Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/4e38b20031d5715971ae3c5f4e87c70eb8d88a84.roa
File:                     4e38b20031d5715971ae3c5f4e87c70eb8d88a84.roa (raw, json)
Hash identifier:          e+c4rC97V1Q29l+GqQJu6GqkBfY/7WaV9pxDGOewLCw=
Subject key identifier:   38:1D:08:7C:5F:B2:94:98:5A:79:DD:53:0A:4F:16:98:BA:70:04:B8
Certificate issuer:       /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial:       2B183D
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/4e38b20031d5715971ae3c5f4e87c70eb8d88a84.roa
Signing time:             Thu 15 Feb 2024 21:18:32 +0000
ROA not before:           Thu 15 Feb 2024 21:18:29 +0000
ROA not after:            Thu 15 Feb 2029 21:18:29 +0000
asID:                     264845
IP address blocks:        2001:13c7:7020::/48 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2824253 (0x2b183d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Validity
            Not Before: Feb 15 21:18:29 2024 GMT
            Not After : Feb 15 21:18:29 2029 GMT
        Subject: CN=4e38b20031d5715971ae3c5f4e87c70eb8d88a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f4:07:5b:87:6e:4f:13:e6:9b:9e:33:47:a4:
                    fa:3c:55:61:78:99:9b:a2:29:c3:24:60:2a:af:17:
                    c2:5b:54:24:8c:14:7f:c8:d6:da:f1:0e:8c:32:e5:
                    92:40:1a:2a:60:14:5d:4a:09:25:a2:06:34:08:69:
                    c1:0b:c7:74:3d:87:25:18:43:99:16:7b:c5:4c:54:
                    66:7b:9e:dc:db:5e:23:fe:c0:c6:f8:b2:c5:66:85:
                    3e:c1:ce:af:62:b5:cf:6a:4c:c8:2b:0b:f9:4b:c0:
                    53:49:c7:ba:85:77:dc:af:67:06:f0:4d:78:3b:ae:
                    47:7b:b9:ac:64:02:ab:36:32:d2:7c:ef:77:ca:cd:
                    ae:e7:a3:0a:f0:fa:75:63:3c:9a:0e:19:e1:3b:2c:
                    0c:51:5a:94:49:e0:fd:81:fd:c1:de:82:4a:58:52:
                    90:40:c5:90:17:62:8d:1d:04:27:39:fe:d1:8e:21:
                    fb:03:ab:57:01:dc:82:f8:16:96:56:de:9f:dc:49:
                    32:19:69:f0:06:84:4d:4c:8c:24:dd:39:9e:c2:78:
                    bf:fa:07:62:aa:45:b9:8f:ae:f7:ac:12:79:14:e6:
                    06:81:57:40:43:56:a2:b9:4e:23:1a:87:35:9c:70:
                    03:e0:2c:87:72:25:f6:a6:84:5f:47:bb:9e:70:9c:
                    cd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:1D:08:7C:5F:B2:94:98:5A:79:DD:53:0A:4F:16:98:BA:70:04:B8
            X509v3 Authority Key Identifier:
                keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/4e38b20031d5715971ae3c5f4e87c70eb8d88a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:33:41:a8:14:d4:aa:46:52:e4:82:ee:44:26:21:bf:53:84:
         0a:dc:ba:d0:67:ae:70:d7:ca:47:ee:b5:34:7b:27:58:c7:d7:
         6a:61:cb:62:5e:19:77:c5:dd:56:b0:15:58:13:43:55:78:e8:
         74:4a:b5:08:8e:59:7a:0e:01:bd:40:18:4c:b4:bd:2c:36:dd:
         be:88:7c:de:94:9a:85:9b:01:85:84:d8:2c:5c:5e:31:70:42:
         66:34:88:61:70:af:fd:ac:ae:dd:59:7e:96:07:5c:1d:30:47:
         2d:4c:7d:63:e2:8d:85:d1:ec:1a:ef:94:24:8b:e1:a8:cf:17:
         b1:c6:5b:ca:5c:7c:48:93:57:ef:b7:2a:a1:40:be:a8:ac:0e:
         c0:2b:dd:b8:5a:a3:60:33:2f:fb:cb:17:bb:82:a8:63:78:af:
         71:d6:a5:16:d6:c0:64:b3:01:6d:5e:af:60:c5:2f:c5:b5:df:
         a5:a6:de:43:df:b3:ee:74:e3:11:f8:46:04:22:2e:a0:ca:e1:
         67:1e:01:06:30:00:59:f4:8d:8f:63:d2:52:eb:d9:ed:1b:8f:
         42:4a:87:d1:e8:8c:f4:c0:6c:22:d3:d1:cc:0d:d4:28:18:27:
         dd:b5:cb:e6:5f:10:72:70:76:91:e5:d3:88:84:90:3b:12:99:
         ee:6c:95:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----