Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2e2e996ff19928a9db2eefbe13a44b1fa8383aee.roa
File:                     2e2e996ff19928a9db2eefbe13a44b1fa8383aee.roa (raw, json)
Hash identifier:          ha41VDy8FineWJFAu8b0kiR8e3xcU7f48VHr14zm7y4=
Subject key identifier:   76:9A:FE:C5:00:1D:A3:DD:34:5D:6B:E1:3C:92:03:88:53:A7:01:17
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       22F781
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2e2e996ff19928a9db2eefbe13a44b1fa8383aee.roa
Signing time:             Thu 11 May 2023 00:25:01 +0000
ROA not before:           Wed 10 May 2023 00:25:01 +0000
ROA not after:            Sun 11 May 2025 00:25:01 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 50

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291585 (0x22f781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: May 10 00:25:01 2023 GMT
            Not After : May 11 00:25:01 2025 GMT
        Subject: CN=2e2e996ff19928a9db2eefbe13a44b1fa8383aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cb:1f:c0:e8:af:76:dc:9f:f0:8a:9e:29:41:
                    e5:12:42:fc:c2:1b:7c:c0:5f:a9:30:65:19:d0:4c:
                    e4:60:3f:83:54:08:74:6a:a0:7b:8a:5d:bd:31:19:
                    01:5b:a2:4a:3e:8d:20:47:2f:51:53:be:a3:ed:8e:
                    8f:74:7e:07:4f:f5:85:3b:85:76:f9:0e:24:ca:eb:
                    37:53:b6:51:12:9a:61:7f:89:03:ee:7f:b6:9e:98:
                    38:54:b4:ec:cf:01:86:ca:6d:22:b5:b8:83:e8:b0:
                    09:86:0f:b9:62:4a:4b:c8:cd:a9:86:27:6b:e8:7d:
                    3d:94:9f:c0:6c:27:ab:ff:12:a9:73:a0:b7:a4:c5:
                    26:47:4d:ca:39:18:3e:65:64:2c:97:2b:8b:66:e7:
                    03:52:54:e9:93:e8:b5:d4:6d:a3:a6:a8:e9:49:f7:
                    fd:3e:ad:91:1d:2a:78:6e:06:91:9a:4e:00:ec:f2:
                    38:fe:52:3b:a3:a0:0c:99:1e:8c:b5:57:30:d2:4c:
                    80:e1:eb:2c:98:55:64:65:e7:c0:ee:f7:2f:42:05:
                    6a:00:60:39:89:ad:df:a7:e8:7a:2b:6f:90:fc:07:
                    83:30:27:bb:98:7e:c5:d7:03:0a:32:3e:b2:59:ba:
                    1f:d4:2f:fb:5f:3c:08:d7:7d:14:97:97:c4:e6:d7:
                    f1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9A:FE:C5:00:1D:A3:DD:34:5D:6B:E1:3C:92:03:88:53:A7:01:17
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/2e2e996ff19928a9db2eefbe13a44b1fa8383aee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         30:d2:e7:84:fe:0f:d5:89:de:3d:9b:74:3f:ed:77:2e:e0:30:
         56:e3:b8:15:c5:39:93:37:31:0d:30:ea:2a:8a:0e:bb:8a:20:
         c3:e4:c2:aa:c5:95:d5:b0:e5:4c:cd:6c:92:be:cd:f5:76:85:
         bd:ad:08:35:eb:c8:54:5d:ca:6e:9c:a9:e8:80:66:7b:f8:dd:
         19:1d:38:0f:43:c0:2d:71:2f:6f:a5:75:e9:e3:c7:9f:89:d2:
         9c:2e:d7:58:36:ce:fb:56:82:e0:3d:be:b3:36:32:53:4c:4c:
         01:0f:ef:00:e4:96:88:3c:23:21:fd:d6:75:b3:b4:06:98:78:
         56:52:41:75:19:17:61:c2:c7:96:7f:6f:d9:9a:9d:b5:ed:24:
         cf:dd:8a:72:4a:2f:c6:ec:7f:e1:4c:2e:39:29:c5:fa:73:47:
         75:50:4b:00:2e:7d:3e:bd:b4:44:a2:7d:40:af:5c:09:e6:64:
         17:ea:ae:6b:a2:1a:8f:d7:3c:84:00:98:f1:06:f8:6a:51:8c:
         a7:fd:0a:bd:5b:33:04:94:b2:5c:3d:25:3c:c3:87:e5:75:ca:
         41:b7:2b:34:36:cd:5b:99:a8:6e:c9:52:ea:fd:1e:31:bf:a7:
         db:b5:d8:82:0c:23:3a:f1:f9:e5:4e:c9:36:f6:38:45:69:41:
         78:bb:46:06
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDIveBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDli
ZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRjZWJiMDJmY2MyYWY4ZDIwHhcNMjMwNTEw
MDAyNTAxWhcNMjUwNTExMDAyNTAxWjAzMTEwLwYDVQQDEygyZTJlOTk2ZmYxOTky
OGE5ZGIyZWVmYmUxM2E0NGIxZmE4MzgzYWVlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp8sfwOivdtyf8IqeKUHlEkL8wht8wF+pMGUZ0EzkYD+DVAh0
aqB7il29MRkBW6JKPo0gRy9RU76j7Y6PdH4HT/WFO4V2+Q4kyus3U7ZREpphf4kD
7n+2npg4VLTszwGGym0itbiD6LAJhg+5YkpLyM2phidr6H09lJ/AbCer/xKpc6C3
pMUmR03KORg+ZWQslyuLZucDUlTpk+i11G2jpqjpSff9Pq2RHSp4bgaRmk4A7PI4
/lI7o6AMmR6MtVcw0kyA4essmFVkZefA7vcvQgVqAGA5ia3fp+h6K2+Q/AeDMCe7
mH7F1wMKMj6yWbof1C/7XzwI130Ul5fE5tfx5wIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFHaa/sUAHaPdNF1r4TySA4hTpwEXMB8GA1UdIwQYMBaAFH+Jf8zsEQtTeV2M
m5FVamZ66VzVMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOWJkM2I2
MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhkMi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzJlMmU5OTZmZjE5OTI4YTlkYjJlZWZiZTEzYTQ0YjFmYTgzODNhZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZjYzJhZjhk
Mi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCABE8dwIDANBgkqhkiG9w0BAQsFAAOCAQEAMNLnhP4P1Yne
PZt0P+13LuAwVuO4FcU5kzcxDTDqKooOu4ogw+TCqsWV1bDlTM1skr7N9XaFva0I
NevIVF3Kbpyp6IBme/jdGR04D0PALXEvb6V16ePHn4nSnC7XWDbO+1aC4D2+szYy
U0xMAQ/vAOSWiDwjIf3WdbO0Bph4VlJBdRkXYcLHln9v2Zqdte0kz92Kckovxux/
4UwuOSnF+nNHdVBLAC59Pr20RKJ9QK9cCeZkF+qua6Iaj9c8hACY8Qb4alGMp/0K
vVszBJSyXD0lPMOH5XXKQbcrNDbNW5mobslS6v0eMb+n27XYggwjOvH55U7JNvY4
RWlBeLtGBg==
-----END CERTIFICATE-----