Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/23dad409908dbe591b12ac0b6c3b5b03490b1dab.roa
File:                     23dad409908dbe591b12ac0b6c3b5b03490b1dab.roa (raw, json)
Hash identifier:          WGZ3rni/Ow6ub/qC7HB/Tp/yi401+ObAcNEAqDwJ4mY=
Subject key identifier:   19:02:96:E1:17:65:F1:4C:00:3C:EC:95:C1:6A:AF:DA:74:EC:5B:9C
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       29FF34
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/23dad409908dbe591b12ac0b6c3b5b03490b1dab.roa
Signing time:             Thu 30 Nov 2023 07:30:01 +0000
ROA not before:           Thu 30 Nov 2023 07:30:01 +0000
ROA not after:            Sat 29 Nov 2025 07:30:01 +0000
asID:                     14080
IP address blocks:        2800:482::/32 maxlen: 32
                          2800:482:4001::/48 maxlen: 48
                          2800:482:400a::/48 maxlen: 48
                          2800:486::/32 maxlen: 32
                          2800:486::/40 maxlen: 40
                          2800:480:ff52::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2752308 (0x29ff34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Nov 30 07:30:01 2023 GMT
            Not After : Nov 29 07:30:01 2025 GMT
        Subject: CN=23dad409908dbe591b12ac0b6c3b5b03490b1dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:38:d3:38:78:71:d0:7c:15:d8:17:a8:0c:
                    54:ed:2b:94:56:b5:be:66:73:7d:2f:59:c5:f9:d6:
                    7a:22:a2:09:06:0f:94:66:88:d1:e8:7c:52:0e:c8:
                    33:a8:31:61:fe:4d:74:8a:ce:99:63:87:79:5e:75:
                    c4:48:d3:bb:e3:53:af:4d:79:d3:0e:15:29:f3:0a:
                    e2:2a:e0:f3:65:81:59:ea:98:11:ad:ca:5f:b6:c0:
                    8d:d4:c0:4d:54:0e:b2:a8:84:85:62:6c:f0:1f:40:
                    80:af:5e:d4:17:47:68:18:0c:51:a8:bc:69:b6:35:
                    3d:52:23:a6:1a:b4:6c:4e:20:e4:e9:09:84:03:8a:
                    e9:3d:49:45:32:14:09:47:65:92:40:30:f9:1b:06:
                    79:fa:33:64:6a:8d:eb:ad:dd:c2:25:b5:ba:22:b5:
                    40:13:65:66:af:fe:19:cc:27:70:a8:e2:10:70:37:
                    e7:f9:71:bf:16:8b:c0:7c:37:9d:9f:65:af:1a:a4:
                    15:3e:9e:07:02:87:87:16:25:ba:c1:5b:0a:e1:8e:
                    7c:7d:43:f6:74:f2:f3:c1:1a:0a:87:95:5c:d0:59:
                    56:13:87:4d:e6:07:5d:ab:7f:94:fe:81:d9:c1:c2:
                    60:58:a6:21:21:42:bf:ab:98:a6:8a:60:2a:90:40:
                    03:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:02:96:E1:17:65:F1:4C:00:3C:EC:95:C1:6A:AF:DA:74:EC:5B:9C
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/23dad409908dbe591b12ac0b6c3b5b03490b1dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480:ff52::/48
                  2800:482::/32
                  2800:486::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:65:7c:52:ce:f2:fc:2c:4f:a3:3b:74:a7:e9:b8:1c:46:6d:
         4d:88:52:54:0e:69:17:6b:40:ad:ea:2c:ee:01:7f:cd:77:56:
         95:92:48:ea:95:f8:99:9b:5f:e3:8d:85:63:33:af:f2:7f:c5:
         57:98:fc:45:27:eb:64:e3:73:a9:e9:da:03:03:e5:78:17:28:
         92:7c:d3:4b:81:df:9d:27:09:84:32:fa:dc:dc:98:47:26:43:
         cb:ec:d2:7d:04:10:03:12:59:d9:ed:30:f3:3c:46:13:da:02:
         fa:51:37:e5:61:31:6e:0a:56:81:84:16:73:0a:03:66:ea:83:
         d4:5f:f9:2d:43:fc:10:22:5b:b6:f2:c3:07:ce:d3:5e:ad:c4:
         96:18:9b:ac:da:38:60:41:c6:d9:ac:82:f3:b9:f9:54:c2:37:
         40:b7:4d:e7:66:c7:21:ea:79:bb:17:f5:1c:4b:3d:f2:77:d7:
         29:70:f4:cf:b1:eb:c8:c7:d4:a9:8a:9d:39:14:a9:32:37:fe:
         1f:af:92:b4:ff:fe:e6:d2:b2:d6:a4:10:6b:ea:b6:15:9d:94:
         98:5f:63:da:38:4a:41:15:50:6c:01:af:d2:ff:94:e7:f4:38:
         76:c2:1d:87:a6:ef:ed:8c:a5:f3:ef:76:d9:3c:6a:88:8a:bb:
         3f:76:92:37
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIDKf80MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjMxMTMw
MDczMDAxWhcNMjUxMTI5MDczMDAxWjAzMTEwLwYDVQQDEygyM2RhZDQwOTkwOGRi
ZTU5MWIxMmFjMGI2YzNiNWIwMzQ5MGIxZGFiMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsSQ40zh4cdB8FdgXqAxU7SuUVrW+ZnN9L1nF+dZ6IqIJBg+U
ZojR6HxSDsgzqDFh/k10is6ZY4d5XnXESNO741OvTXnTDhUp8wriKuDzZYFZ6pgR
rcpftsCN1MBNVA6yqISFYmzwH0CAr17UF0doGAxRqLxptjU9UiOmGrRsTiDk6QmE
A4rpPUlFMhQJR2WSQDD5GwZ5+jNkao3rrd3CJbW6IrVAE2Vmr/4ZzCdwqOIQcDfn
+XG/FovAfDedn2WvGqQVPp4HAoeHFiW6wVsK4Y58fUP2dPLzwRoKh5Vc0FlWE4dN
5gddq3+U/oHZwcJgWKYhIUK/q5imimAqkEADBwIDAQABo4ICbDCCAmgwHQYDVR0O
BBYEFBkCluEXZfFMADzslcFqr9p07FucMB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzIzZGFkNDA5OTA4ZGJlNTkxYjEyYWMwYjZjM2I1YjAzNDkwYjFkYWIu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQh
MB8wHQQCAAIwFwMHACgABID/UgMFACgABIIDBQAoAASGMA0GCSqGSIb3DQEBCwUA
A4IBAQAZZXxSzvL8LE+jO3Sn6bgcRm1NiFJUDmkXa0Ct6izuAX/Nd1aVkkjqlfiZ
m1/jjYVjM6/yf8VXmPxFJ+tk43Op6doDA+V4FyiSfNNLgd+dJwmEMvrc3JhHJkPL
7NJ9BBADElnZ7TDzPEYT2gL6UTflYTFuClaBhBZzCgNm6oPUX/ktQ/wQIlu28sMH
ztNercSWGJus2jhgQcbZrILzuflUwjdAt03nZsch6nm7F/UcSz3yd9cpcPTPsevI
x9Spip05FKkyN/4fr5K0//7m0rLWpBBr6rYVnZSYX2PaOEpBFVBsAa/S/5Tn9Dh2
wh2Hpu/tjKXz73bZPGqIirs/dpI3
-----END CERTIFICATE-----