Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/596a5931c7e5c9d631d5a2d38a20e8795f72a6f9.roa
File:                     596a5931c7e5c9d631d5a2d38a20e8795f72a6f9.roa (raw, json)
Hash identifier:          yPsnyGnNHXePYUjCfsd7pZIIf4Dx5OrTTqpiJokX/xs=
Subject key identifier:   94:06:24:7A:DB:93:9D:57:2B:9E:48:2E:35:BA:F1:BD:18:83:53:BE
Certificate issuer:       /CN=1a88658a27071695cf06a4d90d6df905871a233a
Certificate serial:       13139B
Authority key identifier: 1A:D8:E3:FE:32:13:C7:51:55:FB:E4:F8:A7:4E:79:6A:C8:A6:D8:39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a88658a27071695cf06a4d90d6df905871a233a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/596a5931c7e5c9d631d5a2d38a20e8795f72a6f9.roa
Signing time:             Tue 12 Sep 2023 08:30:01 +0000
ROA not before:           Mon 11 Sep 2023 08:30:01 +0000
ROA not after:            Wed 10 Sep 2025 08:30:01 +0000
asID:                     265501
IP address blocks:        138.255.116.0/22 maxlen: 24
                          2806:209::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1250203 (0x13139b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a88658a27071695cf06a4d90d6df905871a233a
        Validity
            Not Before: Sep 11 08:30:01 2023 GMT
            Not After : Sep 10 08:30:01 2025 GMT
        Subject: CN=596a5931c7e5c9d631d5a2d38a20e8795f72a6f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:48:6e:25:86:59:ba:cd:52:32:1b:3e:76:3b:
                    ae:02:f6:ef:85:62:84:34:c5:2e:5b:d5:c0:bc:b8:
                    fd:af:54:37:72:82:90:84:7f:95:34:d0:01:b6:83:
                    9a:3f:b9:49:94:fe:85:55:ba:70:e8:92:21:62:ee:
                    45:f0:52:5c:95:f9:b5:87:c4:df:59:04:58:58:c0:
                    41:19:cd:47:80:89:4f:85:ce:05:ae:a1:f1:27:34:
                    e3:ca:ad:97:a6:c0:82:0c:86:8e:e6:74:6f:d3:77:
                    88:6e:34:8a:0f:49:c3:32:b4:9c:05:b3:a1:df:0e:
                    14:3e:7c:8b:b9:65:e8:b1:1a:8f:ee:eb:ba:7e:06:
                    d6:69:48:a1:f9:2e:54:5d:1c:7b:bd:8b:78:cc:a8:
                    7f:28:66:26:9e:3f:ab:d8:9e:1d:80:3b:3b:3b:94:
                    d6:5c:ad:e5:63:c6:5c:7a:10:87:3a:a5:c9:7c:c3:
                    cb:12:33:1a:ed:18:9a:c2:44:82:6a:c5:15:6b:1e:
                    f7:d9:2e:4c:c4:5d:cc:81:a1:83:0f:b1:92:08:7f:
                    22:aa:1e:6a:ab:63:ab:54:47:8f:a2:f1:b1:ce:ec:
                    8f:73:c4:50:35:21:c7:5d:45:a8:bc:cf:e9:b7:06:
                    0a:ee:40:ad:da:2b:38:67:9d:93:ce:8c:72:46:7a:
                    4d:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:06:24:7A:DB:93:9D:57:2B:9E:48:2E:35:BA:F1:BD:18:83:53:BE
            X509v3 Authority Key Identifier:
                keyid:1A:D8:E3:FE:32:13:C7:51:55:FB:E4:F8:A7:4E:79:6A:C8:A6:D8:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1a88658a27071695cf06a4d90d6df905871a233a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/596a5931c7e5c9d631d5a2d38a20e8795f72a6f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cabf9a9f-342b-4b73-87d2-3c767ae2101d/1a88658a27071695cf06a4d90d6df905871a233a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.116.0/22
                IPv6:
                  2806:209::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:29:6e:67:6c:bb:35:c9:0c:68:20:27:81:63:aa:47:5c:9c:
         72:98:7b:e8:88:09:f2:37:e5:f7:54:25:0d:64:a2:cb:96:92:
         02:15:fb:d8:84:67:cc:8a:da:e8:c6:81:f7:a6:92:55:63:1e:
         92:72:a6:0f:06:5a:80:ea:34:0d:f7:4f:98:c6:06:73:8a:07:
         c9:e5:48:2b:29:e9:71:f0:92:5e:4d:12:95:be:cb:3c:af:b7:
         82:ae:1d:57:33:57:56:17:e1:84:19:40:7b:5c:b2:a3:cb:59:
         32:c5:d2:1a:d7:57:07:2e:70:ba:0b:82:59:24:22:d8:11:24:
         3d:3d:48:25:0f:41:6c:f1:3f:15:0c:73:cd:89:28:f5:95:54:
         4c:57:30:f1:3b:da:a0:2c:5f:e5:cd:06:c8:12:a8:73:91:70:
         c2:c1:90:da:58:0e:e1:50:0c:7f:73:bc:88:b9:9b:e4:4e:df:
         92:06:c9:32:64:7d:42:8d:69:38:2c:2b:f6:bb:02:c2:59:53:
         a0:1e:96:1c:f2:d6:17:f3:4e:81:cc:85:55:78:c5:bb:fc:eb:
         00:93:d0:06:b0:28:66:52:96:d9:07:f0:d3:a0:cf:65:d4:b5:
         06:23:ca:b8:ef:43:19:ed:ee:c7:ed:1b:9f:ce:54:3d:f2:e7:
         ac:47:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----