Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/4d7914d399419d197836c6c3a995f5513f20b6cd.roa
File:                     4d7914d399419d197836c6c3a995f5513f20b6cd.roa (raw, json)
Hash identifier:          Z5otYTGc4wtj2XhulA18LJ01Jwfxl1z6eTn6NVWaqCM=
Subject key identifier:   8E:BD:E8:89:94:6A:F6:FB:47:07:8A:CE:6C:EE:EA:EA:53:B9:6C:8E
Certificate issuer:       /CN=c7c15fafa30bfcd79bf9951262573158d98a275e
Certificate serial:       1DB239
Authority key identifier: A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/4d7914d399419d197836c6c3a995f5513f20b6cd.roa
Signing time:             Mon 23 Jan 2023 18:17:23 +0000
ROA not before:           Sun 22 Jan 2023 18:15:43 +0000
ROA not after:            Thu 23 Jan 2025 18:15:43 +0000
asID:                     202
IP address blocks:        2001:1330::/30 maxlen: 64
                          2001:1334::/30 maxlen: 64
                          2800:d300::/29 maxlen: 48
                          2803:9b20::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946169 (0x1db239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Validity
            Not Before: Jan 22 18:15:43 2023 GMT
            Not After : Jan 23 18:15:43 2025 GMT
        Subject: CN=4d7914d399419d197836c6c3a995f5513f20b6cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:51:e7:02:28:9a:31:8b:8f:75:51:5a:73:0f:
                    b5:97:30:4f:8a:56:4f:8e:e1:d6:55:0c:e2:76:64:
                    fb:94:34:22:0a:4a:ec:97:8d:fe:33:3d:3c:dd:f3:
                    eb:27:26:38:dc:37:05:00:52:ef:f3:1d:46:72:05:
                    c0:64:82:34:3a:79:bd:53:91:6c:fd:b8:9b:30:74:
                    cd:a5:1a:be:fe:8a:74:f9:b9:7d:44:49:38:8a:4c:
                    89:d1:17:d1:a4:a1:20:ae:35:09:55:d7:6c:af:51:
                    99:d2:8a:47:e2:11:02:8f:4e:73:5e:92:22:d8:2b:
                    0c:e3:dc:3b:c0:42:64:53:41:f3:8e:3f:c4:fb:22:
                    c8:92:52:d4:4f:74:d8:91:6e:ef:9a:02:be:1e:1d:
                    b5:08:ed:51:6a:0d:91:f0:be:27:c7:eb:5b:79:ff:
                    fd:e7:c7:96:57:0d:14:6d:5b:36:f2:d0:95:41:e4:
                    a9:76:df:7e:27:d7:a8:4b:58:cd:af:35:08:8c:e8:
                    58:4c:0b:be:63:6c:d0:43:20:d8:c6:b1:43:53:0a:
                    18:1d:9b:88:3c:b4:79:f4:fc:7f:ed:cb:77:10:8e:
                    31:aa:38:01:fc:3d:6f:5f:fb:d6:ef:53:95:09:61:
                    73:0b:99:66:65:fa:71:95:5b:18:16:e5:33:60:b2:
                    55:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BD:E8:89:94:6A:F6:FB:47:07:8A:CE:6C:EE:EA:EA:53:B9:6C:8E
            X509v3 Authority Key Identifier:
                keyid:A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/4d7914d399419d197836c6c3a995f5513f20b6cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1330::/29
                  2800:d300::/29
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:2b:d7:22:08:56:7c:cd:bb:a7:ea:84:3c:8d:c6:48:11:21:
         a2:53:66:67:0c:a6:1e:29:a7:f7:29:c2:5c:bf:10:67:34:5d:
         40:cf:90:e7:8c:d8:59:5c:21:4d:19:aa:04:4d:4f:8f:17:2c:
         0b:11:3c:70:ef:07:07:8f:2d:49:8b:91:33:d6:60:09:f3:bd:
         88:3d:a4:8c:ff:4c:4e:08:1b:a9:4d:53:f4:cc:9c:c5:52:5a:
         73:ea:5e:ed:13:59:0a:b6:ee:45:73:e2:23:b3:ec:64:50:c6:
         dd:d9:57:86:c3:0d:be:a6:53:63:ab:fe:ba:50:03:bf:0e:1d:
         a8:f2:c4:da:05:77:35:29:d7:b3:98:85:8c:f7:d5:6e:0b:01:
         3b:82:ea:67:ec:5d:b8:1f:17:71:43:9c:1c:86:85:5d:48:eb:
         09:e8:9d:f3:13:f1:0a:e0:15:f2:14:3b:c2:b3:a2:5e:52:08:
         03:5d:de:ec:98:2d:a0:94:15:41:b5:92:98:3a:eb:0e:80:5f:
         d4:db:a2:6d:2f:e9:f6:09:9d:d2:3a:e0:e7:43:0b:78:c0:91:
         c5:e3:75:af:03:44:83:22:7f:5d:52:e9:d0:8e:43:4d:e6:02:
         b7:eb:91:1a:19:f1:cc:fd:4f:64:f0:08:aa:8b:92:ca:a0:3a:
         d3:88:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----