Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/a1fd702ff7ada1d76049c23ec51f42e49c568a20.roa
File:                     a1fd702ff7ada1d76049c23ec51f42e49c568a20.roa (raw, json)
Hash identifier:          MV9oow5Rfd6KNwx+PEfBZPXVxWVi6z9BP4Jn/8EbRY8=
Subject key identifier:   C9:D6:0D:FB:E5:6C:0A:4D:6C:64:B0:6E:6B:91:FD:01:A5:F7:30:5E
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A3866
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/a1fd702ff7ada1d76049c23ec51f42e49c568a20.roa
Signing time:             Thu 18 Jan 2024 14:39:33 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     264845
IP address blocks:        2001:13c7:7020::/48 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2766950 (0x2a3866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=a1fd702ff7ada1d76049c23ec51f42e49c568a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:b8:e1:5e:92:66:85:c0:75:df:36:72:30:
                    72:72:97:12:52:d7:d9:35:aa:04:6a:eb:d9:c7:1b:
                    e0:9b:29:4b:be:ee:8e:0b:97:f3:04:20:fc:ec:84:
                    e4:c4:ad:e7:b1:22:6f:1c:68:0d:2a:db:75:04:3e:
                    34:b8:02:b2:aa:99:30:fe:c2:2b:50:14:26:c4:15:
                    07:ae:61:01:63:ad:e3:af:3f:95:b1:3f:e5:d1:e4:
                    56:8e:6e:99:d5:54:4a:1d:26:0a:03:16:03:82:01:
                    c1:e8:30:56:23:2f:fc:b2:9d:b5:82:67:19:c7:b9:
                    21:de:3c:3a:ac:80:ad:b0:4b:e1:e6:b2:2e:d4:c6:
                    63:16:a8:5e:47:98:be:c5:04:93:30:a8:f9:03:85:
                    33:a5:84:6e:41:83:db:86:3d:56:2f:8b:79:39:ba:
                    65:3b:3b:fb:2a:c6:72:15:bc:a9:6e:cc:4e:95:37:
                    2d:b7:c5:db:cd:54:bc:f6:4c:05:c1:5a:04:ae:85:
                    7e:7f:08:6c:be:7c:9c:ef:e8:98:1d:2d:e9:fe:91:
                    76:e5:2e:27:e0:3c:6e:b3:eb:89:94:9e:99:96:12:
                    50:60:42:2c:9d:f3:ad:16:ee:34:ce:61:dd:fa:52:
                    d6:d2:9a:69:b3:81:ac:a2:b1:1b:69:44:0c:52:7f:
                    27:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D6:0D:FB:E5:6C:0A:4D:6C:64:B0:6E:6B:91:FD:01:A5:F7:30:5E
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/a1fd702ff7ada1d76049c23ec51f42e49c568a20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:97:aa:0a:60:30:18:71:ae:62:2a:21:b7:28:84:d2:08:e9:
         b6:72:95:c6:b8:4d:ed:b7:d9:5b:a6:d4:13:27:c0:3c:57:ec:
         8e:b0:a7:c2:2a:f4:e3:f1:eb:83:20:cb:63:43:63:45:c5:55:
         30:e7:4e:45:f2:f7:9e:aa:6a:3c:eb:4b:78:1a:2d:38:4e:53:
         9d:85:ee:c0:29:69:db:2d:6b:8d:81:09:ab:05:ab:9a:b2:8c:
         d2:c5:f5:57:f8:fe:87:bb:a6:40:66:5e:6d:21:95:c0:87:32:
         c2:1f:23:6c:4f:eb:19:35:08:48:eb:39:4f:14:4c:d6:c8:51:
         5d:e6:67:dc:46:9b:1c:05:09:11:ef:b4:c5:b1:c6:0c:d9:c1:
         5e:fa:b8:d8:c8:2b:0f:4e:ac:e5:35:76:3a:61:84:c0:58:82:
         05:38:2a:ee:bf:b0:78:f0:65:c7:00:8d:b7:bb:5a:02:99:6e:
         13:e8:79:cf:ca:3a:84:9b:49:80:72:62:1a:00:b3:93:d3:11:
         54:05:73:87:cf:2e:5c:2d:05:6d:93:8a:16:53:7a:d9:a2:28:
         14:60:49:04:e4:81:1b:21:b9:05:01:83:09:71:f7:49:cb:14:
         4f:a2:c6:45:04:bb:f2:ef:94:45:40:84:e4:ef:91:44:1b:0f:
         62:c8:a1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----