Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/fc422832a1f0498c75553062300c49d22d9a7497.roa
File:                     fc422832a1f0498c75553062300c49d22d9a7497.roa (raw, json)
Hash identifier:          ukLbpXMpa1XFgmfuwop2vSc+P3vehXgEVLV7Hleb5AY=
Subject key identifier:   2B:AE:F9:83:D5:96:23:D4:47:D3:AB:45:A2:17:12:F6:B8:F4:70:33
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A56A3
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/fc422832a1f0498c75553062300c49d22d9a7497.roa
Signing time:             Thu 18 Jan 2024 14:39:44 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     28000
IP address blocks:        2001:13c7:7020::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2774691 (0x2a56a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=fc422832a1f0498c75553062300c49d22d9a7497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:96:a6:09:f0:f7:b3:86:ea:b6:2b:1a:46:
                    02:20:7b:75:86:33:ac:42:e0:bf:68:b5:27:03:85:
                    bb:b0:0f:f3:f2:1f:e1:9d:3d:e5:99:80:3b:9d:cc:
                    a9:3f:e7:39:85:c2:4b:f7:3c:ad:86:a4:5f:bf:41:
                    25:90:0e:e4:d4:f0:bf:b1:b0:5f:b6:f0:57:fd:f6:
                    94:be:39:44:8d:8e:82:9b:59:31:6c:e4:e7:86:3d:
                    e3:59:fe:cc:62:b0:75:b7:1f:9b:d7:ad:5f:c2:df:
                    dc:ac:91:25:59:ec:eb:19:0b:1b:f9:b7:ad:31:96:
                    ce:83:7a:19:88:cf:3d:6d:b9:17:5e:cb:49:3a:fd:
                    2e:fc:66:51:63:c5:91:0d:cf:e3:7f:41:48:4d:20:
                    06:bb:04:a0:31:73:87:65:1f:df:c4:02:ef:be:ca:
                    8f:03:25:dd:13:3d:71:82:51:de:12:72:f1:f1:85:
                    59:39:48:c7:87:cc:81:e1:e2:62:23:20:f3:bb:4b:
                    52:17:97:ea:92:fc:35:5b:af:63:87:e7:ce:69:18:
                    4a:e1:4d:8e:72:10:30:a5:fa:16:ec:29:8d:65:90:
                    72:c1:d3:45:72:2c:2e:fb:b6:7d:3b:7a:d1:9d:67:
                    82:97:d3:ad:dc:74:03:e6:1e:0e:16:e7:34:b0:6d:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AE:F9:83:D5:96:23:D4:47:D3:AB:45:A2:17:12:F6:B8:F4:70:33
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/fc422832a1f0498c75553062300c49d22d9a7497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7020::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:35:fb:ad:86:16:cb:1a:76:0e:5c:9d:6f:8b:05:8b:48:01:
         fb:c0:3f:96:8e:d6:1a:bb:3a:5a:67:2c:dd:dd:4d:29:60:fb:
         e6:c0:ac:fe:c5:ac:2e:9d:32:22:d5:43:d0:09:3a:b2:fe:c8:
         5d:6b:30:5b:16:11:20:42:cd:e7:54:f3:ff:96:a0:c4:40:d3:
         57:a9:ba:a3:6e:39:23:39:ca:36:a7:3c:77:1a:f8:28:45:84:
         d9:e2:c5:bb:52:9a:90:93:e9:cd:a9:34:1f:45:1e:5f:7b:d1:
         8d:0c:0a:cd:c5:a3:d6:81:da:2a:4c:ca:66:80:ea:db:e3:0f:
         d4:02:6e:d9:00:13:fe:6e:44:7a:46:8c:0f:de:66:29:b0:f5:
         08:79:67:99:ad:bc:1a:84:af:bb:e5:e3:64:c0:60:c3:e3:89:
         90:cc:5c:e7:4f:ca:e8:62:98:ef:e4:62:f9:1d:0f:4a:90:22:
         35:e6:31:84:dd:34:b1:29:ce:c8:a7:49:1b:78:58:31:fd:71:
         cb:ac:90:17:ff:43:d3:5d:c0:73:4d:6c:57:56:6b:21:b8:01:
         e5:92:f6:59:00:5f:1e:3c:32:a4:77:de:7f:5c:ea:6d:c3:ec:
         31:b3:05:be:bb:f6:b4:92:0a:15:d8:78:83:4f:57:b0:9d:90:
         f6:0b:d1:c0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDKlajMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDdj
MGYzMTRjMWQzYWU4YzhmYmQ2OWY5YzMxNjMzOTcyNDNmODc2NmUwHhcNMjQwMTE4
MTQzOTMxWhcNMjkwMTE4MTQzOTMxWjAzMTEwLwYDVQQDEyhmYzQyMjgzMmExZjA0
OThjNzU1NTMwNjIzMDBjNDlkMjJkOWE3NDk3MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkAGWpgnw97OG6rYrGkYCIHt1hjOsQuC/aLUnA4W7sA/z8h/h
nT3lmYA7ncypP+c5hcJL9zythqRfv0ElkA7k1PC/sbBftvBX/faUvjlEjY6Cm1kx
bOTnhj3jWf7MYrB1tx+b161fwt/crJElWezrGQsb+betMZbOg3oZiM89bbkXXstJ
Ov0u/GZRY8WRDc/jf0FITSAGuwSgMXOHZR/fxALvvsqPAyXdEz1xglHeEnLx8YVZ
OUjHh8yB4eJiIyDzu0tSF5fqkvw1W69jh+fOaRhK4U2OchAwpfoW7CmNZZBywdNF
ciwu+7Z9O3rRnWeCl9Ot3HQD5h4OFuc0sG2qTwIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFCuu+YPVliPUR9OrRaIXEva49HAzMB8GA1UdIwQYMBaAFOcPkHEaK3GQ31qt
c0EWPfrhWCwoMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvN2MwZjMx
NGMxZDNhZThjOGZiZDY5ZjljMzE2MzM5NzI0M2Y4NzY2ZS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00MjFkLWI0NWItOWFjMmI3
Y2VkMjA5L2ZjNDIyODMyYTFmMDQ5OGM3NTU1MzA2MjMwMGM0OWQyMmQ5YTc0OTcu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdkLTQyMWQtYjQ1Yi05YWMy
YjdjZWQyMDkvN2MwZjMxNGMxZDNhZThjOGZiZDY5ZjljMzE2MzM5NzI0M2Y4NzY2
ZS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACABE8dwIDANBgkqhkiG9w0BAQsFAAOCAQEAGTX7rYYWyxp2
Dlydb4sFi0gB+8A/lo7WGrs6Wmcs3d1NKWD75sCs/sWsLp0yItVD0Ak6sv7IXWsw
WxYRIELN51Tz/5agxEDTV6m6o245IznKNqc8dxr4KEWE2eLFu1KakJPpzak0H0Ue
X3vRjQwKzcWj1oHaKkzKZoDq2+MP1AJu2QAT/m5EekaMD95mKbD1CHlnma28GoSv
u+XjZMBgw+OJkMxc50/K6GKY7+Ri+R0PSpAiNeYxhN00sSnOyKdJG3hYMf1xy6yQ
F/9D013Ac01sV1ZrIbgB5ZL2WQBfHjwypHfef1zqbcPsMbMFvrv2tJIKFdh4g09X
sJ2Q9gvRwA==
-----END CERTIFICATE-----