Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/dc801b100d1701985150fac453f9804a256d68c8.roa
File:                     dc801b100d1701985150fac453f9804a256d68c8.roa (raw, json)
Hash identifier:          kGMrII+dZp0JyTiWuwUksREdbxPEJg13lE6wWKctHRw=
Subject key identifier:   69:24:30:F5:D8:43:8F:69:61:D1:69:8E:08:58:B1:84:B4:7C:FB:77
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A6AD8
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/dc801b100d1701985150fac453f9804a256d68c8.roa
Signing time:             Thu 18 Jan 2024 14:39:50 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2779864 (0x2a6ad8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=dc801b100d1701985150fac453f9804a256d68c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b0:54:c2:60:68:7f:73:88:ff:31:23:d3:b6:
                    35:ea:58:43:17:b1:ef:c0:d6:63:e9:f4:41:24:40:
                    43:f1:94:5c:8b:3b:5c:75:ad:99:3d:d4:93:ab:52:
                    cd:e2:dd:81:e3:e8:62:ec:10:bd:89:db:7e:e8:9a:
                    a4:99:f5:52:35:26:86:c2:66:a1:4c:60:44:8b:1f:
                    68:fa:48:8f:05:94:18:30:6e:f3:0f:06:81:2c:1f:
                    b3:25:e0:5f:cf:a5:cc:b4:4a:9b:aa:18:51:0b:80:
                    c0:28:05:03:0d:ed:3a:74:e4:35:8b:06:48:e5:74:
                    aa:ec:17:c9:3a:f4:c1:89:24:df:87:55:f5:bc:b2:
                    08:24:40:ba:5a:6d:c7:33:50:b0:9c:f0:d6:2f:d8:
                    d0:e5:a1:77:f4:87:5d:bd:92:f3:bb:41:65:41:ad:
                    c1:62:e9:7b:46:b2:c3:c9:00:43:9e:22:fa:f7:01:
                    84:df:ee:42:cc:cc:9c:8f:f5:79:83:56:66:94:a3:
                    da:af:da:04:70:c3:73:6e:95:d9:2d:db:99:6d:e6:
                    fc:55:84:a8:be:8c:92:f9:08:83:b5:24:98:d7:9c:
                    a5:39:fe:6c:5f:82:3a:8c:27:38:5b:4b:e9:b0:bd:
                    2a:55:48:11:f6:ce:6a:f9:44:7f:a9:ff:e2:10:f0:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:24:30:F5:D8:43:8F:69:61:D1:69:8E:08:58:B1:84:B4:7C:FB:77
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/dc801b100d1701985150fac453f9804a256d68c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         56:10:24:ed:5d:fc:b9:76:e2:ed:74:ff:77:b1:78:be:08:39:
         13:a8:6c:20:16:bc:23:cb:54:53:e0:70:bb:67:67:b3:d9:82:
         88:2c:e0:00:87:9c:9e:4d:a6:3a:33:af:2d:d3:e8:fa:5f:5b:
         91:9a:be:e1:e5:b2:f7:ea:0a:36:a7:81:3d:93:a4:33:2c:94:
         e1:e8:50:9e:ca:c8:43:f1:ec:dd:5f:f3:0d:48:a5:05:51:31:
         94:2b:c0:98:3a:5e:92:1b:c4:f1:01:8e:41:12:5c:7b:df:c2:
         0b:35:42:2b:72:90:f9:f5:d7:0d:ad:bb:88:26:42:dd:13:8c:
         3c:6e:b4:cc:21:c5:b5:74:39:24:53:fb:2c:78:a1:1d:39:60:
         7d:8b:3d:ea:7f:19:92:34:31:bc:8a:c5:a3:49:98:58:01:9a:
         cb:65:4f:9b:c7:02:6c:80:40:7b:f1:a4:6c:39:82:c0:98:93:
         2c:97:af:92:ea:4d:2a:5a:d6:2b:1c:60:97:48:fe:7c:37:ff:
         e9:af:e8:48:dc:59:f9:5f:27:50:de:37:65:3a:80:ff:36:51:
         b4:d3:04:9c:c8:66:5d:75:0e:e8:f4:87:7c:90:fe:4f:0e:7e:
         f8:85:fc:00:8c:4f:1a:15:2d:90:20:ec:96:81:17:ce:eb:ab:
         f2:0a:e0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----