Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/730a397fa2b48059fa033b39027434ccce67f24d.roa
File:                     730a397fa2b48059fa033b39027434ccce67f24d.roa (raw, json)
Hash identifier:          OubceavPSylVbYaMH6vPwLHIuC6i5R30fM3zNFIQo3c=
Subject key identifier:   ED:2C:AD:F9:1F:44:16:E9:2A:C1:24:F1:88:84:D6:7E:89:8C:BE:BC
Certificate issuer:       /CN=30855b14b9a043ea2127093be7f867b091f60231
Certificate serial:       209615
Authority key identifier: 2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/730a397fa2b48059fa033b39027434ccce67f24d.roa
Signing time:             Fri 19 May 2023 12:44:47 +0000
ROA not before:           Thu 18 May 2023 12:44:47 +0000
ROA not after:            Mon 19 May 2025 12:44:47 +0000
asID:                     264646
IP address blocks:        138.0.88.0/22 maxlen: 24
                          2803:1780:8000::/47 maxlen: 48
                          2803:1780:8002::/48 maxlen: 48
                          2803:1780::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2135573 (0x209615)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30855b14b9a043ea2127093be7f867b091f60231
        Validity
            Not Before: May 18 12:44:47 2023 GMT
            Not After : May 19 12:44:47 2025 GMT
        Subject: CN=730a397fa2b48059fa033b39027434ccce67f24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:41:b5:80:98:39:77:7b:a9:e2:07:c4:f3:87:
                    d8:d5:fb:d5:e8:49:17:05:5b:60:b8:6e:42:7f:43:
                    60:e4:0c:64:f7:53:16:da:0c:42:0e:15:c0:5b:05:
                    10:eb:61:c9:f9:71:6c:61:2b:0b:47:4b:bf:a9:98:
                    67:95:89:4b:7d:d4:11:1d:34:67:e0:76:ed:72:31:
                    f1:5f:ce:c0:ed:3e:8c:8b:19:62:97:55:f4:01:81:
                    5c:de:18:4a:da:1a:38:86:ae:94:84:4e:14:85:15:
                    0b:d8:b7:12:fa:59:a0:d2:c4:0d:76:9a:06:ed:32:
                    f9:b7:5b:dd:ac:d5:a5:7e:78:46:98:4f:8a:8d:2c:
                    28:42:52:4c:87:e2:33:e3:2d:73:f3:1a:40:83:82:
                    3c:79:49:15:43:7e:83:ac:f9:16:3f:4e:a0:6b:02:
                    f9:bc:10:b4:be:a4:b5:e3:30:55:cd:85:84:d9:d3:
                    42:c7:b4:1c:ce:12:36:35:28:24:29:76:66:08:35:
                    da:e7:83:88:40:50:47:a3:1a:5e:a8:4b:11:19:34:
                    89:27:e1:b8:f3:7c:13:4a:51:38:7b:bc:df:98:ee:
                    6f:7c:22:2d:8c:81:87:08:09:ec:b4:27:e4:97:67:
                    3e:3d:ff:3e:37:d3:df:b9:f6:62:a2:e4:1a:97:88:
                    e4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2C:AD:F9:1F:44:16:E9:2A:C1:24:F1:88:84:D6:7E:89:8C:BE:BC
            X509v3 Authority Key Identifier:
                keyid:2A:F0:2A:C0:4A:03:65:65:77:24:46:AD:9B:A9:03:43:2F:00:64:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/30855b14b9a043ea2127093be7f867b091f60231.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/730a397fa2b48059fa033b39027434ccce67f24d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b9c7e2c6-a0d3-44db-bbf0-c194d576f88c/30855b14b9a043ea2127093be7f867b091f60231.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.88.0/22
                IPv6:
                  2803:1780::/45
                  2803:1780:8000::-2803:1780:8002:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         42:90:1d:c1:8b:8e:a9:28:85:1e:a4:13:dd:20:8b:a3:3e:52:
         77:ee:e0:cb:52:2e:63:5e:db:a7:a4:2a:6d:d9:e0:ee:6a:6c:
         f2:14:d3:7e:d5:6c:fb:12:fb:27:ca:9d:ff:74:07:b9:cb:fb:
         0d:49:91:c7:d3:b6:d4:4f:4e:a7:ba:a7:4d:75:3c:bd:08:53:
         b3:1c:19:dd:51:8a:8a:af:18:d2:e9:0f:8a:03:6b:59:76:87:
         ac:71:e1:95:0f:63:de:18:80:45:db:20:03:d6:61:15:47:3c:
         5e:a9:44:9a:03:fc:51:02:c5:02:ff:5f:ff:17:d1:5c:3b:f8:
         d5:5f:2d:b1:75:84:a6:00:73:a3:3d:fc:7a:14:a6:0d:fa:d9:
         36:29:e9:24:36:75:81:4d:21:2e:a4:bc:6e:e7:e0:5c:65:17:
         75:94:df:84:ca:a4:6a:a6:d1:e3:0b:a5:d3:3e:6f:e5:e2:56:
         1c:b3:15:45:e3:cb:2d:d1:7a:f0:aa:08:18:8d:4a:9b:98:ea:
         f0:bd:89:de:fb:54:a2:21:39:a3:1f:c3:75:f4:bf:3c:e6:5d:
         54:79:93:e7:4c:17:12:ca:a4:22:76:22:2d:e6:d8:c1:d7:8b:
         36:c9:5d:22:96:71:7c:af:34:ae:bd:5b:89:da:7e:1a:ce:ab:
         e1:8d:2b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----