Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/6318a65255f3690ff5bdc8fdbfe773b04623e6d8.roa
File:                     6318a65255f3690ff5bdc8fdbfe773b04623e6d8.roa (raw, json)
Hash identifier:          BZreRehX2/8XbJGOSYug/tIjoen7nrlwq6nm9dH/iCQ=
Subject key identifier:   BC:A4:5D:0D:D5:6C:41:1A:C7:14:69:1B:4C:98:BA:A6:86:B0:58:3B
Certificate issuer:       /CN=fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c
Certificate serial:       27705E
Authority key identifier: E9:04:9F:BD:E0:65:A3:72:D2:B6:C4:AE:F9:EB:3A:67:F4:11:D2:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/6318a65255f3690ff5bdc8fdbfe773b04623e6d8.roa
Signing time:             Wed 20 Mar 2024 22:03:10 +0000
ROA not before:           Wed 20 Mar 2024 22:03:10 +0000
ROA not after:            Fri 20 Mar 2026 22:03:10 +0000
asID:                     265688
IP address blocks:        138.117.84.0/22 maxlen: 24
                          2803:1840::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2584670 (0x27705e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c
        Validity
            Not Before: Mar 20 22:03:10 2024 GMT
            Not After : Mar 20 22:03:10 2026 GMT
        Subject: CN=6318a65255f3690ff5bdc8fdbfe773b04623e6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b3:61:04:85:95:1e:d7:5f:ab:c5:af:a6:19:
                    3e:20:22:64:5c:42:4f:29:2a:db:a9:d8:54:d2:f1:
                    76:7d:9e:49:33:3f:7e:cf:e6:ff:03:26:4b:9e:8e:
                    17:73:e7:1a:92:47:49:61:69:61:09:72:5e:41:c0:
                    f9:14:0c:dd:45:71:bc:d4:5c:e4:15:bc:12:ec:9d:
                    df:6c:6d:3d:7c:57:e9:f5:72:cb:44:0a:d9:e0:3e:
                    26:ea:a3:cc:44:ad:fd:d7:a8:62:a6:8f:7b:1e:11:
                    11:4e:9a:20:21:d5:fa:0d:a3:e2:37:65:b9:28:61:
                    75:1c:b4:54:aa:51:84:ad:34:74:0f:20:a1:92:77:
                    fc:c8:fc:82:23:5a:44:a1:ed:39:bc:6e:a2:f9:b7:
                    31:b8:4a:8d:98:6f:54:28:a4:ef:68:10:0b:e1:56:
                    c7:de:0d:bb:7e:f0:e0:70:c6:e4:e3:21:c6:99:5a:
                    66:5d:ad:7c:1b:54:34:2f:84:5d:ad:b1:c0:d1:2c:
                    8d:77:d2:c3:02:94:b2:ad:b9:06:1c:eb:a6:7f:9e:
                    ca:0b:e2:82:30:83:ff:8f:cd:0b:e9:92:49:8b:5d:
                    ff:f2:46:cf:29:09:90:4c:f2:52:7d:92:5d:ed:15:
                    d0:97:ec:e9:1e:98:f0:a7:6e:2b:82:ca:37:9c:68:
                    cc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:5D:0D:D5:6C:41:1A:C7:14:69:1B:4C:98:BA:A6:86:B0:58:3B
            X509v3 Authority Key Identifier:
                keyid:E9:04:9F:BD:E0:65:A3:72:D2:B6:C4:AE:F9:EB:3A:67:F4:11:D2:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/6318a65255f3690ff5bdc8fdbfe773b04623e6d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9ba4996-db87-4743-8873-9093046c3273/fffdaf9f66bb88ef40010d7ad90a6d20ab14ed4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.84.0/22
                IPv6:
                  2803:1840::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:43:0e:e7:c4:6d:02:23:a6:cf:60:da:78:b9:04:c3:8b:25:
         81:d6:48:7a:46:18:cc:f1:c9:3e:9d:f0:86:ff:29:1e:3a:0a:
         cd:76:3e:22:92:5b:c0:b7:27:48:0e:3d:5d:07:2b:26:75:a0:
         52:33:70:16:e1:d1:9f:66:d6:8f:d1:90:af:88:f6:aa:59:71:
         5f:07:5a:a6:e7:61:a6:6d:cc:77:b1:fc:31:2c:2e:81:e5:da:
         42:cd:8d:50:e5:65:48:1a:88:78:17:bb:01:c8:b1:5d:02:f8:
         3e:d7:d4:65:2e:c2:71:2f:ae:6a:d8:00:23:53:e6:39:29:2d:
         7f:16:8a:c1:9f:38:0b:00:ca:4c:2e:71:f0:91:5a:ce:c6:e9:
         12:7d:ef:8c:8f:ad:9d:25:f3:c2:5d:76:86:17:84:e5:86:5b:
         b7:5f:3a:f4:bd:94:52:05:64:01:60:31:dd:e0:77:c2:d1:fb:
         f0:61:af:35:66:54:70:28:a8:98:5b:67:66:d8:7a:3b:a6:db:
         64:99:50:1a:14:df:02:ac:a6:6c:04:6d:73:6b:3c:d2:1b:af:
         c9:ee:03:9a:7a:6c:24:e1:ac:8a:3a:b2:68:bf:71:13:8f:13:
         6d:85:c4:2c:dc:4a:ef:1e:83:42:9f:36:72:81:fc:04:b9:7d:
         98:6e:d0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----