Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/93dacd0313095f614572c883b1dc3b93c42d6197.roa
File:                     93dacd0313095f614572c883b1dc3b93c42d6197.roa (raw, json)
Hash identifier:          MWc4N7BWnUKEScGH4nmIQFEeAnsojuSjR+crmY1vtFY=
Subject key identifier:   67:EC:67:39:C5:56:E6:1D:78:07:46:4A:E2:26:81:0B:DA:07:9A:64
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A42B5
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/93dacd0313095f614572c883b1dc3b93c42d6197.roa
Signing time:             Thu 18 Jan 2024 14:39:37 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     28002
IP address blocks:        2001:13c7:7003::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769589 (0x2a42b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=93dacd0313095f614572c883b1dc3b93c42d6197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7e:94:e7:e0:f4:65:e3:7a:02:ab:69:ab:70:
                    61:6f:80:53:18:68:8e:0e:e3:c8:ca:27:57:89:dd:
                    77:26:d2:81:b7:ec:00:ff:f1:eb:79:1b:7a:39:98:
                    f1:f7:8b:b7:46:83:55:d7:ef:a1:a1:76:fc:08:eb:
                    25:3e:b8:16:13:5d:17:fe:76:0a:57:9a:eb:4c:0b:
                    76:cd:96:65:89:1c:80:06:2b:74:b8:7b:de:04:22:
                    b8:04:9f:92:10:e8:92:d6:c9:bd:e1:8f:48:7f:69:
                    13:94:bd:22:05:32:6e:e9:bb:7f:de:a7:65:ad:12:
                    a4:98:be:67:53:a3:e0:a6:68:43:3b:22:71:66:1d:
                    b3:b7:3e:6f:96:3c:36:8d:33:c2:0b:a0:5e:dc:59:
                    b7:d8:86:95:b2:16:fa:93:10:35:4b:04:83:fc:a5:
                    ed:9f:e9:b2:38:e1:76:6c:ee:4f:32:bd:aa:dd:18:
                    1d:b3:5c:64:94:3b:fb:a4:d8:e1:4d:25:73:7b:a3:
                    54:db:bf:ff:fb:9c:70:e8:34:71:50:5c:c1:c3:46:
                    a2:1a:df:38:b8:8e:52:85:91:d3:2b:9b:bf:f5:0f:
                    07:b4:f4:fc:af:34:1c:98:31:5f:cc:ab:98:ae:3e:
                    ba:2e:e7:80:b7:1e:90:0e:4b:d7:5a:ad:93:6f:df:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EC:67:39:C5:56:E6:1D:78:07:46:4A:E2:26:81:0B:DA:07:9A:64
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/93dacd0313095f614572c883b1dc3b93c42d6197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7003::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:b3:e1:92:a3:ae:9a:4c:0e:27:75:e0:be:47:f4:f9:ee:0c:
         e6:d6:c9:0b:5d:0b:25:e2:6e:c6:3e:b0:b2:86:a2:87:48:df:
         90:db:ba:db:d2:2d:f0:b4:18:2c:7f:78:66:98:62:9c:01:88:
         d9:05:d7:ad:ea:14:54:48:e7:26:f3:b8:95:1c:58:69:4f:b7:
         5c:0a:f5:55:5f:65:59:94:a2:5b:cb:5e:77:86:8e:32:4d:b6:
         76:96:3a:a3:9a:aa:1d:d0:0d:73:9a:80:66:36:3c:8a:8d:0c:
         49:e5:5b:f1:18:49:5e:77:4c:7a:be:96:48:34:a6:7f:f9:3c:
         00:1a:5e:e4:36:73:73:0c:b8:15:19:76:74:94:a8:77:09:0a:
         28:dc:05:36:14:e8:4c:36:fa:0d:9a:04:60:96:2d:f9:5e:9e:
         19:56:0e:0b:c6:d3:44:bd:02:1b:57:b0:a5:6e:61:c6:1c:51:
         a6:c5:17:0c:09:4e:02:1e:0d:9b:56:f2:29:35:f0:f7:61:25:
         31:2e:39:30:39:6a:96:c8:e3:bd:28:c7:6b:6b:1a:29:2a:25:
         23:13:40:28:9e:e0:df:91:16:df:5a:44:05:62:51:28:6b:c8:
         34:38:f1:1c:fb:30:4a:b2:71:8f:28:ad:97:ad:48:db:b8:25:
         7f:fd:df:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----