Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/1609e6d5ef82afd26e14e28cf9f55ffee2fd5e40.roa
File:                     1609e6d5ef82afd26e14e28cf9f55ffee2fd5e40.roa (raw, json)
Hash identifier:          WLhoqFOmyrKOhOiMzgi+bGYsNR3fH/HOZG/d3mJCAos=
Subject key identifier:   99:40:74:85:4F:25:66:53:E1:0E:ED:A5:E1:1A:5D:B8:B5:28:DB:56
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       19ED00
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/1609e6d5ef82afd26e14e28cf9f55ffee2fd5e40.roa
Signing time:             Thu 31 Aug 2023 16:26:24 +0000
ROA not before:           Wed 30 Aug 2023 16:26:24 +0000
ROA not after:            Sun 31 Aug 2025 16:26:24 +0000
asID:                     30133
IP address blocks:        2001:13c7:7005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1699072 (0x19ed00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Aug 30 16:26:24 2023 GMT
            Not After : Aug 31 16:26:24 2025 GMT
        Subject: CN=1609e6d5ef82afd26e14e28cf9f55ffee2fd5e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:a4:ae:0b:e8:2b:70:ba:64:f9:67:5e:b4:
                    39:3d:8e:8d:ca:93:43:10:dd:46:10:d8:4f:c3:06:
                    13:0f:7b:6c:42:81:12:da:33:9b:e1:c2:40:32:7c:
                    4c:27:2a:cb:d9:60:21:84:41:a9:e0:0a:7b:8f:05:
                    c9:75:e0:28:c2:b0:5b:bd:ad:1b:72:27:f1:c1:75:
                    e7:57:ce:5d:5a:11:1a:55:a2:65:ca:72:dd:b8:38:
                    f6:5b:9c:17:b5:7e:84:2c:8a:df:4e:7a:3c:03:82:
                    51:8a:14:bc:a2:fd:e2:68:9c:72:6c:4c:27:6d:1e:
                    c3:2e:96:ff:43:63:11:c8:27:79:5c:54:07:da:c2:
                    a2:44:dd:54:a6:a4:ce:d9:7d:b4:22:3f:07:81:52:
                    10:62:fe:32:97:7b:a3:dc:3b:db:b3:fb:49:98:32:
                    e7:2b:ec:9f:bb:eb:25:71:29:79:7c:fd:d2:52:b8:
                    b6:bd:58:be:9b:b8:7b:1e:91:74:9b:b6:ad:ee:06:
                    8d:22:0f:f2:eb:88:4f:50:ac:0e:37:27:c8:76:04:
                    79:64:f0:a3:f2:9c:27:be:e3:30:bb:bb:60:7b:66:
                    10:48:74:3a:43:d0:8d:96:f2:e1:3c:a0:eb:a8:43:
                    cd:16:7b:47:2c:96:f9:a5:ea:52:bf:57:5e:ad:33:
                    42:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:40:74:85:4F:25:66:53:E1:0E:ED:A5:E1:1A:5D:B8:B5:28:DB:56
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/1609e6d5ef82afd26e14e28cf9f55ffee2fd5e40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7005::/48

    Signature Algorithm: sha256WithRSAEncryption
         8d:9e:61:6a:64:f7:19:c8:d6:0e:72:f8:a3:64:fc:aa:fc:f1:
