Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7fdc594eedd08f3c82dee4b21d5187b1e09f91fe.roa
File:                     7fdc594eedd08f3c82dee4b21d5187b1e09f91fe.roa (raw, json)
Hash identifier:          PM5NUD6e9D7iLGk3wOMrCLBKHOCP3paLiQaKY8DtVKQ=
Subject key identifier:   4E:CA:92:E0:3A:AE:A7:71:7C:80:15:7C:C2:18:74:1D:88:B6:AC:64
Certificate issuer:       /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial:       2B20E3
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7fdc594eedd08f3c82dee4b21d5187b1e09f91fe.roa
Signing time:             Thu 15 Feb 2024 21:18:34 +0000
ROA not before:           Thu 15 Feb 2024 21:18:29 +0000
ROA not after:            Thu 15 Feb 2029 21:18:29 +0000
asID:                     264845
IP address blocks:        2001:13c7:7020::/44 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2826467 (0x2b20e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Validity
            Not Before: Feb 15 21:18:29 2024 GMT
            Not After : Feb 15 21:18:29 2029 GMT
        Subject: CN=7fdc594eedd08f3c82dee4b21d5187b1e09f91fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1e:cd:e3:ca:9a:49:43:8b:47:09:36:47:98:
                    f0:ba:47:37:55:45:8f:97:3a:7f:a0:75:23:b8:9c:
                    db:77:7a:c1:dc:ae:82:e8:00:27:bb:4b:b5:26:c4:
                    71:71:b9:8d:35:1a:69:76:8e:a8:19:f5:0a:d9:9b:
                    99:7c:e2:f1:b0:92:ed:1e:e7:b0:b9:c2:71:2c:f1:
                    41:d5:32:46:42:cf:59:73:cc:e6:3c:c3:32:3b:f9:
                    b4:cd:34:bd:c0:5a:83:4b:ad:3d:dd:8a:0e:b1:99:
                    e6:72:06:2e:a6:c1:8d:ac:3f:8c:54:86:2e:ff:15:
                    7a:a1:03:20:ef:16:4a:99:c4:6f:b3:50:1f:61:9d:
                    53:64:71:e9:39:a7:ff:17:94:59:a7:c8:47:1c:a3:
                    68:62:17:d9:04:52:55:91:e3:ad:d9:4c:cf:5d:16:
                    d2:b9:55:b1:b1:67:fd:3d:f4:43:e7:49:e5:8a:de:
                    8a:94:16:f7:b0:68:12:24:d3:83:5e:08:d0:8b:16:
                    23:3a:4d:51:42:77:1e:ac:90:81:dd:a9:63:f8:7b:
                    79:a8:2a:eb:e5:9b:d7:74:38:0b:71:58:c3:b7:bd:
                    b1:0c:91:b9:6d:a5:a6:35:0d:21:5c:63:96:8a:51:
                    a4:df:d3:ae:49:8e:49:1e:f5:81:93:15:6e:39:60:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CA:92:E0:3A:AE:A7:71:7C:80:15:7C:C2:18:74:1D:88:B6:AC:64
            X509v3 Authority Key Identifier:
                keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7fdc594eedd08f3c82dee4b21d5187b1e09f91fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         78:73:4e:4b:63:ac:01:86:28:f2:28:a8:d5:db:17:fb:31:2d:
