Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0f7e14d4965354f0c6c351749d4aa6fcc73f2e65.roa
File:                     0f7e14d4965354f0c6c351749d4aa6fcc73f2e65.roa (raw, json)
Hash identifier:          V+icrzCq17spm9VKrdw8cHbU5sU+wFl+sM//iU4B7IU=
Subject key identifier:   0B:60:BC:D3:54:F1:4F:77:74:C5:6A:34:EE:31:19:AC:0E:21:00:9F
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DC327
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0f7e14d4965354f0c6c351749d4aa6fcc73f2e65.roa
Signing time:             Sun 17 Mar 2024 18:44:28 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        2800:482::/32 maxlen: 32
                          2800:482:4001::/48 maxlen: 48
                          2800:482:400a::/48 maxlen: 48
                          2800:486::/32 maxlen: 32
                          2800:486::/40 maxlen: 40
                          2800:480:ff52::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2999079 (0x2dc327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=0f7e14d4965354f0c6c351749d4aa6fcc73f2e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:dd:60:70:f3:af:19:ad:35:45:7d:56:3d:
                    f4:5f:53:c8:6c:2f:d1:10:39:e3:95:c4:70:09:3a:
                    fe:30:4f:79:6c:8b:44:21:4b:66:10:db:70:7b:ba:
                    89:b9:8e:0d:00:fc:83:34:67:8d:5c:e5:cb:b3:5d:
                    82:d2:12:fa:86:c8:83:f5:c0:50:7d:2c:37:45:01:
                    b4:c0:bd:1e:63:93:5a:eb:34:9c:9e:b7:ee:a8:8a:
                    25:24:9a:55:34:b2:a8:74:b3:71:eb:ef:94:ae:ec:
                    9b:68:26:f2:41:13:79:5c:ae:f6:0f:74:6e:e8:ef:
                    fc:e0:ff:dc:b9:30:74:33:f1:c8:15:2f:94:56:2b:
                    09:68:44:b0:92:37:3c:41:7d:49:5a:70:14:39:a2:
                    b5:a9:0f:24:f2:59:30:45:c8:47:08:69:cc:68:16:
                    8f:19:da:66:a7:8c:e4:23:fa:f0:50:88:53:e0:6e:
                    aa:f2:d5:47:0c:a2:16:82:d9:4c:d3:4d:09:ca:9b:
                    ff:88:04:89:b1:46:61:ef:5c:6b:03:ce:40:8b:06:
                    3f:81:76:ef:51:59:9b:74:18:9f:a3:40:da:5b:54:
                    05:76:59:c7:dc:fb:bb:5e:cb:ea:24:ca:5f:8f:13:
                    a6:f9:19:d1:d1:46:6c:e8:f8:9e:ff:f9:dd:43:83:
                    1a:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:60:BC:D3:54:F1:4F:77:74:C5:6A:34:EE:31:19:AC:0E:21:00:9F
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0f7e14d4965354f0c6c351749d4aa6fcc73f2e65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480:ff52::/48
                  2800:482::/32
                  2800:486::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:39:ad:d0:fe:9f:a6:60:2d:9d:ab:db:17:74:f3:9a:62:82:
         c7:a3:48:1c:a8:1a:5f:81:0d:48:76:72:82:c9:a6:31:21:c9:
         43:57:ae:d9:e9:10:de:f0:ee:0a:7a:ca:02:8e:d1:ac:de:a0:
         0b:02:44:3c:18:c6:33:f0:48:ab:79:0f:e3:ee:f6:24:30:60:
         4e:53:c9:90:53:d2:86:2c:a3:0c:e9:e2:d9:72:04:25:8a:dd:
         2b:3a:40:8d:26:9f:cd:53:fa:03:d3:9f:0d:d9:11:12:22:c0:
         2e:d6:2d:8f:e3:e3:1e:6f:61:4d:c6:cf:a9:70:9c:ba:6f:30:
         e4:e0:b8:fb:1a:d0:ea:e9:66:bb:b9:e2:d6:67:e3:b9:ec:0a:
         6a:67:ce:68:58:e6:08:33:7c:fb:c7:77:ce:0a:7c:8b:3a:b9:
         95:aa:15:b0:a4:8c:5c:81:9e:40:f0:db:ae:a9:21:38:85:98:
         ca:9e:f2:b4:81:44:7e:32:46:d5:53:f4:e8:0e:41:af:e9:24:
         18:0a:1c:5a:08:7d:48:ad:bd:7a:fd:f3:38:50:e6:98:44:94:
         95:f6:97:f1:f4:f9:9e:a4:ed:5d:f0:65:7c:d8:b3:e4:ab:f7:
         ce:0a:22:95:2f:1a:00:c0:30:2b:42:1c:d6:5f:22:12:5d:4b:
         61:82:11:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----