Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/e244002b4017d070a2ada1f4b6f07dba51269ea6.roa
File:                     e244002b4017d070a2ada1f4b6f07dba51269ea6.roa (raw, json)
Hash identifier:          uzq2H8Nl+3YzVloe3gsLyIdqfY+T+F82+QG2mQJHZjw=
Subject key identifier:   3E:EC:D3:38:AC:BA:77:57:87:C0:B0:45:AD:A4:CC:58:E9:B6:EC:41
Certificate issuer:       /CN=7e02bc3ca022a8018c29af8772e06cbe046b81de
Certificate serial:       21BC7D
Authority key identifier: 3B:C2:AA:A6:50:CD:02:92:37:43:C7:A0:27:A5:87:8C:61:BB:CF:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e02bc3ca022a8018c29af8772e06cbe046b81de.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/e244002b4017d070a2ada1f4b6f07dba51269ea6.roa
Signing time:             Thu 15 Jun 2023 18:36:07 +0000
ROA not before:           Wed 14 Jun 2023 18:36:07 +0000
ROA not after:            Sun 15 Jun 2025 18:36:07 +0000
asID:                     20940
IP address blocks:        2800:150:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2210941 (0x21bc7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e02bc3ca022a8018c29af8772e06cbe046b81de
        Validity
            Not Before: Jun 14 18:36:07 2023 GMT
            Not After : Jun 15 18:36:07 2025 GMT
        Subject: CN=e244002b4017d070a2ada1f4b6f07dba51269ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:75:ea:a3:31:2a:ee:85:c2:5e:69:b6:eb:d5:
                    86:ba:9c:9f:9c:a9:5f:ca:6b:63:8b:18:11:db:ec:
                    f4:ba:9a:99:7b:5d:96:de:d6:bb:67:84:fc:f7:1a:
                    5d:c2:09:63:71:35:63:ce:d1:aa:3c:a5:9f:55:1f:
                    78:67:11:51:0b:fd:0b:0e:b0:52:df:cf:ab:b1:ea:
                    8b:76:0b:e1:b0:99:d2:71:aa:36:79:ec:49:ca:5c:
                    12:97:7c:4a:72:5d:3e:7e:c8:24:c8:55:12:83:a6:
                    3f:2e:ee:16:22:3a:7a:f7:c0:38:03:58:dc:44:b4:
                    ee:1f:b3:a0:17:59:12:c5:a5:df:1d:ee:1d:d4:e5:
                    26:8b:a4:5b:b5:52:d8:dd:ed:61:4f:8e:ce:29:14:
                    a8:cf:c7:84:75:c2:1f:e7:a6:7b:8b:38:24:e3:6b:
                    e8:c8:ba:11:f0:f9:e7:68:9e:c5:5a:89:98:f8:5a:
                    18:61:34:6a:cb:12:a8:bd:49:d4:9e:07:37:84:95:
                    49:d3:99:f8:93:72:98:66:e6:37:d7:6e:ef:e5:93:
                    2a:7a:37:e3:a9:03:5a:f6:ee:38:11:11:b8:59:94:
                    70:37:15:53:68:5f:dc:59:37:25:51:5a:b5:63:0b:
                    25:ac:a0:63:83:74:a7:04:d7:95:49:26:79:75:b2:
                    1c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EC:D3:38:AC:BA:77:57:87:C0:B0:45:AD:A4:CC:58:E9:B6:EC:41
            X509v3 Authority Key Identifier:
                keyid:3B:C2:AA:A6:50:CD:02:92:37:43:C7:A0:27:A5:87:8C:61:BB:CF:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e02bc3ca022a8018c29af8772e06cbe046b81de.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/e244002b4017d070a2ada1f4b6f07dba51269ea6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/7e02bc3ca022a8018c29af8772e06cbe046b81de.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:150:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:38:4b:34:6b:1b:4d:3c:af:19:4d:4c:b9:2d:b5:9d:4f:e6:
         97:c4:63:4e:1a:22:ed:4f:31:20:58:9b:9a:02:f2:11:84:a1:
         1e:65:56:c2:7a:a6:d7:5e:a3:ca:d7:7b:85:49:e4:51:e0:24:
         34:a4:b9:62:42:16:5d:a8:e6:4f:85:57:ff:de:b9:85:63:cf:
         3b:de:a1:d2:24:97:b9:fa:b2:94:ec:66:08:58:c5:67:84:92:
         8c:75:3d:87:e1:aa:7e:db:34:5b:be:e3:59:4b:f2:7d:43:ba:
         b6:18:51:c2:c0:ba:ec:fa:b4:8d:5b:7d:69:79:3e:62:ff:14:
         21:44:fe:8e:ee:07:9f:78:da:2a:4e:4d:77:d6:11:d1:8b:44:
         41:c1:2e:67:a4:8f:e9:3b:34:8d:7d:e1:9b:4c:4c:0d:34:5e:
         e2:fe:a7:18:aa:7a:8d:92:41:79:46:a1:76:51:57:f8:c2:13:
         0a:dd:40:cb:dd:37:0d:61:42:da:62:61:4f:89:b0:f8:5d:92:
         8a:9b:8c:5e:ab:c8:f7:61:e6:3a:c6:e8:63:37:03:ef:5c:dc:
         61:63:91:a1:92:fd:bf:82:ff:41:ac:ae:06:89:30:6b:66:28:
         5c:3e:51:d0:d3:08:23:0a:5a:79:2a:41:c2:bf:69:7f:4e:d6:
         19:70:35:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----