Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/83a5964f6e898d9c04811b352f4847ab238a57f2.roa
File:                     83a5964f6e898d9c04811b352f4847ab238a57f2.roa (raw, json)
Hash identifier:          eA7AwWnu1iyQPUCFztWDltpn6bWJAdoOctZ4vRBYpIk=
Subject key identifier:   3A:61:0B:FB:FF:48:C9:6E:DE:11:2E:16:01:32:B1:D1:76:B5:76:D1
Certificate issuer:       /CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
Certificate serial:       14DFDE
Authority key identifier: D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/83a5964f6e898d9c04811b352f4847ab238a57f2.roa
Signing time:             Sat 16 Sep 2023 17:54:27 +0000
ROA not before:           Fri 15 Sep 2023 17:54:27 +0000
ROA not after:            Tue 16 Sep 2025 17:54:27 +0000
asID:                     263833
IP address blocks:        138.255.168.0/22 maxlen: 24
                          2803:8640::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368030 (0x14dfde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5
        Validity
            Not Before: Sep 15 17:54:27 2023 GMT
            Not After : Sep 16 17:54:27 2025 GMT
        Subject: CN=83a5964f6e898d9c04811b352f4847ab238a57f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ff:e4:61:08:84:ca:b6:6b:4c:7d:33:61:7e:
                    8d:18:8b:ce:c5:97:1a:c4:cf:ba:ee:a6:9f:b6:9b:
                    51:65:cf:34:2b:7e:01:24:4c:de:e2:11:83:8b:fe:
                    3d:8f:26:43:f6:25:50:7b:a4:86:58:ec:8a:cf:1b:
                    23:a3:34:7e:36:de:4e:c0:a0:11:55:75:5b:d8:d8:
                    34:1b:27:b5:98:f8:e2:7f:b3:5f:2e:5d:61:81:ec:
                    3f:2a:d4:47:af:5b:30:f9:35:a6:02:77:e2:b4:d1:
                    e9:3d:23:e1:45:b3:52:99:bd:4e:be:a2:51:35:38:
                    09:86:df:d7:7e:15:bf:35:81:2f:e6:ee:17:7c:2f:
                    4a:7b:bc:a0:b8:77:a8:29:63:e2:6e:40:6b:d3:8c:
                    10:43:2a:ee:c1:ea:62:8b:76:fc:35:7d:3f:42:ac:
                    87:4a:a9:25:f7:60:95:a1:80:e5:d8:db:ad:79:c9:
                    0b:ba:5b:63:fa:8e:5d:6f:12:43:95:35:66:fc:a8:
                    b1:d4:09:a6:ad:3b:34:05:ad:3d:c2:f0:dd:3b:d9:
                    fe:15:2a:25:10:37:ac:45:d7:4c:09:5b:67:32:bc:
                    e5:80:e3:be:f8:ba:28:29:7c:34:60:af:a2:4d:58:
                    89:2f:15:99:48:9e:d7:6a:ac:f8:71:ad:f4:89:72:
                    bd:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:61:0B:FB:FF:48:C9:6E:DE:11:2E:16:01:32:B1:D1:76:B5:76:D1
            X509v3 Authority Key Identifier:
                keyid:D9:5B:B7:5B:CC:D6:84:81:82:30:92:AF:E5:A7:96:77:9D:89:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/83a5964f6e898d9c04811b352f4847ab238a57f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/debb61c0-6400-46d2-a41c-7346a80fe05c/8d55ec90e8b6e5eca6a4060a9a18532fe1f391b5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.168.0/22
                IPv6:
                  2803:8640::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:1b:5a:57:f7:30:c3:72:9c:6b:aa:c4:fd:e0:6f:ee:47:25:
         5d:65:c7:f7:b1:23:21:03:3f:f1:6f:89:5d:c2:25:fe:ca:b4:
         59:c7:53:1a:29:26:ad:a7:47:06:44:15:c5:32:38:c9:29:fe:
         bb:5c:bf:e6:e5:e3:0b:18:e6:04:11:9f:4f:6b:26:a2:f8:42:
         fe:e1:eb:0b:52:14:86:dc:12:00:61:76:d8:d9:ad:81:c4:a3:
         11:81:f4:c7:09:ac:ae:f3:05:30:7f:ed:8c:71:8e:d3:90:a4:
         c0:1e:bc:db:7f:5b:e0:e1:5f:91:f6:89:59:06:5c:e9:fe:d4:
         b7:4b:a4:02:27:de:84:99:ed:48:9b:e4:b5:ea:2f:e8:27:43:
         7c:a9:2c:a7:29:49:10:6c:44:ba:64:fd:28:0a:4f:45:d8:1e:
         86:0b:a1:76:c4:13:bb:d6:88:29:23:26:7c:45:d4:81:98:da:
         f1:60:bc:8f:74:01:b9:a7:fe:4f:6d:13:4d:21:e0:d3:99:6b:
         3e:5d:7b:cf:0b:fe:e2:c8:d5:95:eb:8c:ae:02:8d:e3:42:c5:
         f5:29:f7:09:41:86:97:3d:c7:ac:53:0c:64:92:d1:17:17:79:
         de:bb:ed:d4:c9:ad:7d:6e:65:fd:8c:8c:bf:6a:79:9f:5c:34:
         9e:f5:ff:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----