Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/f4476d337ad27bda10ade44563111391e08396a9.roa
File:                     f4476d337ad27bda10ade44563111391e08396a9.roa (raw, json)
Hash identifier:          n/oMNTzjOPn9+ozAznmPnjUwiebcKjoUbOESOGR9zi4=
Subject key identifier:   7A:7C:7D:12:E0:E5:13:5B:57:48:44:E6:01:BE:9D:A1:D7:3C:B0:F0
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A4CCD
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/f4476d337ad27bda10ade44563111391e08396a9.roa
Signing time:             Thu 18 Jan 2024 14:39:40 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     394353
IP address blocks:        2001:13c7:702f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2772173 (0x2a4ccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=f4476d337ad27bda10ade44563111391e08396a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2c:18:6c:03:c7:c0:04:28:ba:78:4d:87:f7:
                    8e:06:26:6c:57:82:a0:18:14:2b:f2:b1:98:f5:32:
                    fd:e3:3b:48:60:12:e1:04:3d:f1:14:49:45:8f:6a:
                    83:06:c2:83:ab:7b:f9:ef:8e:14:c6:1c:11:c0:0d:
                    ce:54:76:d4:87:e2:12:a4:16:96:9a:dd:92:6f:43:
                    37:a7:ea:c7:4c:9f:c0:b2:e9:29:33:12:66:03:78:
                    71:1d:ad:a4:13:a6:97:50:9b:f5:9e:4e:28:36:f7:
                    d6:a6:4a:ce:27:37:47:78:c5:44:48:ff:e0:f4:f7:
                    70:dc:e8:b5:95:1d:9b:9f:16:b9:db:4c:9f:12:11:
                    36:37:c0:7c:c8:6f:b3:e6:79:99:7f:2b:0e:be:a0:
                    01:07:22:b7:d1:77:11:6c:b2:37:7c:ab:e6:ef:58:
                    5f:01:3b:72:66:45:42:95:5a:b9:9a:e9:e0:07:99:
                    ed:9e:7c:91:09:a2:2a:08:79:b1:93:db:be:40:eb:
                    82:7b:8f:cb:6b:75:b8:48:b9:63:2e:41:90:78:c8:
                    4a:cd:db:b8:0d:f3:e5:a6:84:8f:c6:b4:3a:ab:07:
                    2c:43:c8:9b:fb:01:16:5d:c1:bd:ab:c5:14:49:07:
                    1e:34:2d:a6:6b:68:d0:63:f1:ab:da:3e:24:bd:6b:
                    e6:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:7C:7D:12:E0:E5:13:5B:57:48:44:E6:01:BE:9D:A1:D7:3C:B0:F0
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/f4476d337ad27bda10ade44563111391e08396a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:702f::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:55:79:a9:13:3e:58:3c:54:ec:0a:87:20:60:43:05:09:fa:
         5a:88:ca:02:08:a3:45:ab:e5:8a:40:f4:de:ee:94:ac:e7:ee:
         04:25:01:7d:38:a7:fb:fb:5a:a4:37:88:1f:1e:13:a9:0f:a2:
         47:33:86:98:ce:19:68:9b:32:9b:72:4d:b4:54:61:0d:69:14:
         ca:36:9d:a6:a2:72:0e:17:e6:e3:09:4a:f8:3e:23:8e:e5:08:
         46:73:00:71:c3:06:5c:ad:9d:bc:c8:d6:3d:0f:fe:2c:a6:b0:
         2a:66:15:5b:a2:a6:e1:d2:2b:67:05:ee:fb:4f:46:14:ed:d4:
         d1:7d:eb:01:8f:2f:ac:8a:8a:68:05:a4:c7:86:72:8d:eb:16:
         22:59:35:53:25:ee:2d:79:bb:c1:3a:49:d9:59:46:66:19:e6:
         b0:fa:2d:85:27:a4:a9:04:6a:64:5e:1d:dd:72:7b:5c:dc:e1:
         b9:9a:8b:4b:04:25:c3:52:a9:7c:23:96:7a:d7:f5:55:16:ce:
         51:58:3a:2f:7c:2c:c8:cc:62:fe:fe:df:d0:8e:76:1b:7d:ab:
         c5:9b:bf:f6:b8:b6:12:18:3a:6c:bf:5f:b3:2a:f2:90:db:00:
         d3:0c:d5:3e:02:2f:86:fa:b1:6d:43:bf:19:d2:2f:88:e0:b7:
         a9:0f:74:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----