Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/9162ce0fb5ad7950bec6d716a1041751ee9bb91f.roa
File:                     9162ce0fb5ad7950bec6d716a1041751ee9bb91f.roa (raw, json)
Hash identifier:          zLAZiHxWMbdCnnguLRN5T1tQqMHXDUhl1vnVJ+Ao+QU=
Subject key identifier:   D0:FB:FD:C7:4A:BE:9D:81:98:C0:FE:89:4E:69:C3:D1:1B:36:D9:9F
Certificate issuer:       /CN=0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067
Certificate serial:       1ADF5D
Authority key identifier: 7D:14:32:7E:D0:E3:39:25:8E:68:E7:8A:B5:17:AB:D6:C5:F4:69:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/9162ce0fb5ad7950bec6d716a1041751ee9bb91f.roa
Signing time:             Fri 21 Oct 2022 04:50:09 +0000
ROA not before:           Wed 19 Oct 2022 04:41:59 +0000
ROA not after:            Mon 21 Oct 2024 04:41:59 +0000
asID:                     264815
IP address blocks:        2801:13:5000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761117 (0x1adf5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067
        Validity
            Not Before: Oct 19 04:41:59 2022 GMT
            Not After : Oct 21 04:41:59 2024 GMT
        Subject: CN=9162ce0fb5ad7950bec6d716a1041751ee9bb91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:e2:e1:53:fa:88:29:4d:d7:fb:7a:08:52:
                    66:52:17:37:c8:06:ba:b3:52:7a:58:d6:52:62:d9:
                    91:f3:28:7f:3b:4c:e2:f1:75:0f:40:b9:98:2f:35:
                    b6:d7:05:57:fd:cc:24:21:f3:d9:90:4b:04:01:d9:
                    be:b4:77:d5:80:5f:15:ef:2f:f3:f0:62:ba:56:5a:
                    99:21:7f:4f:28:f5:e1:81:52:7d:16:86:5d:ea:4e:
                    45:39:a4:13:26:89:b3:f8:39:07:d0:c5:d5:df:4f:
                    dc:6d:3f:dd:90:74:9d:ed:b6:d4:57:11:6a:b0:31:
                    c7:20:fa:5e:5f:ff:cb:48:86:73:cd:a8:9d:27:e4:
                    b8:76:0c:8c:76:ae:38:2a:1b:5b:79:ee:7b:1f:53:
                    1c:b9:da:03:01:e1:ae:9f:36:55:06:dc:f0:0e:9b:
                    3a:ba:2a:27:24:d3:cd:fa:26:e7:c5:de:b3:ac:de:
                    0f:a0:16:5b:6e:dd:c8:1d:1e:36:83:ff:f5:a3:bc:
                    dc:d3:37:c6:3a:e7:84:05:7f:c3:b9:6a:8f:d9:8f:
                    2e:93:8f:c6:0c:0a:dc:2e:ce:d8:b4:f6:95:6f:42:
                    3f:e6:7f:37:e5:33:85:0d:a6:bb:fa:45:d8:1b:e9:
                    d8:c8:ff:bd:02:0a:5d:ac:d2:67:04:6c:96:73:f9:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FB:FD:C7:4A:BE:9D:81:98:C0:FE:89:4E:69:C3:D1:1B:36:D9:9F
            X509v3 Authority Key Identifier:
                keyid:7D:14:32:7E:D0:E3:39:25:8E:68:E7:8A:B5:17:AB:D6:C5:F4:69:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/9162ce0fb5ad7950bec6d716a1041751ee9bb91f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/099b9a77-34cd-4cb9-b28c-f1db0629ebc7/0f77c18ca0d5e3cd0bcb98f6f1654e193e6c9067.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:31:fc:33:d5:52:5a:b5:34:3f:61:60:93:0b:47:39:f4:80:
         e4:dd:56:7d:66:8d:3c:a0:25:c3:27:15:05:52:80:f2:a4:09:
         4a:7f:82:a6:b0:bd:1a:98:27:7b:5c:20:02:31:52:63:51:be:
         08:09:69:d8:a9:84:af:3c:46:41:26:ae:59:cc:ac:ed:86:6e:
         b0:0d:ee:cf:5b:5b:1e:c1:26:44:f9:4f:e9:38:fb:c1:08:7d:
         10:f8:4e:5a:ee:b0:ea:e7:99:af:1d:7f:39:66:07:16:c2:26:
         f5:f0:4d:93:7b:76:c0:b1:8d:95:af:61:e6:f6:b8:f6:5c:dd:
         b4:11:c5:a8:7a:34:61:09:8a:f5:cd:49:b1:a4:ff:27:92:49:
         a6:62:94:3c:70:98:cf:db:0c:76:1d:ee:27:da:be:31:0d:b2:
         2e:44:70:fe:99:b8:09:01:7f:4b:3c:c7:5e:14:f5:a6:f5:2e:
         20:86:39:65:9a:3e:07:3a:8b:07:18:16:50:14:b9:8a:bd:cd:
         6f:e5:40:df:75:10:48:29:99:39:f3:52:cf:cc:53:f4:0e:6b:
         71:19:9b:4c:fc:71:e4:45:3d:bd:b8:2a:6d:49:3e:f6:15:33:
         cb:1f:b3:98:fc:e9:65:50:ff:22:c4:cf:38:52:31:60:dc:da:
         f5:1a:6a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----