Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/f859ae8a4b2c132c5e59e0c2450fa342f955fb77.roa
File:                     f859ae8a4b2c132c5e59e0c2450fa342f955fb77.roa (raw, json)
Hash identifier:          VcgbxqZKVcUkyZopcnuxes4gP0zJO1QdMm4Re6JqtNg=
Subject key identifier:   BC:ED:71:06:8A:38:0A:E3:A2:8C:DF:B9:A5:B8:43:E2:F3:E2:C3:F0
Certificate issuer:       /CN=2affce9463fa8415cf700b389ea137e31e6bc44d
Certificate serial:       2618B4
Authority key identifier: 57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/f859ae8a4b2c132c5e59e0c2450fa342f955fb77.roa
Signing time:             Wed 24 Jan 2024 19:20:15 +0000
ROA not before:           Wed 24 Jan 2024 19:20:15 +0000
ROA not after:            Sat 24 Jan 2026 19:20:15 +0000
asID:                     263801
IP address blocks:        138.122.188.0/22 maxlen: 32
                          168.196.244.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2496692 (0x2618b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2affce9463fa8415cf700b389ea137e31e6bc44d
        Validity
            Not Before: Jan 24 19:20:15 2024 GMT
            Not After : Jan 24 19:20:15 2026 GMT
        Subject: CN=f859ae8a4b2c132c5e59e0c2450fa342f955fb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:e3:13:ad:e9:3a:09:ae:19:cc:fc:2a:ee:
                    e9:77:e6:db:79:6d:ec:2c:2d:4f:20:62:3e:96:fb:
                    7d:74:6b:95:88:a5:fa:c4:1d:6a:aa:19:7b:37:fe:
                    60:e8:29:30:a6:c0:23:6e:16:75:81:74:e8:02:94:
                    7a:92:87:c9:b0:19:a1:f8:cf:e9:6b:a5:9d:70:41:
                    81:c6:c8:12:5b:c7:f0:dc:18:64:46:1f:fd:f2:0f:
                    8a:95:76:82:db:27:94:d6:dc:6b:c4:0d:79:50:45:
                    2a:4d:a6:97:eb:92:5a:be:38:47:e6:d0:c2:8b:de:
                    e5:c9:f8:8a:1b:58:40:6b:69:45:45:fa:b4:58:49:
                    86:66:a8:c7:db:da:5f:e4:21:2c:95:9a:39:72:f3:
                    3e:2f:e3:dc:56:a6:c5:34:cf:c2:a8:e4:59:31:45:
                    b7:07:da:ac:c9:9a:7c:73:51:c2:f1:65:b2:62:28:
                    c0:98:54:7c:c3:7c:68:50:12:07:3e:25:dd:e3:ae:
                    34:4f:eb:83:74:53:ad:38:7a:af:7b:d4:04:c3:13:
                    42:0d:96:0f:0a:32:63:69:25:d1:36:48:34:6e:6f:
                    cb:07:e0:55:85:3f:54:13:51:be:88:a6:12:f7:ad:
                    d9:41:9d:fd:d3:24:52:d0:16:14:3b:2a:98:24:30:
                    4c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:ED:71:06:8A:38:0A:E3:A2:8C:DF:B9:A5:B8:43:E2:F3:E2:C3:F0
            X509v3 Authority Key Identifier:
                keyid:57:C5:73:CA:21:B7:22:60:38:1E:CD:62:D5:85:B5:5B:49:4B:DA:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2affce9463fa8415cf700b389ea137e31e6bc44d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/f859ae8a4b2c132c5e59e0c2450fa342f955fb77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b5b05d68-a3da-45c0-81a6-b9d30034748f/2affce9463fa8415cf700b389ea137e31e6bc44d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.188.0/22
                  168.196.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:77:df:fa:43:2b:06:06:6c:cb:8c:69:18:2f:8e:27:ba:a9:
         51:8e:51:4c:ea:66:17:16:cd:01:a3:fa:7f:7f:32:ef:d3:fb:
         de:68:ee:9c:38:09:2c:ba:20:eb:9c:7e:fd:92:1f:ac:24:26:
         90:74:4b:78:f8:0f:cc:28:e4:13:83:56:14:db:d7:9a:cc:0b:
         bd:85:20:93:14:6a:18:fc:2a:f2:62:5a:38:0f:18:60:c4:6e:
         15:d1:0d:ff:43:f8:90:62:13:42:33:dd:67:86:09:d6:29:34:
         6b:34:59:00:96:d8:43:f7:fe:a8:f9:fe:e1:cd:24:a4:64:51:
         44:0a:7a:22:e9:8e:01:74:5e:7e:2a:3c:7c:a6:7e:28:9e:7d:
         ed:fc:69:cd:f3:7e:6c:4e:6b:63:ed:54:3a:89:d3:dc:cb:0c:
         f3:85:d6:e0:69:07:82:de:99:2d:6a:90:59:56:7f:d8:1b:72:
         50:3b:08:0c:93:77:6a:b1:d5:98:44:c9:e4:6e:ca:7b:07:df:
         b4:1f:92:9e:4f:a4:69:06:e1:41:38:f7:ea:94:99:08:25:7d:
         94:f8:29:53:97:da:3e:7d:13:2c:e6:ae:20:04:96:b8:63:61:
         10:5d:78:f0:58:20:cc:1a:ec:89:81:40:b2:7c:48:dd:c0:55:
         6b:43:1a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----