         c0:99:c3:3b:a1:5f:11:a1:cb:16:7e:d5:ca:6d:5d:b1:97:7d:
         63:14:2b:d2:aa:2a:17:44:5d:ad:00:ee:59:34:72:e4:5a:97:
         c4:87:d1:ac:95:7a:37:dd:a1:7c:a3:c6:f6:09:e2:b7:29:8c:
         79:54:a7:73:59:84:bc:eb:76:ab:fa:78:f5:01:d4:6d:82:27:
         2f:8a:24:1e:ec:f1:72:ee:46:55:59:e8:48:a0:d8:66:f6:4b:
         51:65:89:02:96:3a:75:e1:46:e5:01:56:0c:ba:9d:79:0a:06:
         c1:d2:e7:7f:38:18:0a:44:b1:7b:36:17:c2:8e:e0:b6:ad:3a:
         6a:44:b4:99:4d:41:e6:1d:80:55:ec:90:da:47:ba:7b:6a:a8:
         22:4b:86:77:c3:c4:ef:47:81:f0:a4:0f:30:b5:e3:6a:44:bc:
         d2:95:eb:48:1b:c0:65:26:2c:76:4a:23:71:2a:fb:27:17:5e:
         63:04:30:78:8d:fc:65:19:7b:dc:84:a3:26:2b:17:2d:ed:e3:
         cc:14:b5:c5:69:34:4d:e4:23:26:76:6a:5a:40:53:e8:cb:6a:
         49:70:05:52:81:63:ea:a4:35:5b:d2:2f:9d:47:53:d1:bb:2b:
         68:70:04:68
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDGe0AMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdh
ZDQ1MDMzYzc4YzRmNjZkZTAyM2U1NmZmMDNlMTc3YmYxYmNiMTkwHhcNMjMwODMw
MTYyNjI0WhcNMjUwODMxMTYyNjI0WjAzMTEwLwYDVQQDEygxNjA5ZTZkNWVmODJh
ZmQyNmUxNGUyOGNmOWY1NWZmZWUyZmQ1ZTQwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEArDSkrgvoK3C6ZPlnXrQ5PY6NypNDEN1GENhPwwYTD3tsQoES
2jOb4cJAMnxMJyrL2WAhhEGp4Ap7jwXJdeAowrBbva0bcifxwXXnV85dWhEaVaJl
ynLduDj2W5wXtX6ELIrfTno8A4JRihS8ov3iaJxybEwnbR7DLpb/Q2MRyCd5XFQH
2sKiRN1UpqTO2X20Ij8HgVIQYv4yl3uj3Dvbs/tJmDLnK+yfu+slcSl5fP3SUri2
vVi+m7h7HpF0m7at7gaNIg/y64hPUKwONyfIdgR5ZPCj8pwnvuMwu7tge2YQSHQ6
Q9CNlvLhPKDrqEPNFntHLJb5pepSv1derTNCQQIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFJlAdIVPJWZT4Q7tpeEaXbi1KNtWMB8GA1UdIwQYMBaAFOwg4C67s6eNrtt4
lZblKMljsWqxMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2FkNDUw
MzNjNzhjNGY2NmRlMDIzZTU2ZmYwM2UxNzdiZjFiY2IxOS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMTk0YTE0M2EtZmFjZC00NDhhLTk5OGItNWEzMDZh
Yjc4NGJjLzE2MDllNmQ1ZWY4MmFmZDI2ZTE0ZTI4Y2Y5ZjU1ZmZlZTJmZDVlNDAu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8xOTRhMTQzYS1mYWNkLTQ0OGEtOTk4Yi01YTMw
NmFiNzg0YmMvN2FkNDUwMzNjNzhjNGY2NmRlMDIzZTU2ZmYwM2UxNzdiZjFiY2Ix
OS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABE8dwBTANBgkqhkiG9w0BAQsFAAOCAQEAjZ5hamT3GcjW
DnL4o2T8qvzxwJnDO6FfEaHLFn7Vym1dsZd9YxQr0qoqF0RdrQDuWTRy5FqXxIfR
rJV6N92hfKPG9gnitymMeVSnc1mEvOt2q/p49QHUbYInL4okHuzxcu5GVVnoSKDY
ZvZLUWWJApY6deFG5QFWDLqdeQoGwdLnfzgYCkSxezYXwo7gtq06akS0mU1B5h2A
VeyQ2ke6e2qoIkuGd8PE70eB8KQPMLXjakS80pXrSBvAZSYsdkojcSr7JxdeYwQw
eI38ZRl73ISjJisXLe3jzBS1xWk0TeQjJnZqWkBT6MtqSXAFUoFj6qQ1W9IvnUdT
0bsraHAEaA==
-----END CERTIFICATE-----