Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2407768fba3a271bcaeb2f2b31b21055ed31d9a3.roa
File:                     2407768fba3a271bcaeb2f2b31b21055ed31d9a3.roa (raw, json)
Hash identifier:          EwtcYGq3wDIiu0MTUTGUlJxNDQsXMliuWFWFW4bbnrQ=
Subject key identifier:   2F:80:CC:9D:43:81:72:36:A8:60:22:0C:F2:74:5E:63:52:7D:5A:B3
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       0E7B3C
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2407768fba3a271bcaeb2f2b31b21055ed31d9a3.roa
Signing time:             Sun 04 Apr 2021 23:16:18 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     52224
IP address blocks:        2001:13c7:7012::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 949052 (0xe7b3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=2407768fba3a271bcaeb2f2b31b21055ed31d9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:83:68:04:ec:fa:e9:50:2c:1d:9f:5c:5d:
                    f5:1f:83:89:31:b6:97:1f:66:69:54:8a:cf:df:e1:
                    15:07:78:5e:53:e6:ff:eb:b1:ea:aa:ae:5f:c0:9c:
                    59:4b:cc:36:3a:7f:b4:49:77:68:24:e4:67:04:08:
                    e5:90:be:39:77:17:20:23:89:05:34:1f:40:05:a6:
                    81:77:04:c5:24:73:01:7c:ee:28:95:0d:d7:57:6f:
                    bb:44:5c:f2:9f:cc:b6:0b:ca:6a:d1:a5:84:4b:59:
                    7b:55:bb:55:e2:b6:21:d7:b3:f9:8d:84:c9:6f:5b:
                    5c:dd:eb:27:3a:b5:dd:32:df:ad:fa:b1:53:dd:95:
                    18:7a:39:df:51:13:02:d4:69:5b:1b:1d:f1:6a:9d:
                    b4:d4:f7:91:39:e7:90:bb:fc:f9:fd:ba:8e:a3:be:
                    8f:79:ae:45:de:81:e8:a5:de:11:79:b2:06:a5:24:
                    f7:1a:81:f8:f8:a1:6f:20:c2:a9:dc:93:d0:8a:d1:
                    71:b8:a8:e9:77:a2:c4:5e:8c:b0:0b:4f:bc:6a:16:
                    40:cd:71:56:26:7f:44:2a:b5:93:8e:b9:26:33:15:
                    cb:87:d0:e3:04:83:67:5c:d5:9e:5e:3a:a0:f2:bb:
                    15:81:33:fa:2d:20:4c:2c:3b:3f:78:84:b6:0a:32:
                    72:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:80:CC:9D:43:81:72:36:A8:60:22:0C:F2:74:5E:63:52:7D:5A:B3
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2407768fba3a271bcaeb2f2b31b21055ed31d9a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7012::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:a9:f8:86:34:43:9a:cc:cb:ef:f4:a9:0f:34:cc:22:e4:a1:
         15:90:40:5c:d5:77:9f:15:55:df:f9:35:bb:cb:48:1b:b9:5a:
         5b:02:83:3b:67:2b:00:f2:69:55:b3:cd:88:04:6e:2d:09:2f:
         0f:73:9e:6e:f4:89:c1:f7:57:dc:31:21:ae:a7:f7:05:86:fc:
         8a:6b:c8:c4:24:aa:9e:cd:f9:3a:be:cf:0d:32:62:1b:0c:8f:
         e7:3f:38:1f:f9:ae:f5:6e:4e:30:cc:5b:9e:da:23:60:95:30:
         56:22:e3:0f:f5:ba:a2:a2:af:7b:51:4e:c5:78:8d:4d:1a:be:
         e9:de:c6:c2:6f:29:c8:0e:39:21:2f:ea:74:a6:66:4c:41:49:
         fa:49:b5:77:ae:5b:86:cf:8a:8b:49:5c:1c:6d:27:cc:47:e1:
         06:54:01:41:e9:66:58:db:42:dc:97:0a:61:05:dd:13:eb:15:
         72:06:57:22:74:d2:1c:8a:a3:bb:ea:20:0c:6d:3c:5a:99:1d:
         53:fc:4c:85:98:01:38:96:d3:10:22:0a:58:27:b7:93:4e:34:
         28:bf:1c:c9:30:a2:c7:a3:95:08:1a:60:0f:68:c9:95:2f:fd:
         27:74:43:be:15:02:7e:73:84:ee:0b:36:7e:a8:23:6b:54:19:
         3e:6b:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----