Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f76ab57d854c0ba2aa5b9460afff4dceadcdbed4.roa
File:                     f76ab57d854c0ba2aa5b9460afff4dceadcdbed4.roa (raw, json)
Hash identifier:          /VUeLS0DlZuQHPOn7AiA2k/2r/82GIFrRmSWH0PsMjc=
Subject key identifier:   88:90:67:37:73:56:EE:2F:BF:24:2F:AA:29:60:31:F6:F1:C2:9C:74
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       245BC9
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f76ab57d854c0ba2aa5b9460afff4dceadcdbed4.roa
Signing time:             Fri 21 Jul 2023 20:55:21 +0000
ROA not before:           Thu 20 Jul 2023 20:54:57 +0000
ROA not after:            Mon 21 Jul 2025 20:54:57 +0000
asID:                     267790
IP address blocks:        2001:13b0:800d::/48 maxlen: 48
                          2001:13b0:800e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382793 (0x245bc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Jul 20 20:54:57 2023 GMT
            Not After : Jul 21 20:54:57 2025 GMT
        Subject: CN=f76ab57d854c0ba2aa5b9460afff4dceadcdbed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:df:c7:56:f6:32:f1:60:e6:7f:2f:9f:73:cb:
                    f7:4f:af:2c:56:e7:96:fb:34:f7:da:6f:9b:0e:f7:
                    3a:35:19:af:d9:ff:33:c6:ca:14:1c:62:01:44:7c:
                    d7:4f:6f:a0:35:cd:c3:e3:36:d6:c5:8c:8c:ba:53:
                    21:c9:89:75:d9:82:29:13:fe:24:b7:e3:c2:ba:b6:
                    f1:3d:cf:37:1f:77:20:3b:93:a7:e9:fb:52:0f:49:
                    6b:9d:0c:6a:d2:ff:52:80:ab:29:1b:a8:c5:b4:c8:
                    85:7a:a9:a7:8a:09:5d:a2:7e:30:42:12:26:38:36:
                    ee:41:88:e2:86:55:c2:ee:2d:25:98:df:78:56:a0:
                    b3:d5:63:54:e1:38:a0:bf:28:bf:db:ad:49:6d:e2:
                    a3:93:5b:4b:64:55:f8:9b:ac:c6:ce:d7:0c:5c:ad:
                    36:cf:15:37:e4:e6:a4:54:2d:b0:6c:a9:db:38:8c:
                    05:42:fa:c9:eb:f3:61:c9:1b:71:8b:46:39:69:b9:
                    7b:af:3a:2e:b7:01:9e:86:85:8d:5b:f2:b8:d7:ee:
                    d3:ee:20:bc:23:ee:d2:82:2b:86:f0:95:ca:be:0b:
                    23:23:51:0d:e4:95:da:7e:e5:87:9a:3b:40:12:13:
                    de:48:0f:26:8c:4e:fc:11:ed:0f:db:59:37:7b:17:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:90:67:37:73:56:EE:2F:BF:24:2F:AA:29:60:31:F6:F1:C2:9C:74
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/f76ab57d854c0ba2aa5b9460afff4dceadcdbed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13b0:800d::-2001:13b0:800e:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         4b:c5:88:cc:5f:37:c2:68:36:b2:08:06:3d:00:19:51:94:0c:
         bf:98:0f:02:6b:d5:77:5a:ab:d9:91:63:fa:3a:98:8b:24:3f:
         e5:ce:58:a6:c1:bd:c7:93:a3:dd:78:4a:32:dc:79:c4:c2:9a:
         80:9c:b2:08:0f:be:16:cb:0a:06:8b:6b:8f:c6:c6:cd:79:03:
         37:c8:e4:40:03:89:7c:e2:24:a1:b1:42:f1:60:f0:1b:42:1b:
         c9:18:db:01:57:17:bb:5a:36:5f:7c:aa:7e:cc:7f:6b:8b:08:
         72:06:62:cc:a4:ab:33:d9:49:63:39:5d:91:27:be:12:98:83:
         17:de:d6:61:aa:dc:6b:40:47:f3:c6:8c:3a:27:15:23:9f:06:
         36:c6:4d:01:16:fb:d2:1a:3f:b7:9f:c8:83:0e:95:cf:be:dc:
         bd:b1:d2:bf:59:d2:e8:ea:ce:6a:95:5c:89:d8:2c:92:92:6e:
         7d:0a:3f:5d:39:76:b0:a0:dd:9f:b2:b2:9f:f9:8a:2f:be:57:
         c3:5f:5b:4b:d3:20:45:96:f9:c4:79:01:48:e3:e6:06:77:cd:
         e0:dd:75:00:bf:41:d6:91:64:fd:29:e8:61:f8:3a:e4:ff:70:
         44:6b:a9:3d:cc:7c:93:0d:46:95:c8:23:14:9c:69:07:25:70:
         c3:9d:21:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----