Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/b3dff6846c3bc843300a0510befac19f81eaa182.roa
File:                     b3dff6846c3bc843300a0510befac19f81eaa182.roa (raw, json)
Hash identifier:          7A2MPnrZUKnQxngGMmgWA6qG6He3cFDX4452aifESDs=
Subject key identifier:   0E:C8:81:7F:E9:F0:E4:4A:FC:C7:05:79:7C:86:BB:A6:66:1B:28:15
Certificate issuer:       /CN=2affce9463fa8415cf700b389ea137e31e6bc44d
Certificate serial:       1B3E42
Authority key identifier: 57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/b3dff6846c3bc843300a0510befac19f81eaa182.roa
Signing time:             Mon 14 Nov 2022 20:44:01 +0000
ROA not before:           Mon 22 Mar 2021 14:31:13 +0000
ROA not after:            Tue 24 Mar 2026 14:31:13 +0000
asID:                     263801
IP address blocks:        138.122.188.0/22 maxlen: 24
                          168.196.244.0/22 maxlen: 24
                          2803:7c40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1785410 (0x1b3e42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2affce9463fa8415cf700b389ea137e31e6bc44d
        Validity
            Not Before: Mar 22 14:31:13 2021 GMT
            Not After : Mar 24 14:31:13 2026 GMT
        Subject: CN=b3dff6846c3bc843300a0510befac19f81eaa182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:06:fc:25:87:4a:de:8f:c9:76:33:13:54:9b:
                    66:5a:8b:97:ca:aa:24:e0:af:29:30:35:28:e6:fb:
                    b4:9c:c1:3d:60:07:96:bc:19:fe:00:d5:72:1b:50:
                    05:0c:57:f3:af:aa:e6:17:64:9a:30:a3:d3:2d:52:
                    8b:37:79:8f:b6:d1:64:65:1b:1f:06:f7:48:30:29:
                    24:ee:76:df:1f:a9:85:55:fa:73:16:01:93:0b:c9:
                    14:3f:f5:9a:1c:20:e8:d4:d8:34:a4:58:eb:4b:12:
                    e2:ea:9c:2a:ad:bc:0e:92:1e:62:91:b7:92:1c:23:
                    28:aa:1e:ea:1b:68:4f:af:b9:cb:e0:a5:a1:d6:0b:
                    aa:f4:c9:75:78:60:fb:a6:0e:fc:3d:8d:d8:64:06:
                    00:53:d0:e2:22:90:bf:10:33:66:70:d7:6d:4f:5e:
                    ba:e5:46:4e:56:72:18:f6:fd:5b:98:9e:49:ec:3e:
                    a6:b8:aa:68:ad:9e:44:81:cb:c8:0f:44:21:eb:93:
                    09:9f:33:04:a5:7b:ed:52:b5:0b:e1:a6:d0:c0:8d:
                    68:ec:a1:1b:34:a1:88:aa:e0:36:6f:33:6d:3e:48:
                    b1:36:de:80:d2:b1:37:34:40:f2:a5:2e:16:da:a1:
                    c7:6f:80:2b:41:72:ff:e7:7a:b8:92:5a:6b:db:5e:
                    64:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:C8:81:7F:E9:F0:E4:4A:FC:C7:05:79:7C:86:BB:A6:66:1B:28:15
            X509v3 Authority Key Identifier:
                keyid:57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/b3dff6846c3bc843300a0510befac19f81eaa182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.188.0/22
                  168.196.244.0/22
                IPv6:
                  2803:7c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:ff:ef:f7:bf:7e:7c:f3:6f:11:27:eb:69:48:3a:10:79:4b:
         76:5f:bb:74:53:f3:e6:bc:0a:22:cb:88:7d:f0:21:2b:95:25:
         8b:85:ae:3a:d3:cb:ed:9a:bd:cd:39:f1:9f:15:d0:e1:48:9c:
         1c:fb:81:20:c9:d6:c1:12:83:d9:8d:19:5d:a1:7f:3f:ca:58:
         bb:8e:52:3f:b3:4c:23:b4:53:44:a5:4b:fa:93:88:26:27:25:
         e7:74:e9:c0:e6:00:91:7a:f4:5e:0c:49:bb:ed:81:1b:3b:71:
         26:e7:a6:9a:21:1f:f3:74:8e:b0:50:48:53:1c:3e:c1:41:26:
         d4:0f:69:4d:ff:17:e4:11:94:ce:41:92:2d:d3:c9:e4:c0:93:
         92:ad:7d:e5:1b:57:9b:bc:13:44:6d:47:44:25:f4:dd:49:07:
         44:ae:c7:ba:d1:b5:33:62:09:f7:cc:25:64:93:95:19:69:ca:
         44:c4:42:55:d6:ba:b1:b9:1d:27:cf:80:d3:d4:81:d7:f6:e5:
         af:98:71:c4:42:16:76:a8:54:f4:17:d5:97:f3:6b:2a:11:e9:
         61:e9:3b:58:63:11:3c:d1:9d:9c:4c:9a:04:51:85:eb:47:c1:
         37:68:4e:35:da:38:83:7e:8b:69:71:92:f9:75:36:4c:25:12:
         6c:72:56:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----