Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1eadb1641d3259f458db8f1505ba8e8f9c924d61.roa
File:                     1eadb1641d3259f458db8f1505ba8e8f9c924d61.roa (raw, json)
Hash identifier:          1r9lmxedkstck5h+a2TddhmmRRnv3yIRYPXMm2XzCTQ=
Subject key identifier:   65:F3:86:87:EB:05:4F:80:FF:FB:0E:03:34:EC:9D:16:8C:F2:13:2B
Certificate issuer:       /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial:       2B0EBE
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1eadb1641d3259f458db8f1505ba8e8f9c924d61.roa
Signing time:             Thu 15 Feb 2024 21:18:30 +0000
ROA not before:           Thu 15 Feb 2024 21:18:29 +0000
ROA not after:            Thu 15 Feb 2029 21:18:29 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2821822 (0x2b0ebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Validity
            Not Before: Feb 15 21:18:29 2024 GMT
            Not After : Feb 15 21:18:29 2029 GMT
        Subject: CN=1eadb1641d3259f458db8f1505ba8e8f9c924d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:ea:06:78:9b:df:65:73:ce:8d:c7:3c:ee:
                    4e:20:fb:01:89:c2:aa:73:f9:c6:28:15:c1:84:c8:
                    5f:23:ca:51:d7:d2:32:17:a1:10:f5:5e:1a:47:c6:
                    9b:e0:46:a4:63:5d:01:a3:08:da:ea:72:2d:e8:17:
                    a2:4a:81:00:7d:e8:9a:7a:ef:c5:12:aa:73:81:bf:
                    cc:45:ee:a0:99:47:8a:cf:d2:49:53:a4:bb:4e:f1:
                    3a:72:75:c6:41:a8:cc:61:83:46:ae:d7:ca:e8:c2:
                    d7:8a:4f:83:7c:eb:8b:4c:be:cf:4e:cf:ac:61:4f:
                    04:af:63:2e:b0:03:b9:b1:b2:a6:bf:a3:05:12:1f:
                    a0:ce:20:0e:0f:c0:65:e1:78:17:cc:3a:ff:e5:bb:
                    cb:7e:8e:62:ab:e9:14:60:17:9f:45:c9:83:a5:5c:
                    94:b7:0e:72:18:52:77:ea:10:40:62:85:7c:5d:18:
                    ec:d3:e8:ad:cf:91:c2:19:1c:a6:b2:6d:ed:6e:b9:
                    c4:f0:73:0f:0d:90:26:13:aa:24:d2:28:6a:f0:a4:
                    da:50:76:df:17:25:8e:5c:61:9d:89:c6:be:fd:24:
                    be:fb:b8:f9:a3:fc:8c:5b:75:d4:66:49:5a:6a:7d:
                    b8:f2:a1:ae:09:0b:d2:53:07:a9:b3:2c:54:7a:00:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F3:86:87:EB:05:4F:80:FF:FB:0E:03:34:EC:9D:16:8C:F2:13:2B
            X509v3 Authority Key Identifier:
                keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/1eadb1641d3259f458db8f1505ba8e8f9c924d61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         98:62:e0:70:73:89:53:24:f5:84:bd:0c:a7:37:3a:6c:62:f8:
         4d:19:57:2a:ec:64:21:52:61:e8:3d:f1:9f:fc:0c:05:94:92:
         2b:e9:31:23:63:9d:4e:83:73:35:02:26:17:0d:ea:dd:eb:a1:
         ac:da:7d:c9:e0:41:6c:ed:56:40:78:aa:4c:b0:db:43:41:d7:
         99:be:e9:ab:73:22:3b:6c:06:d1:ce:73:9d:ef:42:fe:68:c4:
         73:d4:81:d4:ac:09:f1:31:61:e7:b2:c3:c4:57:94:e9:cd:0a:
         49:7d:73:e0:1e:e9:6f:ba:67:66:a0:a9:3a:06:49:f6:67:2e:
         22:ba:42:fc:55:30:6a:d2:80:75:d1:4f:0e:d3:30:41:c5:2c:
         d0:46:39:17:04:2e:32:dc:aa:2d:38:3e:ad:7f:d7:3d:d5:2c:
         79:28:26:09:6b:53:90:29:cd:d6:04:74:64:36:1e:6d:5e:3c:
         97:65:e1:d9:e4:50:1f:ac:d5:f4:23:db:75:12:42:28:51:23:
         4f:ed:eb:bc:b7:3a:02:27:b0:d1:0c:70:f8:85:a9:9a:89:f4:
         f7:e2:94:fd:0b:de:18:c1:11:40:8c:84:73:24:7c:b0:58:38:
         d2:84:83:14:a7:fa:f4:fb:12:4a:c8:e0:33:a8:3f:58:c5:c5:
         49:82:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----