Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/54205e425a3bea6290fdb4547b4fd9d4fc91088f.roa
File:                     54205e425a3bea6290fdb4547b4fd9d4fc91088f.roa (raw, json)
Hash identifier:          z6I3ZszSVh2o93qpgyrb1AXjZ11d6umNzo/SYtfe7pU=
Subject key identifier:   12:66:71:A1:82:20:8B:DC:5F:6A:8A:12:D0:6C:99:D8:96:A2:84:FB
Certificate issuer:       /CN=954ca0092fe1270a75f055c704b40b0b1f6c6601
Certificate serial:       21C747
Authority key identifier: 11:AD:4B:DE:7D:DD:68:AC:34:0D:5A:3F:DC:F5:4F:F7:D7:8C:1B:05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/954ca0092fe1270a75f055c704b40b0b1f6c6601.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/54205e425a3bea6290fdb4547b4fd9d4fc91088f.roa
Signing time:             Mon 12 Jun 2023 23:41:16 +0000
ROA not before:           Sun 11 Jun 2023 23:41:16 +0000
ROA not after:            Thu 12 Jun 2025 23:41:16 +0000
asID:                     26617
IP address blocks:        138.219.156.0/22 maxlen: 24
                          131.100.140.0/22 maxlen: 24
                          190.120.0.0/19 maxlen: 24
                          138.99.0.0/22 maxlen: 24
                          168.232.36.0/22 maxlen: 24
                          2803:9d80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2213703 (0x21c747)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=954ca0092fe1270a75f055c704b40b0b1f6c6601
        Validity
            Not Before: Jun 11 23:41:16 2023 GMT
            Not After : Jun 12 23:41:16 2025 GMT
        Subject: CN=54205e425a3bea6290fdb4547b4fd9d4fc91088f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:29:8f:f5:8a:11:2c:9d:b9:94:32:61:c6:da:
                    7e:6b:1d:e9:10:38:21:d9:95:f2:87:d0:3b:0c:44:
                    3f:e6:44:b0:69:37:07:9f:3f:9e:21:5a:1b:ec:1c:
                    7f:43:53:39:85:68:e3:93:bd:64:d4:b5:66:e8:a6:
                    d4:33:83:7f:cf:c7:65:db:28:dc:b5:89:06:4a:26:
                    ba:95:fc:38:ca:bd:e8:30:fc:f5:64:6e:ec:70:79:
                    53:87:30:3f:55:b9:20:2f:ad:14:11:7c:88:45:6e:
                    e7:7f:d7:14:da:8d:95:38:16:66:95:b1:6e:7d:25:
                    2b:7f:0c:37:6a:ef:6b:d3:35:02:cf:53:87:93:87:
                    6e:d1:c1:7d:b8:c7:f8:df:77:25:d8:17:0e:ca:54:
                    2f:34:99:f2:7d:00:76:7f:f3:52:b8:44:d3:86:f1:
                    1d:3c:3e:79:a4:4a:50:c4:87:cb:72:de:0d:51:68:
                    3a:d5:e2:56:79:40:19:99:72:35:3c:92:ab:a4:37:
                    06:33:cf:0e:ac:c6:53:33:5e:43:89:06:28:de:90:
                    5f:e9:e2:4f:4a:ca:ad:d4:7b:d2:6f:54:b8:20:a6:
                    da:a4:d6:d9:46:0c:a7:51:11:cc:f9:58:d1:9a:f1:
                    7e:8b:19:76:c3:88:e1:9f:dc:86:45:8f:72:96:0d:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:66:71:A1:82:20:8B:DC:5F:6A:8A:12:D0:6C:99:D8:96:A2:84:FB
            X509v3 Authority Key Identifier:
                keyid:11:AD:4B:DE:7D:DD:68:AC:34:0D:5A:3F:DC:F5:4F:F7:D7:8C:1B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/954ca0092fe1270a75f055c704b40b0b1f6c6601.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/54205e425a3bea6290fdb4547b4fd9d4fc91088f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/954ca0092fe1270a75f055c704b40b0b1f6c6601.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.140.0/22
                  138.99.0.0/22
                  138.219.156.0/22
                  168.232.36.0/22
                  190.120.0.0/19
                IPv6:
                  2803:9d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:5b:42:13:80:36:32:10:40:ac:32:3d:9a:bd:b4:d5:22:61:
         90:b0:83:f8:5c:18:ac:53:58:04:f6:3f:cb:05:50:10:81:8f:
         5b:fe:e3:61:4a:3b:c8:64:ad:34:13:02:eb:28:d9:e1:2d:c1:
         a2:a4:4c:86:64:ce:cf:a1:de:85:1b:7f:6a:c4:b9:d4:dd:c7:
         6f:a3:cd:3e:d4:1b:5d:a4:d3:d2:e1:97:d3:12:f5:cf:cf:b2:
         0a:e2:69:76:1b:95:47:d3:96:4a:30:33:a7:7d:60:f1:16:c1:
         26:88:c3:3f:72:40:dd:f5:70:0c:4a:ba:8b:30:46:d5:c5:5c:
         3c:9f:b7:23:b5:58:ad:43:ab:53:15:9f:88:68:f1:b9:9c:87:
         22:c0:22:63:38:40:98:d8:0c:ec:0a:47:35:7b:bb:fd:54:ca:
         f3:4d:1f:5a:dc:7d:56:bb:cd:d4:d2:c8:64:62:04:81:c4:51:
         ee:e8:eb:df:fe:9b:01:7e:4c:35:9c:6c:85:2c:5a:c4:c7:b5:
         26:01:76:af:30:de:12:13:9d:b6:65:2b:62:29:25:2d:52:04:
         70:f7:78:85:f0:30:67:1d:d8:37:73:6a:92:19:4c:5c:e1:5f:
         50:a4:c5:dd:1c:34:48:72:68:77:f2:a0:74:11:3e:85:43:fc:
         5f:42:c9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----