Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0277afe5e20351cdc86557f3386f08519504f4fa.roa
File:                     0277afe5e20351cdc86557f3386f08519504f4fa.roa (raw, json)
Hash identifier:          idKDUik+Dly29dy0ChCV1Mv6bG64xCHu8byLDB0atp4=
Subject key identifier:   77:DE:55:C6:17:85:00:B5:56:FD:5C:D7:92:CD:44:C6:F0:FE:21:7F
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2E2B09
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0277afe5e20351cdc86557f3386f08519504f4fa.roa
Signing time:             Sun 17 Mar 2024 18:47:01 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     10620
IP address blocks:        2800:482:4002::/48 maxlen: 48
                          2800:480:ff52::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3025673 (0x2e2b09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=0277afe5e20351cdc86557f3386f08519504f4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:e2:58:cc:d2:b4:81:23:6f:67:0f:c7:68:
                    a9:b9:93:9c:ad:5e:da:17:0d:c5:ac:e8:a3:ab:c0:
                    6d:cd:37:3e:a5:d1:2b:06:43:d2:f1:34:9b:87:34:
                    24:7b:df:ea:4e:44:1a:52:e0:37:97:c3:6e:60:0e:
                    1e:97:aa:d5:24:2a:e9:1f:0b:f7:27:be:82:d9:a8:
                    78:73:74:70:db:9f:7e:e5:93:95:12:8b:d0:91:4a:
                    b5:91:8a:5f:e6:08:e8:78:32:19:7e:5d:51:79:ed:
                    f2:82:ff:8d:4a:3d:18:92:a7:60:f0:8a:ac:d0:c5:
                    73:c4:cc:84:dc:62:64:e8:8e:70:2d:8a:3a:a1:32:
                    b9:cd:27:cf:22:87:40:74:51:c4:82:3c:99:f0:eb:
                    35:49:69:a2:77:fb:3b:23:22:09:82:d4:c6:ca:46:
                    9e:a3:53:bd:18:58:d5:3c:d4:6d:70:44:3c:e9:53:
                    78:bc:17:49:5a:80:28:62:18:f4:5d:cc:a2:3d:77:
                    ac:07:bb:71:7e:20:5d:36:33:18:0d:d7:5a:ac:2f:
                    02:38:42:c6:d8:dc:d6:22:4f:83:1a:b4:e6:f3:a5:
                    5f:a0:1b:ef:91:ab:c8:45:99:56:92:5c:f2:c9:5b:
                    6f:b1:55:6e:31:66:6a:01:ae:8b:51:a4:fe:89:f7:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DE:55:C6:17:85:00:B5:56:FD:5C:D7:92:CD:44:C6:F0:FE:21:7F
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0277afe5e20351cdc86557f3386f08519504f4fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480:ff52::/48
                  2800:482:4002::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:51:6f:da:42:35:02:97:30:1f:39:15:5e:24:8e:df:61:a7:
         00:f4:bf:10:c6:2f:6e:5a:68:f6:ad:ac:b2:41:8b:37:2e:f2:
         9d:77:2c:5e:3f:dd:76:53:8c:0d:68:f9:d6:45:56:01:d7:18:
         06:8a:ea:7c:3d:f4:7c:ed:5b:02:93:5c:d8:54:bd:8a:e7:04:
         20:c8:43:2f:58:58:e7:5f:07:1b:43:79:9d:47:25:5a:30:af:
         26:e7:9a:75:ec:07:cb:31:d0:61:9f:92:83:92:73:2f:c4:54:
         9c:dc:1c:41:be:4b:09:5a:52:b1:d7:41:b4:4b:2c:23:f6:dd:
         be:77:b5:f1:2d:41:b4:7b:b6:c1:93:35:ab:f9:5a:c0:0e:d2:
         03:d3:9a:db:7b:bc:e9:83:ec:8c:5f:78:c1:4d:37:d8:41:e3:
         4c:db:e8:e1:54:f8:bd:f2:36:68:6e:bf:76:67:6d:d5:46:e5:
         2b:0b:35:88:40:08:7b:fd:ab:4e:81:75:3a:e7:1d:bf:c4:48:
         5b:19:97:32:92:73:cc:f2:4a:6a:7a:c2:03:ae:33:09:7c:3a:
         44:d5:18:4b:92:80:b1:08:8d:76:83:af:c4:b8:ec:4f:b8:97:
         3a:ef:59:c2:41:c1:a2:b3:8f:1e:4b:56:49:65:2b:46:22:e2:
         06:df:00:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----