Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323030313a313363373a373030343a3a2f34382d3634203d3e20323633373739.roa
File:                     323030313a313363373a373030343a3a2f34382d3634203d3e20323633373739.roa (raw, json)
Hash identifier:          d8OyBMHxq6ZNvCxdljP8kXNa0Fp9tnp3EFtf0OXiA8I=
Subject key identifier:   3D:B5:6E:2F:E3:38:1A:F7:8D:62:67:41:D4:58:40:54:4D:07:62:5C
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       147B8D85073CA97EE513060C6A1AA579AFAB97B4
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323030313a313363373a373030343a3a2f34382d3634203d3e20323633373739.roa
Signing time:             Tue 05 Mar 2024 17:41:17 +0000
ROA not before:           Tue 05 Mar 2024 17:36:17 +0000
ROA not after:            Tue 04 Mar 2025 17:41:17 +0000
asID:                     263779
IP address blocks:        2001:13c7:7004::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:7b:8d:85:07:3c:a9:7e:e5:13:06:0c:6a:1a:a5:79:af:ab:97:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: Mar  5 17:36:17 2024 GMT
            Not After : Mar  4 17:41:17 2025 GMT
        Subject: CN=3DB56E2FE3381AF78D626741D45840544D07625C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:51:8e:e4:d1:87:3e:32:3f:03:4f:bb:cb:49:
                    82:e6:fa:97:c3:2c:4e:a1:14:25:fb:fe:2f:8b:84:
                    46:ba:f4:05:9a:df:8f:01:da:0f:5c:d1:66:c1:90:
                    68:25:42:62:d3:38:65:02:f6:24:2d:1e:eb:f0:32:
                    c9:36:b7:3e:b2:9b:1b:c9:bd:6f:f2:d7:c3:bd:be:
                    ff:a5:43:1a:87:6d:62:1a:25:2d:f9:53:e5:df:83:
                    72:da:0d:d8:fe:57:e8:3d:73:06:94:bd:86:a2:3c:
                    af:d7:41:74:4a:f3:9f:3a:60:4d:90:ed:d6:bd:bd:
                    a7:41:e1:99:b9:5b:ef:46:2f:21:96:20:d4:74:14:
                    bb:f9:2b:d8:fa:5b:92:5a:b5:37:f1:d8:fe:d3:36:
                    94:73:78:ff:6d:b2:97:4a:d3:01:d5:f1:e2:9f:61:
                    97:ce:dd:bc:da:6b:5b:41:7e:47:ef:15:b8:e2:cd:
                    e2:69:7c:87:56:31:07:f3:03:fc:10:64:0d:de:f6:
                    89:11:9e:0c:6f:f6:51:76:ad:2d:95:0f:c4:72:e4:
                    4a:59:21:17:c7:d5:9d:f1:89:b5:d3:ee:28:c1:1c:
                    57:80:ea:63:fe:43:eb:41:d6:2a:c6:b5:03:6a:80:
                    34:c2:40:75:ec:0b:18:ff:c2:76:53:eb:64:cc:78:
                    4a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B5:6E:2F:E3:38:1A:F7:8D:62:67:41:D4:58:40:54:4D:07:62:5C
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323030313a313363373a373030343a3a2f34382d3634203d3e20323633373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7004::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:66:a2:cd:f3:d2:64:26:b2:b5:22:22:9a:63:a2:94:5d:a7:
         aa:3b:5b:24:e9:a2:84:b6:82:28:cf:a8:41:54:50:77:91:03:
         c4:d6:de:68:79:29:07:c5:38:3f:19:0f:3d:40:e4:52:76:4c:
         34:5d:78:46:a4:99:42:18:d4:b6:10:37:02:63:e0:92:1d:2c:
         40:0b:56:25:5f:d9:e1:5a:d9:b5:58:0d:69:de:de:37:1c:19:
         75:d3:00:8f:10:83:dc:88:20:d8:3c:62:f0:0e:4c:c3:e2:01:
         e7:e3:88:a5:30:f8:b6:ef:84:3e:bc:54:a9:01:c3:e2:3a:78:
         4d:1a:33:b8:33:48:35:4e:2f:90:e8:9e:25:a2:ba:29:36:2f:
         f2:9b:06:38:d5:13:2a:12:a3:04:e4:5d:13:1a:f4:fa:1a:0f:
         df:cd:87:dd:df:ac:9c:98:e4:38:cc:bb:23:a5:07:f6:4f:79:
         49:6c:16:c8:44:37:c4:87:7b:84:57:99:e9:9f:f7:5e:48:5c:
         53:89:09:74:d4:e5:f4:6c:a4:e0:81:b7:44:48:33:c9:f4:73:
         4e:11:9e:ad:da:da:f8:16:ff:12:89:5e:f5:20:d8:50:29:57:
         9d:15:d9:82:dd:af:37:a3:02:58:7b:a2:de:fe:b3:98:f7:9c:
         02:a7:6f:55
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----