Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e65c20e408332ce51fee83935e260f10745537f4.roa
File:                     e65c20e408332ce51fee83935e260f10745537f4.roa (raw, json)
Hash identifier:          6OeR1Ma//cZj+KKSaoUYtPwK0mWJOjdSWEvVeQHYst0=
Subject key identifier:   3D:EA:A7:FC:53:BC:F8:92:79:D8:27:67:93:A7:D4:25:EC:DE:7B:73
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       233E16
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e65c20e408332ce51fee83935e260f10745537f4.roa
Signing time:             Wed 17 May 2023 12:52:00 +0000
ROA not before:           Tue 16 May 2023 12:52:00 +0000
ROA not after:            Sat 17 May 2025 12:52:00 +0000
asID:                     28002
IP address blocks:        2001:13c7:7020::/44 maxlen: 53

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2309654 (0x233e16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: May 16 12:52:00 2023 GMT
            Not After : May 17 12:52:00 2025 GMT
        Subject: CN=e65c20e408332ce51fee83935e260f10745537f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:75:c2:2e:27:2a:44:c4:8a:a1:5a:69:38:6c:
                    9c:6c:cc:42:ea:c4:a9:e3:11:b5:e8:fa:88:16:8c:
                    69:eb:b5:4b:09:8c:5c:36:a1:5a:e9:b9:6f:d8:11:
                    d8:64:52:97:c8:42:44:4e:7e:a2:b5:fb:64:b6:22:
                    31:a5:75:4e:42:e0:39:fe:d0:11:ff:ca:73:2c:9e:
                    aa:2b:f3:90:e7:ca:b9:5b:20:4b:1a:22:22:b6:c0:
                    f1:41:24:2e:c2:71:b5:e1:01:17:8c:c2:72:fd:70:
                    3d:bc:1b:fd:ba:24:d8:84:62:12:fb:08:40:b2:b4:
                    5f:5e:f8:e3:34:d6:bf:04:fe:f3:63:d9:86:21:4b:
                    7a:36:7f:17:3d:2a:7b:50:c8:4c:a9:df:c7:39:ca:
                    3f:2d:7b:80:fc:58:af:2e:1a:ba:72:3f:9d:74:65:
                    7c:29:23:83:5f:af:62:7a:a2:e2:c8:61:79:b9:31:
                    3f:a9:5e:1b:8d:64:94:93:ad:50:2f:7a:30:8d:e1:
                    d8:f7:18:0f:51:96:6d:69:c6:8d:1e:85:d1:3f:3b:
                    ba:71:4d:25:ab:6d:ae:66:85:e3:77:bf:e6:df:18:
                    05:fb:ee:df:83:5c:6a:88:6c:46:03:33:f5:9f:84:
                    ee:d7:39:8d:1c:26:2e:ad:5e:14:6d:6d:e8:38:8b:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EA:A7:FC:53:BC:F8:92:79:D8:27:67:93:A7:D4:25:EC:DE:7B:73
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/e65c20e408332ce51fee83935e260f10745537f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:6e:5a:ec:22:73:db:73:cb:eb:9e:4d:ca:7f:6a:4b:07:18:
         3f:2f:3b:8c:bc:ec:22:66:74:58:af:72:09:90:d4:9d:82:fd:
         85:91:30:85:4d:d6:a1:15:9e:6b:f3:0a:e5:f6:19:7b:3c:f9:
         55:1e:ee:0e:70:20:03:de:d6:ca:c7:00:e4:cf:44:f6:c2:1b:
         2c:05:a8:80:95:0e:63:49:6f:f7:75:da:31:79:84:c1:46:83:
         7e:f2:f1:9d:86:60:14:69:7e:86:25:20:9b:82:39:c5:2e:63:
         27:1e:d1:90:31:3b:77:87:99:0e:96:39:43:a5:d3:c1:12:9d:
         fd:26:56:ab:d8:9b:f4:3a:14:0d:a9:48:b9:be:a6:5d:fc:55:
         81:38:3a:be:c3:93:c1:fd:92:58:44:50:46:91:eb:8e:e2:e1:
         d4:e8:a1:29:02:5e:71:ed:3f:83:b9:b7:f7:97:8e:6e:64:6f:
         56:69:2d:5e:0e:a2:cf:e4:64:6e:96:0e:60:06:7c:0f:1c:f9:
         2f:91:6f:16:7b:0a:3c:ea:ee:c6:42:df:84:f8:10:88:f6:51:
         be:a0:3c:2d:75:4b:f0:ca:55:dc:50:3b:17:73:67:c6:40:f2:
         aa:a8:a2:29:25:86:31:b9:69:15:f8:8b:36:52:e1:c8:47:45:
         0b:25:a6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----