Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0af2e695f70d448fb72559f18bd9b3e8bbae43a3.roa
File:                     0af2e695f70d448fb72559f18bd9b3e8bbae43a3.roa (raw, json)
Hash identifier:          JFSFhchUcI89fSx19o4N3XUzktOqfHj9DDFzy7kOoYQ=
Subject key identifier:   72:3C:1B:3E:D4:93:19:92:FD:41:FB:40:DA:DB:AF:DD:69:C0:26:2B
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D80C0
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0af2e695f70d448fb72559f18bd9b3e8bbae43a3.roa
Signing time:             Sun 17 Mar 2024 18:43:24 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        2800:480::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2982080 (0x2d80c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=0af2e695f70d448fb72559f18bd9b3e8bbae43a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:51:0a:97:8a:36:11:ba:f5:75:62:d6:84:
                    7e:4f:17:33:97:af:0b:47:39:85:0e:17:7d:38:94:
                    35:1e:6d:01:11:11:6d:15:10:a2:c9:da:4c:0b:2f:
                    af:9e:46:c4:84:21:99:e5:54:31:da:dc:9e:20:ec:
                    b0:71:62:17:0a:1f:09:61:f4:72:a9:4f:4d:61:8e:
                    06:27:c2:7f:1e:4d:a9:20:cb:11:48:21:ad:da:ca:
                    70:39:29:f5:e6:0b:4c:2c:7a:e8:2c:5e:f4:11:b1:
                    6e:50:e7:70:bb:d2:c3:17:e6:fb:f6:31:83:7c:aa:
                    34:48:3e:22:d7:8a:79:1a:af:d5:59:2b:cc:1b:2d:
                    12:f5:9b:fc:73:55:42:0d:bd:df:80:83:1e:28:87:
                    3f:81:9c:9a:47:d2:b7:9f:59:17:5c:7a:67:e3:e6:
                    64:ce:93:ac:84:28:5c:b8:63:a6:7a:a6:52:6d:5f:
                    33:77:c0:11:f3:af:6d:89:0f:24:81:91:d3:ba:e0:
                    88:c0:51:83:22:16:37:10:10:63:9e:00:52:15:0f:
                    98:be:0f:5c:30:b2:97:d4:ca:23:b3:4d:8c:b0:cf:
                    e4:ee:bb:96:f0:a2:29:65:91:62:f9:9d:4e:7f:5a:
                    d6:ad:ee:27:10:1e:ee:e3:3d:2d:a4:dd:9e:28:56:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:1B:3E:D4:93:19:92:FD:41:FB:40:DA:DB:AF:DD:69:C0:26:2B
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0af2e695f70d448fb72559f18bd9b3e8bbae43a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:18:dd:ca:0e:7f:cc:c5:ab:e5:a3:8d:20:4d:59:ed:78:b2:
         cc:20:8b:61:4c:db:d3:63:c8:93:97:83:87:6b:d8:64:ed:8b:
         4e:5f:d8:c1:9a:2b:02:35:4a:8d:43:f4:bf:36:ce:e0:10:c3:
         29:9b:7a:f9:84:dc:a9:99:c4:e4:14:88:fe:bd:37:47:c7:96:
         10:ea:69:44:69:d3:37:d3:4d:54:62:a2:76:97:fb:79:5d:c2:
         76:e6:95:d9:2d:d3:53:bc:8a:09:f3:00:6d:7b:21:98:9a:24:
         be:3c:01:ae:a2:c2:36:12:f0:d6:d7:6d:66:71:66:2a:f5:0e:
         49:97:9f:07:0e:46:5c:39:63:25:77:8c:c8:7b:d4:56:10:4e:
         4a:1a:4d:69:c7:6a:22:6a:51:28:11:34:7b:bd:08:ce:eb:db:
         06:8f:38:28:c7:1c:36:de:37:b8:51:62:69:8e:b6:0e:c8:46:
         2f:ce:9a:5f:35:06:d3:35:fc:48:ad:d6:28:bd:97:a9:c3:22:
         a4:2a:cb:09:46:0c:ea:b0:bf:c1:83:8e:a6:d4:24:2f:2a:e2:
         45:db:b5:d5:60:c0:c1:55:67:68:87:75:b4:98:3c:63:a9:d8:
         c8:d4:b5:f7:9c:f9:d1:ac:7b:71:3e:04:45:85:05:59:65:71:
         38:d1:9d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----