Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/cdc34a24a4e3d7138859064fdec3cc07d3616596.roa
File:                     cdc34a24a4e3d7138859064fdec3cc07d3616596.roa (raw, json)
Hash identifier:          3g/MD4aNbkLNE44B55pHp3YSfrJWQi7rgFka0/ap5cM=
Subject key identifier:   60:4B:D6:FC:62:2B:E8:23:A0:FA:76:51:9E:F1:77:35:06:40:E1:7E
Certificate issuer:       /CN=9e03528add95459ad882223f3d7897c8534b198e
Certificate serial:       086E
Authority key identifier: A8:38:FC:0D:A6:2F:78:36:9A:B2:ED:34:58:A3:74:04:52:D9:14:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e03528add95459ad882223f3d7897c8534b198e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/cdc34a24a4e3d7138859064fdec3cc07d3616596.roa
Signing time:             Wed 27 Oct 2021 13:22:54 +0000
ROA not before:           Wed 27 Oct 2021 03:00:00 +0000
ROA not after:            Tue 27 Oct 2026 03:00:00 +0000
asID:                     263736
IP address blocks:        138.0.184.0/22 maxlen: 24
                          143.137.20.0/22 maxlen: 24
                          170.239.128.0/22 maxlen: 24
                          2803:3780::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158 (0x86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e03528add95459ad882223f3d7897c8534b198e
        Validity
            Not Before: Oct 27 03:00:00 2021 GMT
            Not After : Oct 27 03:00:00 2026 GMT
        Subject: CN=cdc34a24a4e3d7138859064fdec3cc07d3616596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:47:19:9e:ce:9e:c6:37:2f:38:89:e0:e9:e1:
                    46:65:f5:c3:d0:a8:71:cf:d3:9d:94:e7:4d:bb:9f:
                    3f:2f:c8:74:d9:3f:fc:ba:61:5e:0d:c7:cc:e2:ee:
                    b1:fc:d5:a9:15:da:dc:cd:f3:91:19:54:db:a3:d5:
                    a9:d4:c8:ec:5b:9c:2e:97:bb:de:7e:f1:1a:1d:7c:
                    1f:38:d3:e4:e3:99:9d:12:50:8b:b6:cb:9a:5d:61:
                    45:aa:77:70:2b:c3:bf:39:24:a5:eb:ce:1f:c9:8f:
                    54:c0:e2:c7:9a:7d:5f:21:68:1e:52:c4:37:bb:50:
                    69:47:10:f8:cc:32:7d:7a:2f:c6:af:b8:c1:42:38:
                    08:63:6e:d4:e2:ac:04:46:e3:e4:c8:07:c8:4a:49:
                    20:fc:cb:67:19:0e:03:4f:e6:34:43:23:17:d8:72:
                    d4:27:b3:76:cc:9c:6f:bb:05:83:5e:86:bc:b8:84:
                    be:de:fa:f0:3f:f7:7e:76:4d:cb:34:4f:2b:52:51:
                    6e:6a:b3:44:3f:e0:c4:c1:3f:36:28:bf:b6:58:75:
                    5c:e8:66:00:e4:5b:fc:b7:cf:26:87:6d:a7:36:e6:
                    f6:ae:60:80:ce:ea:1e:d8:bd:d3:8a:77:aa:1c:fd:
                    9c:52:87:b2:aa:c9:b2:2f:3a:a5:ee:8a:60:49:0e:
                    29:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4B:D6:FC:62:2B:E8:23:A0:FA:76:51:9E:F1:77:35:06:40:E1:7E
            X509v3 Authority Key Identifier:
                keyid:A8:38:FC:0D:A6:2F:78:36:9A:B2:ED:34:58:A3:74:04:52:D9:14:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e03528add95459ad882223f3d7897c8534b198e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/cdc34a24a4e3d7138859064fdec3cc07d3616596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9e3a8aef-5241-4aa2-8310-346caecccd58/9e03528add95459ad882223f3d7897c8534b198e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.184.0/22
                  143.137.20.0/22
                  170.239.128.0/22
                IPv6:
                  2803:3780::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:46:ea:75:be:60:a7:be:21:0d:cd:8c:cc:ec:ab:39:be:ad:
         40:60:d6:e3:99:20:f1:1d:ea:f9:94:b5:96:28:7e:89:d2:35:
         bf:f1:b8:2c:d7:fe:cc:89:62:1c:81:18:8a:f3:c8:d2:e1:59:
         4c:f6:bd:42:59:5c:ab:6a:23:04:a5:47:fd:9a:4f:e2:35:28:
         c0:16:1d:df:51:a5:7e:9a:c3:c9:db:e5:1e:0d:c4:12:ca:63:
         ee:31:4c:bf:ca:7a:11:46:23:ee:12:b3:d8:e8:ce:fd:28:cd:
         d4:c4:13:81:eb:06:0f:62:5a:d0:a2:8d:3e:46:5f:f1:e9:65:
         9c:87:b3:e8:04:9e:3b:b6:bf:c5:f1:e1:a8:6e:74:01:c4:c5:
         46:ea:d5:b6:a8:de:7c:ae:e0:1e:ae:5c:85:f4:7f:f3:d6:6f:
         fb:29:ed:14:3a:fc:01:44:2a:49:c2:0b:9f:43:8d:1d:51:dd:
         2c:7a:0f:87:0c:5c:ef:63:e0:3e:34:92:9d:03:19:03:af:f9:
         d8:3e:40:fe:0f:07:35:75:2c:1e:43:bd:2d:2d:cf:c7:b2:6e:
         34:c4:8e:95:ca:5d:34:bd:73:7f:0b:7a:53:42:52:ae:7f:e3:
         05:cb:93:ba:f4:62:ce:dd:5e:a5:b2:bc:d3:4c:2e:3c:42:ab:
         3b:c7:74:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----