Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/13eb678f1a6492afea47ca08f246d00e8687d26e.roa
File:                     13eb678f1a6492afea47ca08f246d00e8687d26e.roa (raw, json)
Hash identifier:          XCpbeU2ZE1iz99b5iYIjSIRIxkHryQ18hcLTuhxKt18=
Subject key identifier:   36:45:10:88:8B:47:6E:28:AE:63:C4:B4:17:19:3F:F2:09:7E:B9:86
Certificate issuer:       /CN=e8e60ce967bb3600b1ab69a25627f26d48b06694
Certificate serial:       212AD2
Authority key identifier: 02:F3:E8:5B:88:E9:BB:34:88:F5:9A:4E:52:5C:EC:64:B5:66:AE:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8e60ce967bb3600b1ab69a25627f26d48b06694.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/13eb678f1a6492afea47ca08f246d00e8687d26e.roa
Signing time:             Mon 05 Jun 2023 22:08:50 +0000
ROA not before:           Sun 04 Jun 2023 22:08:50 +0000
ROA not after:            Thu 05 Jun 2025 22:08:50 +0000
asID:                     28048
IP address blocks:        191.103.0.0/18 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2173650 (0x212ad2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8e60ce967bb3600b1ab69a25627f26d48b06694
        Validity
            Not Before: Jun  4 22:08:50 2023 GMT
            Not After : Jun  5 22:08:50 2025 GMT
        Subject: CN=13eb678f1a6492afea47ca08f246d00e8687d26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a8:8a:9a:87:ec:ef:2d:7d:35:84:1b:1a:e1:
                    52:e9:4e:48:34:89:5c:04:ca:e1:ed:77:da:16:a5:
                    62:e2:6b:79:f9:54:6e:a5:a6:17:92:dd:4d:a3:6a:
                    44:49:de:74:51:e7:01:67:66:6f:cd:15:19:ec:ab:
                    51:9c:46:00:77:55:81:65:c1:74:dc:7a:0d:f2:85:
                    db:91:cf:cc:eb:8d:16:64:49:64:3b:01:f1:c1:51:
                    7e:7d:a7:9e:f3:69:9f:21:07:1f:f2:47:f5:6a:be:
                    b8:bb:7a:2b:74:55:db:37:80:07:4e:65:58:10:6d:
                    76:c9:9c:4c:3e:49:45:fe:61:d0:10:2f:57:cf:26:
                    b1:51:b9:84:9b:8a:6d:43:a9:94:4b:86:25:c7:bb:
                    1b:ad:26:1d:58:d8:3e:7e:f3:e0:6f:cf:6f:d8:4b:
                    3a:5f:ed:02:30:e3:d5:15:c6:f4:7e:54:42:a3:35:
                    2f:7f:11:45:0b:70:0b:41:d3:d0:78:26:ae:5c:84:
                    a9:f5:6f:1a:30:e7:15:22:80:c8:de:9b:bc:3f:9c:
                    2f:57:df:15:02:41:5d:f2:91:5b:52:c3:7f:80:0f:
                    5e:8b:b4:72:e6:f6:fe:e9:65:66:8d:78:bc:67:53:
                    bb:fa:d9:ac:fc:ea:d5:85:52:16:64:82:b7:b4:98:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:45:10:88:8B:47:6E:28:AE:63:C4:B4:17:19:3F:F2:09:7E:B9:86
            X509v3 Authority Key Identifier:
                keyid:02:F3:E8:5B:88:E9:BB:34:88:F5:9A:4E:52:5C:EC:64:B5:66:AE:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8e60ce967bb3600b1ab69a25627f26d48b06694.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/13eb678f1a6492afea47ca08f246d00e8687d26e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/007d217b-50c4-4920-a999-a15070c7e74c/e8e60ce967bb3600b1ab69a25627f26d48b06694.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         48:19:5e:8f:cf:32:bc:03:e6:d3:a0:8d:54:0c:ed:44:18:3b:
         e3:cd:e6:c6:b3:e3:0d:27:f5:49:2c:61:c3:d4:08:84:6e:00:
         4b:d2:5f:5c:45:7d:a4:6f:4d:ed:c8:7c:5b:aa:90:80:60:b3:
         e7:37:9b:67:5d:86:76:ee:b6:c2:46:22:a2:41:6e:e6:b7:fe:
         e9:14:8d:23:89:94:89:9f:32:a4:f7:29:04:9e:06:75:e6:4d:
         55:32:83:80:55:6a:d8:3a:72:ae:b6:70:79:ec:07:ac:08:e6:
         6b:32:48:59:e0:54:26:03:05:98:c4:ec:8f:36:b0:cd:8c:97:
         73:3e:4c:36:79:79:a2:8f:16:2b:6c:8c:8e:8a:1f:be:9d:91:
         16:d8:6d:33:1f:33:b8:d4:fa:20:15:56:c5:32:c3:51:e9:5f:
         1b:70:e2:1b:40:92:53:d1:cc:1f:29:57:17:ab:9b:ed:c6:94:
         24:7c:de:e0:f1:8f:48:d8:57:6e:95:ed:9f:ac:3a:f2:b9:ab:
         98:0a:ce:ff:e7:fd:81:c5:35:c5:2c:ee:d3:d2:f8:70:72:78:
         14:f6:c9:02:46:17:85:87:40:f4:12:be:3a:95:4b:81:b7:a3:
         70:5b:0b:71:5e:ea:75:0e:4b:d9:72:4c:24:b4:2e:ad:6f:89:
         82:27:ba:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----