         6e:a8:33:ca:22:4c:fa:39:d3:61:59:90:98:db:d4:67:71:9a:
         b3:bb:10:44:1f:98:a5:13:31:68:fd:f2:2a:3c:d7:51:33:f2:
         a3:70:73:6f:96:c2:86:0f:a4:1e:24:b8:b9:3a:23:c1:ec:9f:
         c1:74:60:89:5a:48:51:1c:1e:1f:8b:12:1c:52:9b:d8:22:6b:
         9a:61:be:81:ee:39:a5:15:de:c4:31:81:76:7e:20:18:a0:39:
         2f:76:8a:3b:c8:bd:ab:39:17:d8:ae:a9:2d:91:f8:a3:96:74:
         55:c7:37:3e:da:36:c2:e1:bd:2a:87:f4:14:dc:72:d2:8d:fc:
         e0:0c:a8:ed:e8:4d:8c:1e:fc:c4:80:90:7c:7d:8e:6f:c9:01:
         7f:4e:bc:47:8b:3f:8c:5c:b5:cb:6b:c8:27:54:7f:0b:40:fb:
         66:c3:88:18:1c:ec:d1:e6:56:59:5d:f0:8f:ac:f7:36:50:be:
         8e:2f:98:c9:44:d9:d3:66:4e:cd:79:ce:a4:59:e8:35:5e:77:
         de:9d:5d:15:65:ca:6c:68:8b:1f:d1:9a:9e:e4:61:0f:eb:cf:
         4a:ec:71:1d:ef:4a:ca:07:f7:fd:9a:73:e4:6f:e0:3a:94:ec:
         0f:ab:17:96
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDKyDjMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY1
YzIwNDc2N2Y0MDQ1OTBiYzVjZjFhYjViMzQ0OWVmMTQ5NDBmZDAwHhcNMjQwMjE1
MjExODI5WhcNMjkwMjE1MjExODI5WjAzMTEwLwYDVQQDEyg3ZmRjNTk0ZWVkZDA4
ZjNjODJkZWU0YjIxZDUxODdiMWUwOWY5MWZlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAiR7N48qaSUOLRwk2R5jwukc3VUWPlzp/oHUjuJzbd3rB3K6C
6AAnu0u1JsRxcbmNNRppdo6oGfUK2ZuZfOLxsJLtHuewucJxLPFB1TJGQs9Zc8zm
PMMyO/m0zTS9wFqDS6093YoOsZnmcgYupsGNrD+MVIYu/xV6oQMg7xZKmcRvs1Af
YZ1TZHHpOaf/F5RZp8hHHKNoYhfZBFJVkeOt2UzPXRbSuVWxsWf9PfRD50nlit6K
lBb3sGgSJNODXgjQixYjOk1RQncerJCB3alj+Ht5qCrr5ZvXdDgLcVjDt72xDJG5
baWmNQ0hXGOWilGk39OuSY5JHvWBkxVuOWClfwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFE7KkuA6rqdxfIAVfMIYdB2ItqxkMB8GA1UdIwQYMBaAFCsCVqqahYJrvhGH
XldyuwsA1XCEMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNjVjMjA0
NzY3ZjQwNDU5MGJjNWNmMWFiNWIzNDQ5ZWYxNDk0MGZkMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5LzdmZGM1OTRlZWRkMDhmM2M4MmRlZTRiMjFkNTE4N2IxZTA5ZjkxZmUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvNjVjMjA0NzY3ZjQwNDU5MGJjNWNmMWFiNWIzNDQ5ZWYxNDk0MGZk
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHBCABE8dwIDANBgkqhkiG9w0BAQsFAAOCAQEAeHNOS2OsAYYo
8iio1dsX+zEtbqgzyiJM+jnTYVmQmNvUZ3Gas7sQRB+YpRMxaP3yKjzXUTPyo3Bz
b5bChg+kHiS4uTojweyfwXRgiVpIURweH4sSHFKb2CJrmmG+ge45pRXexDGBdn4g
GKA5L3aKO8i9qzkX2K6pLZH4o5Z0Vcc3Pto2wuG9Kof0FNxy0o384Ayo7ehNjB78
xICQfH2Ob8kBf068R4s/jFy1y2vIJ1R/C0D7ZsOIGBzs0eZWWV3wj6z3NlC+ji+Y
yUTZ02ZOzXnOpFnoNV533p1dFWXKbGiLH9GanuRhD+vPSuxxHe9Kygf3/Zpz5G/g
OpTsD6sXlg==
-----END CERTIFICATE-----