Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9901ba02400dbd419e715984c0eb90e6c2aecc2f.roa
File:                     9901ba02400dbd419e715984c0eb90e6c2aecc2f.roa (raw, json)
Hash identifier:          UsQhKlF6pUbp0lBMQehfAbre0ZNvQR4BpxnbXbDtvIM=
Subject key identifier:   72:54:8D:D4:D4:8D:8A:C6:04:58:EA:9D:50:55:A1:2B:47:F0:92:AE
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A4068
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9901ba02400dbd419e715984c0eb90e6c2aecc2f.roa
Signing time:             Thu 18 Jan 2024 14:39:35 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     264845
IP address blocks:        2001:13c7:7020::/44 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769000 (0x2a4068)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=9901ba02400dbd419e715984c0eb90e6c2aecc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:58:f0:00:05:93:3c:86:70:43:40:c3:3d:b9:
                    63:ba:c5:6c:1c:d0:b6:e9:f9:05:19:2c:80:5e:d5:
                    22:9f:f5:ea:ac:9a:52:59:04:d9:cf:b5:eb:37:41:
                    b1:74:52:fb:2a:a0:58:85:dc:fc:e9:b3:45:e3:2b:
                    59:d1:3c:5b:c5:7f:ca:2c:01:1c:91:c5:9c:0e:a3:
                    a0:11:57:0d:93:78:1f:4f:a2:7e:a5:d3:48:36:7e:
                    3a:7f:73:c6:5a:71:49:a9:ef:c4:43:66:43:68:27:
                    0c:75:b9:bf:b1:aa:42:d5:73:43:00:45:cf:21:ed:
                    cd:00:e5:96:4e:0b:fa:f5:70:c0:2e:43:08:0d:f6:
                    da:91:ae:39:ce:9f:01:6a:ba:37:a3:0e:ff:e0:c1:
                    b1:ad:f1:1b:ee:88:ac:64:9d:08:23:e9:ee:f6:b5:
                    94:cf:20:f6:b7:74:b5:f9:b3:b5:94:43:45:fc:6a:
                    c3:d5:07:e6:a7:74:00:f3:71:b6:a1:97:7c:29:de:
                    7f:99:63:2a:52:5b:0b:be:87:cd:2a:37:6a:aa:79:
                    c6:4e:55:68:30:84:19:cd:07:02:04:e3:2a:79:82:
                    5a:19:ca:02:2a:1b:85:e1:60:da:e3:fc:f9:2b:d4:
                    0f:9a:46:1b:8f:2d:23:e1:f4:f3:fe:11:7b:26:38:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:54:8D:D4:D4:8D:8A:C6:04:58:EA:9D:50:55:A1:2B:47:F0:92:AE
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9901ba02400dbd419e715984c0eb90e6c2aecc2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         3e:76:ae:5f:ac:6e:33:2f:23:5e:ab:7d:54:76:8a:30:cc:39:
         d4:3d:4f:ee:9f:7b:e6:37:91:bb:77:ea:df:30:75:5b:f4:f7:
         90:6b:64:2f:28:5a:ec:d2:69:59:5a:22:df:2b:16:7d:e8:2a:
         d6:9f:64:8b:f9:c5:77:f6:6a:d2:3b:93:20:67:41:09:38:18:
         40:ad:0d:c0:09:2b:c7:82:d7:d4:92:bf:f2:a6:b6:74:1a:83:
         ad:a5:7d:de:90:11:77:3d:df:58:bb:5b:35:d9:c3:ca:71:93:
         63:8d:b0:e2:32:7d:3c:27:13:da:4d:c3:91:13:04:9f:f3:e5:
         3c:79:27:cc:33:aa:aa:c8:f2:a9:f5:59:8d:07:9d:24:13:1c:
         20:4a:55:4a:86:7a:e3:6b:83:ba:6f:8d:81:1b:2a:be:4f:b0:
         89:d6:51:d6:76:73:f6:17:f9:8e:8b:a9:95:bf:65:7f:25:16:
         40:9d:e0:8e:b3:a1:31:c0:be:e0:38:60:0d:fa:cc:26:37:09:
         71:61:2f:08:33:52:7b:b3:70:9b:50:59:99:7c:c3:14:a3:b3:
         a6:6c:11:cf:79:b9:6b:17:ad:dd:ba:31:fb:5b:f5:0b:4e:15:
         6c:70:8e:bb:73:e2:47:6e:d1:ef:01:2c:e5:71:71:93:56:e9:
         84:21:4c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----