Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/068a3e1f9874fec5bc278ce99db1f0cdef131963.roa
File:                     068a3e1f9874fec5bc278ce99db1f0cdef131963.roa (raw, json)
Hash identifier:          kiH7nFb2vNTSDLYT6RTN89GUJA5CKg5IXGC6tNtjcKw=
Subject key identifier:   58:DC:7A:07:6E:E7:6B:5A:1F:DE:D8:BE:73:BA:63:FE:AB:D6:6F:0B
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       26F9DF
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/068a3e1f9874fec5bc278ce99db1f0cdef131963.roa
Signing time:             Thu 03 Aug 2023 15:44:24 +0000
ROA not before:           Wed 02 Aug 2023 15:44:24 +0000
ROA not after:            Sun 03 Aug 2025 15:44:24 +0000
asID:                     14080
IP address blocks:        2800:486::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2554335 (0x26f9df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Aug  2 15:44:24 2023 GMT
            Not After : Aug  3 15:44:24 2025 GMT
        Subject: CN=068a3e1f9874fec5bc278ce99db1f0cdef131963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:fa:14:da:57:3e:6b:09:c2:8b:ec:68:b0:
                    89:3f:31:53:3e:14:f8:c5:d9:f1:6c:2b:79:00:8f:
                    20:ec:2e:16:fe:db:2e:0a:84:01:15:10:8f:05:2c:
                    3d:3f:24:0e:67:85:4e:c9:17:48:0f:50:8b:8e:0c:
                    96:28:4b:c9:29:a6:15:5f:4c:79:ee:9b:f5:28:ca:
                    10:4f:85:33:f7:22:fe:67:df:c7:9e:78:91:b6:68:
                    a1:da:64:61:19:10:60:df:a6:13:bf:6f:64:94:87:
                    16:2a:30:f2:69:18:b1:2b:5e:cd:cc:48:94:3c:47:
                    bc:a9:6b:ec:32:6b:b2:b3:7d:f4:eb:05:08:71:db:
                    02:dd:a5:98:8b:d6:39:b1:09:d4:65:5a:bd:36:99:
                    8b:f2:01:1f:b3:fc:75:08:a4:a8:63:26:63:ce:d3:
                    3f:4e:1e:20:58:ab:da:7f:cd:f9:a6:a3:d3:ef:e9:
                    8f:f2:5b:7b:1f:86:c6:ca:81:88:dd:d7:7a:d0:f7:
                    b9:5d:0a:71:9e:fe:b9:ad:2a:df:a1:78:20:e0:b6:
                    06:b2:d3:4f:78:31:fb:cf:04:8c:de:a1:fe:eb:00:
                    64:48:d3:43:d1:74:83:e2:b8:b5:d4:d6:84:4a:e5:
                    e0:1f:5f:28:ce:99:18:24:60:19:6d:72:4f:8c:32:
                    a8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DC:7A:07:6E:E7:6B:5A:1F:DE:D8:BE:73:BA:63:FE:AB:D6:6F:0B
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/068a3e1f9874fec5bc278ce99db1f0cdef131963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:486::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:81:92:64:db:ec:25:81:76:5b:68:fa:0c:b9:6a:ca:66:92:
         b0:4e:11:bd:5d:4b:1d:f8:27:79:d6:23:2a:18:85:64:20:de:
         c8:fb:d2:33:3b:4f:8e:0e:0e:ea:2c:d4:65:d1:ba:77:76:41:
         ee:dc:1c:5a:51:7f:33:83:83:42:f8:1f:eb:50:5c:3c:54:45:
         69:54:2a:a5:4b:59:05:d1:30:71:b3:0f:6c:9b:a3:06:92:7e:
         76:07:4e:46:e2:67:3b:d9:16:75:5d:a8:d4:f4:ad:e6:08:bb:
         d6:57:c9:a2:f6:b0:5c:c0:c5:f9:3e:8d:e5:04:e0:6d:7a:9f:
         dd:f5:7a:96:b1:49:9f:5b:6f:ec:96:36:18:9c:85:1d:d5:7f:
         2b:5a:8f:4f:a2:60:95:99:a0:ff:79:4c:c8:ea:2d:06:ce:1d:
         b1:e9:6d:73:53:03:99:ca:76:9c:bb:9a:b6:bf:a2:55:34:df:
         89:5f:0a:04:2d:6f:71:46:0e:3f:c2:87:76:52:ec:e4:b9:71:
         73:8a:d8:41:5b:12:4f:88:c4:1d:67:ef:92:0c:39:8a:87:b9:
         14:33:fd:e5:7e:49:af:e6:77:47:77:89:6b:de:a2:9d:63:cf:
         f0:fc:6c:0f:41:b4:a1:72:5b:42:08:1b:08:47:30:da:f7:b2:
         e7:b4:dc:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----