Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/de47c87ab7dd9b0c44eac7ed99eafa300bc99dd0.roa
File:                     de47c87ab7dd9b0c44eac7ed99eafa300bc99dd0.roa (raw, json)
Hash identifier:          Fp58Z9ZfxxmvCrOVaZEay3999rRfblK2c1gOHVTSYK0=
Subject key identifier:   E4:32:95:1F:BC:AD:FD:62:C7:69:D5:F3:B7:2B:03:DB:B0:AE:EE:DC
Certificate issuer:       /CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
Certificate serial:       2B2C73
Authority key identifier: 2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/de47c87ab7dd9b0c44eac7ed99eafa300bc99dd0.roa
Signing time:             Thu 15 Feb 2024 21:18:39 +0000
ROA not before:           Thu 15 Feb 2024 21:18:29 +0000
ROA not after:            Thu 15 Feb 2029 21:18:29 +0000
asID:                     394353
IP address blocks:        2001:13c7:702f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2829427 (0x2b2c73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Validity
            Not Before: Feb 15 21:18:29 2024 GMT
            Not After : Feb 15 21:18:29 2029 GMT
        Subject: CN=de47c87ab7dd9b0c44eac7ed99eafa300bc99dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:95:2e:ff:0a:8b:65:cb:06:dc:42:c1:c8:
                    f9:14:41:63:91:6a:6d:79:16:b4:d1:6e:2d:01:4c:
                    4e:94:11:65:b7:d5:38:2b:bf:4c:dc:99:eb:83:6d:
                    e7:2c:b6:92:26:35:bb:71:a8:d9:74:8e:a1:c8:9c:
                    04:25:81:96:16:86:97:32:da:00:b7:6f:65:2b:6b:
                    48:01:00:d0:17:dd:99:56:e8:11:f5:bc:42:59:f0:
                    bc:d0:42:75:f3:82:eb:3f:c4:44:bf:ff:53:9d:69:
                    36:7a:17:c7:fa:5b:d2:9b:7e:2e:dd:83:00:1a:9d:
                    46:4e:27:55:58:0a:5f:54:52:75:d6:ea:7b:79:e7:
                    f4:55:a3:42:b0:43:48:7f:b0:eb:66:bf:b6:7e:6d:
                    8a:d4:fb:a7:0e:56:2b:77:7d:99:69:c0:42:46:c9:
                    05:b2:be:0c:68:b5:66:9f:c3:d1:39:4e:2f:65:ef:
                    36:ed:75:18:7c:47:b3:38:69:c9:39:93:ae:9d:36:
                    a3:02:0c:ff:bf:33:0a:23:e1:c2:f9:fc:6c:39:8a:
                    a7:dd:1f:16:3e:71:7f:11:29:04:f0:75:94:9f:75:
                    aa:a9:cf:bb:68:56:47:ae:24:61:96:c2:67:7c:c2:
                    d3:c9:07:b5:75:e5:bd:a2:e9:ba:82:05:8d:db:59:
                    1c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:32:95:1F:BC:AD:FD:62:C7:69:D5:F3:B7:2B:03:DB:B0:AE:EE:DC
            X509v3 Authority Key Identifier:
                keyid:2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/de47c87ab7dd9b0c44eac7ed99eafa300bc99dd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:702f::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:48:d9:f1:8b:2c:30:18:15:08:7d:b4:8e:12:65:2c:39:f8:
         1a:22:ed:05:9c:7d:25:75:28:de:99:5b:3b:b4:83:56:41:7b:
         6b:75:70:fa:e2:73:cb:fd:37:79:a4:d1:e7:dc:6a:c1:8f:f7:
         4d:3c:74:39:2d:c4:91:3d:f1:00:70:1a:8d:11:a4:0e:92:1b:
         33:73:bd:41:67:15:82:e4:90:8b:63:ff:1a:14:2e:7e:f7:e2:
         dc:e6:82:61:f7:e3:85:b1:01:e2:c6:51:e1:ac:41:e6:7d:27:
         1c:48:3e:ea:6c:81:8d:eb:45:c2:cf:fa:d4:08:e0:11:01:a7:
         fd:75:15:9b:51:99:e1:62:d9:6d:6d:24:c2:0f:4f:9f:ee:c6:
         26:45:ee:fa:08:84:a2:59:e5:77:0b:80:89:89:eb:50:c6:a7:
         ae:2c:60:ee:95:13:96:2c:67:ed:27:e1:22:e3:ba:c9:32:db:
         28:7d:46:1c:59:94:e2:a6:0a:f3:d8:94:06:5e:41:59:bf:6f:
         f3:2f:66:67:77:ab:b9:f2:9e:ce:a3:fa:ac:af:2c:38:2b:4a:
         b4:d8:70:df:b9:9f:f3:f3:4d:08:a8:6c:0f:c9:34:59:34:6d:
         6c:0b:06:25:ec:ab:51:51:ce:3d:93:0a:0f:2a:2a:c5:b8:d6:
         e8:4c:05:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----