Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3e12766422bd0f299828a738da00f8f4ed4b8a0b.roa
File:                     3e12766422bd0f299828a738da00f8f4ed4b8a0b.roa (raw, json)
Hash identifier:          P63HXyjZsdVViruPXO8rH8jAQ2gg/pIvikmrGMrx74M=
Subject key identifier:   AA:E5:A8:C2:70:E1:2E:64:BE:B6:35:41:44:26:BF:66:D6:4D:77:FB
Certificate issuer:       /CN=3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7
Certificate serial:       1D1E6A
Authority key identifier: 54:07:E3:26:0E:37:3F:FA:85:65:42:62:04:BA:57:D5:22:12:FB:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3e12766422bd0f299828a738da00f8f4ed4b8a0b.roa
Signing time:             Mon 10 Jul 2023 18:28:04 +0000
ROA not before:           Sun 09 Jul 2023 18:28:04 +0000
ROA not after:            Thu 10 Jul 2025 18:28:04 +0000
asID:                     269974
IP address blocks:        138.122.4.0/22 maxlen: 22
                          2803:d440::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908330 (0x1d1e6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7
        Validity
            Not Before: Jul  9 18:28:04 2023 GMT
            Not After : Jul 10 18:28:04 2025 GMT
        Subject: CN=3e12766422bd0f299828a738da00f8f4ed4b8a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c2:13:76:cf:b7:17:e8:55:f7:3f:cc:de:ad:
                    83:9a:33:dd:20:0e:5e:f0:ce:fe:d4:54:cb:a1:d1:
                    a6:d1:89:bd:93:0c:bd:5b:c4:31:a7:44:3b:1a:48:
                    99:db:97:73:f1:a7:a9:45:a5:d1:2f:67:65:ac:7d:
                    66:29:28:26:cc:12:75:4e:c6:9c:85:e5:ef:25:6a:
                    84:4b:73:4c:99:19:00:ae:3d:e3:4c:3c:a9:16:35:
                    0c:c1:ea:0a:42:37:c3:5b:5b:04:14:a4:8a:d3:6e:
                    8a:aa:a5:74:46:c4:66:ea:bb:62:2e:7f:df:11:fc:
                    0b:f2:35:c2:77:c6:e7:fd:75:28:3e:8c:e3:25:22:
                    0e:f1:51:ac:62:7d:e5:04:3d:cf:03:f7:af:ad:29:
                    ec:22:94:21:4b:8d:bc:84:65:b0:3d:8f:06:fd:b9:
                    4a:fe:73:f2:85:75:e4:e6:82:f3:7e:13:2d:9a:f7:
                    ff:02:8e:89:84:c4:65:11:78:e6:6b:60:ed:23:6c:
                    48:8d:b0:00:d9:60:c9:d8:ba:dc:9e:05:6f:31:c1:
                    29:bd:54:78:96:2a:97:d7:85:9f:11:79:2b:d9:74:
                    49:f1:5a:e7:6c:40:a6:4e:0f:17:34:d7:00:ce:65:
                    19:42:17:22:15:88:9f:c7:c6:10:4a:dd:0f:31:1f:
                    4e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E5:A8:C2:70:E1:2E:64:BE:B6:35:41:44:26:BF:66:D6:4D:77:FB
            X509v3 Authority Key Identifier:
                keyid:54:07:E3:26:0E:37:3F:FA:85:65:42:62:04:BA:57:D5:22:12:FB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3e12766422bd0f299828a738da00f8f4ed4b8a0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e27c8ded-fabf-42f1-a452-28c5544083e4/3aa8de614ca05bcd2943ee2f4ffb30bf19a864b7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.4.0/22
                IPv6:
                  2803:d440::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:6a:33:59:65:3b:43:a7:5c:5f:4b:fe:e2:22:d1:c3:a2:fd:
         3c:a9:53:aa:23:f8:5b:65:d6:c6:33:66:84:d8:3d:26:0a:b1:
         c5:bc:c7:4f:bc:1f:22:7f:b1:84:22:49:6f:a8:3a:14:0e:e0:
         39:8b:07:ed:96:5f:69:52:ff:32:bc:e2:d9:d5:02:5b:d9:e1:
         43:3e:97:46:96:29:d0:bf:86:71:93:0b:80:03:9d:33:4c:88:
         75:86:5d:31:d5:9e:a3:42:e4:59:22:ec:66:91:81:95:ed:d6:
         5d:6d:24:9c:d3:fd:cf:c3:0c:f1:9a:d5:25:11:7d:99:26:de:
         a0:a1:9e:b6:cd:05:d0:ae:93:05:9f:6f:d6:0e:87:94:10:ed:
         2d:50:1a:0b:f4:15:89:4d:48:98:88:7f:8a:b1:11:de:12:ed:
         db:18:f9:49:ab:eb:55:bd:b2:9f:67:e7:61:b2:44:a1:03:92:
         63:99:65:1e:c5:46:aa:ee:26:84:23:e9:2e:00:59:9f:88:57:
         95:e0:5d:8a:d7:fd:f9:e3:53:af:78:8a:42:fc:55:04:0d:4e:
         18:22:3d:03:12:0a:8f:8c:28:50:ce:71:93:e8:79:25:54:58:
         d4:00:9c:56:d5:c2:07:74:c4:03:43:1e:f3:bd:f1:fd:d5:4c:
         b2:43:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----