:91:0d:d9:76:de:30:cb:
         8f:8c:a3:51:52:3a:b6:f0:4f:72:3c:12:2f:a3:4b:57:e7:f1:
         66:36:8e:ea:07:1b:20:9d:c2:7b:28:45:43:1b:14:e0:34:9a:
         d5:e0:c5:ba:07:c5:c0:88:9d:a2:11:b1:9b:82:9b:3c:13:10:
         dc:0e:34:92:0a:a3:1e:f8:07:cb:ed:0e:79:d5:bc:e7:ee:91:
         25:42:a7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----