Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/5cbda4a97392da9d8e1613f8de7d05fd8cc2a512.roa
File:                     5cbda4a97392da9d8e1613f8de7d05fd8cc2a512.roa (raw, json)
Hash identifier:          eCfjt+xG+d/DzYF7eILk/qvmsDux0qvycMvxZsLuN54=
Subject key identifier:   BD:5C:66:06:94:3F:DF:02:2A:36:D7:F6:D8:99:4D:0D:F2:9F:89:68
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       149B5D
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/5cbda4a97392da9d8e1613f8de7d05fd8cc2a512.roa
Signing time:             Sat 09 Sep 2023 08:30:00 +0000
ROA not before:           Fri 08 Sep 2023 08:30:00 +0000
ROA not after:            Sun 07 Sep 2025 08:30:00 +0000
asID:                     263833
IP address blocks:        138.255.168.0/22 maxlen: 22
                          2803:8640::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1350493 (0x149b5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Sep  8 08:30:00 2023 GMT
            Not After : Sep  7 08:30:00 2025 GMT
        Subject: CN=5cbda4a97392da9d8e1613f8de7d05fd8cc2a512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:54:71:79:3b:ce:26:48:05:e1:4f:ac:db:eb:
                    c5:7a:81:44:b5:af:ce:73:e7:39:5e:0e:46:18:c3:
                    66:eb:b3:bc:cb:1a:0c:47:e2:1e:33:75:40:d5:9b:
                    44:60:72:8b:9f:7e:38:b4:72:95:f3:69:ff:7b:5a:
                    bb:81:ad:1d:01:86:d3:9f:36:b6:69:95:e3:b9:bb:
                    9f:15:41:73:5c:2a:d6:63:58:1d:6f:16:39:38:2f:
                    86:26:cb:88:18:46:54:16:3d:9c:53:ff:08:0d:2e:
                    87:f4:1b:d4:05:74:43:f2:eb:83:d3:ea:b0:2c:6b:
                    bb:f1:25:32:37:3e:fd:52:62:d7:c5:3d:5c:d2:c2:
                    98:eb:6f:bc:7c:75:d8:0f:68:5c:cc:aa:54:11:3e:
                    b8:1b:a8:7e:0e:25:a2:b1:3d:91:56:41:0d:2e:9c:
                    b6:ef:d9:a9:d4:b7:1c:e9:97:d3:8d:ed:34:15:e6:
                    5d:ad:4c:20:68:a0:38:38:49:57:09:98:53:46:50:
                    1c:6d:de:d6:fc:86:bd:07:20:d3:33:78:b9:1b:31:
                    75:14:96:3f:6d:ad:1f:70:7d:1d:5f:8f:9e:f5:a7:
                    08:62:38:3c:d1:31:f8:a4:fe:6e:e7:52:18:25:74:
                    41:92:1d:c2:b1:2f:bd:27:01:eb:de:95:34:ca:7c:
                    78:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5C:66:06:94:3F:DF:02:2A:36:D7:F6:D8:99:4D:0D:F2:9F:89:68
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/5cbda4a97392da9d8e1613f8de7d05fd8cc2a512.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.168.0/22
                IPv6:
                  2803:8640::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:23:83:8f:1f:d4:16:14:8e:e9:59:37:ac:4e:87:e6:bf:e6:
         16:2a:13:10:05:bc:4a:43:3d:c0:09:31:79:1c:f0:61:60:7b:
         9a:cc:e9:da:af:4d:68:87:42:a9:f3:dd:ab:12:f8:f6:6a:49:
         b5:e8:f5:c3:4b:e3:0e:95:ae:57:3d:82:61:1b:0d:7e:65:3c:
         d0:b5:e3:b2:f6:94:0a:2f:f9:da:6f:49:b7:41:d0:20:3c:bf:
         90:60:31:20:d5:75:96:a2:2e:e2:e1:51:95:f1:b6:76:3a:68:
         9b:46:46:82:bd:6f:65:14:43:02:2d:af:62:b7:6f:00:50:cf:
         82:3c:9e:2b:a1:da:10:f5:91:fd:52:57:0b:f1:d4:80:af:82:
         f3:88:3d:f4:38:5b:d9:74:03:d6:6a:1a:cd:23:de:09:4e:a8:
         e1:dc:b1:f2:a8:fd:a2:55:21:a3:64:27:ec:ff:39:00:8f:a4:
         f8:a2:32:a5:de:db:1d:1a:05:2b:e6:fd:51:d1:52:51:77:c9:
         fa:4f:f5:c6:d5:4f:6d:24:f6:c0:f9:7c:08:4d:aa:be:50:2c:
         1d:ef:6d:18:ad:e4:92:ed:73:f0:d7:26:ed:94:d1:d1:29:f9:
         38:96:af:97:0a:99:02:33:74:f2:09:39:23:96:2f:82:76:22:
         f8:b3:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----