Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/09563a29661e343c4aa3353f86c99ba27ca3a1b0.roa
File:                     09563a29661e343c4aa3353f86c99ba27ca3a1b0.roa (raw, json)
Hash identifier:          bvhOWVgzdSBiMt3S/tnEB7cGT2e7oeXiynBA+L+gIKM=
Subject key identifier:   7B:67:5A:D4:DE:9C:E8:F3:57:71:57:D0:61:76:BF:9B:0E:CE:79:C8
Certificate issuer:       /CN=548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c
Certificate serial:       0D4FA5
Authority key identifier: 63:E5:E6:23:3C:CB:BD:E4:C1:C5:3D:77:C7:93:6E:B2:9E:FB:A3:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/09563a29661e343c4aa3353f86c99ba27ca3a1b0.roa
Signing time:             Wed 24 Mar 2021 14:34:45 +0000
ROA not before:           Wed 24 Mar 2021 14:34:45 +0000
ROA not after:            Tue 24 Mar 2026 14:34:45 +0000
asID:                     14970
IP address blocks:        2001:13c7:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872357 (0xd4fa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c
        Validity
            Not Before: Mar 24 14:34:45 2021 GMT
            Not After : Mar 24 14:34:45 2026 GMT
        Subject: CN=09563a29661e343c4aa3353f86c99ba27ca3a1b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:23:09:da:27:4d:3c:54:ed:58:b0:e5:d9:01:
                    0f:3c:0d:99:6b:83:7d:e5:c5:46:72:ca:ef:bd:70:
                    58:be:24:03:4a:a6:53:3c:ee:5c:a2:b5:65:63:70:
                    2b:14:8e:95:01:0b:14:89:c5:ef:1f:ec:f0:ec:fb:
                    14:0a:6f:fe:f5:70:6e:02:50:fa:a3:6b:75:0a:55:
                    ac:1e:66:ee:75:07:53:7b:3b:fd:b2:9b:4d:89:cc:
                    75:ec:ec:3b:0b:93:6d:12:67:98:e4:6c:d0:c1:6f:
                    ef:d4:f4:da:27:41:aa:ab:9d:8f:29:a1:9b:77:cb:
                    80:de:8d:50:8a:97:55:f0:e7:18:a5:74:c6:f1:05:
                    d0:8e:75:b1:68:f2:20:30:f4:35:fb:b0:2f:4f:e5:
                    52:44:c7:a7:25:54:55:53:01:2c:5f:ad:f5:47:8a:
                    33:bc:a3:e0:43:41:fc:4f:84:dc:d0:96:79:9e:aa:
                    47:9d:b7:12:fc:f5:cd:f4:da:e4:12:ed:0a:d4:f5:
                    89:b9:20:9d:90:a8:4c:9d:93:c4:7f:27:30:8e:10:
                    3a:1f:f1:af:00:9d:65:bf:21:61:7b:d8:e7:70:b0:
                    2b:4c:e4:7a:48:b7:4d:31:ad:66:df:c3:79:bf:4c:
                    59:e9:69:83:bc:80:d2:ca:0a:b8:7a:cd:f1:30:75:
                    51:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:67:5A:D4:DE:9C:E8:F3:57:71:57:D0:61:76:BF:9B:0E:CE:79:C8
            X509v3 Authority Key Identifier:
                keyid:63:E5:E6:23:3C:CB:BD:E4:C1:C5:3D:77:C7:93:6E:B2:9E:FB:A3:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/09563a29661e343c4aa3353f86c99ba27ca3a1b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df815206-c4d4-4dd1-a785-59f9fc49fa70/548aa5d6b92bf47f23a1d2b3b91f7c80b0d2830c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:a0:b8:ea:69:17:38:6b:58:76:58:cd:67:fa:39:92:c3:82:
         a6:4b:58:16:95:e3:11:4d:c7:ed:b5:39:9a:f9:74:95:99:6c:
         87:ef:b6:7e:83:28:8a:18:c0:5e:83:c5:1e:f7:f4:bc:5b:36:
         ad:1b:00:b1:a8:72:28:2c:6b:84:61:51:38:bc:fa:bb:04:6f:
         36:d4:f7:60:0f:f1:61:9f:4e:ec:01:aa:b9:f1:cb:6c:95:71:
         91:dd:a1:aa:68:64:db:a6:bd:55:be:7a:1f:d2:b8:e3:5b:7b:
         86:c5:a4:1b:50:0f:0e:2d:32:a2:75:db:e9:78:65:fa:eb:41:
         1d:6f:81:d1:ac:f5:fb:d1:32:fa:56:4d:1e:bf:59:08:92:9d:
         4c:40:9b:a8:2a:1a:df:9f:3a:77:97:6e:eb:4b:38:3c:7b:4b:
         d2:ee:7d:29:4a:12:87:7c:bd:be:9c:40:c9:70:5f:b3:93:1a:
         11:78:d1:0c:52:c0:c0:4a:42:25:b0:45:b4:bf:b0:c3:1b:88:
         14:69:a0:2e:db:df:e0:32:1a:0b:00:06:df:61:ba:94:5c:21:
         fc:ce:3b:5d:4b:fa:41:1b:0d:82:b3:13:25:8c:71:a7:13:b8:
         37:60:8c:a2:c8:76:40:a1:3f:11:15:2c:fe:67:9a:40:c4:b6:
         d1:1c:cd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----