Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/457a8c03738f32fa01d86890464f4a148ab0ece4.roa
File:                     457a8c03738f32fa01d86890464f4a148ab0ece4.roa (raw, json)
Hash identifier:          g1UdfMhghkTLtxXOzXoxHKt40rTl3Pst6Rl2d0xDBS8=
Subject key identifier:   0C:5C:BD:F7:1B:DA:E6:EA:A1:D5:AE:96:54:C5:A9:7B:D7:5E:CE:11
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D7573
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/457a8c03738f32fa01d86890464f4a148ab0ece4.roa
Signing time:             Sun 17 Mar 2024 18:43:16 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        2800:484::/32 maxlen: 48
                          2800:485::/32 maxlen: 48
                          2800:480::/32 maxlen: 48
                          2800:482::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2979187 (0x2d7573)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=457a8c03738f32fa01d86890464f4a148ab0ece4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c9:82:04:80:08:ef:2f:c3:0b:45:9f:fd:03:
                    d9:ad:f1:c5:7a:df:52:75:50:9e:12:b3:c6:07:e9:
                    77:70:01:e6:f1:b6:e8:17:26:c7:58:f9:51:fd:b0:
                    d7:5b:3e:0e:5e:b2:1b:32:d8:57:56:c3:48:6d:da:
                    10:47:a8:47:0c:cd:06:7b:1f:97:cd:5e:90:b0:e8:
                    c3:a5:ad:37:b2:2d:c8:38:a4:b7:6c:a7:d7:2e:77:
                    77:45:6b:03:42:35:58:d8:d6:60:1b:fe:01:ae:90:
                    b5:54:60:6d:ce:60:bb:c4:21:2d:04:41:34:54:01:
                    9d:d8:d6:92:ed:75:1e:56:84:af:95:b8:c2:06:83:
                    ac:0b:18:a3:ea:df:18:19:97:83:49:e1:c5:98:93:
                    28:e4:b4:3a:f3:5c:0e:7d:38:53:f7:2f:bf:ff:84:
                    ae:54:16:d0:da:ac:3f:f9:d1:43:f8:53:f2:2e:90:
                    73:b2:73:9a:48:0f:08:09:b1:66:58:89:69:f1:05:
                    b7:64:7e:9c:6a:ec:dd:91:81:cb:b0:5c:49:d9:2f:
                    56:2c:8b:da:a0:0e:39:90:1a:75:8c:60:77:f4:c2:
                    a7:06:74:82:40:81:18:1a:ea:61:d1:49:4f:2c:23:
                    68:b5:05:e5:27:3b:82:04:04:12:c4:6f:50:f1:8b:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5C:BD:F7:1B:DA:E6:EA:A1:D5:AE:96:54:C5:A9:7B:D7:5E:CE:11
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/457a8c03738f32fa01d86890464f4a148ab0ece4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480::/32
                  2800:482::/32
                  2800:484::/31

    Signature Algorithm: sha256WithRSAEncryption
         2c:1b:a0:3f:68:78:90:49:47:a8:39:33:55:60:08:3f:ec:03:
         bc:69:51:e6:dc:0d:01:f1:c4:cb:d5:b0:1e:f8:4d:47:24:e1:
         79:6d:84:cc:97:1b:34:c4:eb:66:8e:75:24:25:b6:c2:dc:8f:
         61:39:67:0c:f6:ca:6d:fe:f9:23:55:aa:82:50:50:b8:b8:00:
         be:53:f1:bc:45:14:02:90:65:97:f2:c3:4d:aa:e0:6d:13:1f:
         88:38:27:31:c0:b3:48:e2:d7:c0:b7:41:50:dc:a7:85:e7:ce:
         2c:61:96:67:e3:25:4d:e9:c4:b5:51:ce:a7:82:da:8e:ed:9f:
         69:8f:ce:35:a0:a5:11:da:5c:7d:2c:2a:bc:87:b3:5f:4b:23:
         60:d0:c7:e7:9e:0e:f8:79:c7:46:86:95:51:8e:b9:60:6d:de:
         d9:67:db:c5:32:43:06:98:0b:1b:50:d7:d6:e5:ec:4a:9c:e9:
         fc:9b:c4:81:3f:27:26:af:d6:c2:cb:af:3b:22:18:60:e1:8c:
         56:3d:f2:61:9d:23:ae:da:4b:bd:65:9c:66:c3:ba:41:50:b5:
         d9:fe:11:37:93:09:c2:3c:05:5b:e8:b7:8b:41:8e:00:d8:5c:
         96:85:8f:7f:8e:73:48:04:93:c2:05:05:b2:a9:94:d8:c7:32:
         96:04:81:81
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDLXVzMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE4
NjZjNDViMjE3ODdlMTJhZjRkZWFmYzA4NTMwM2U3ODZmNTBiMmYwHhcNMjQwMzE3
MTg0MjE5WhcNMjkwMzE3MTg0MjE5WjAzMTEwLwYDVQQDEyg0NTdhOGMwMzczOGYz
MmZhMDFkODY4OTA0NjRmNGExNDhhYjBlY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmsmCBIAI7y/DC0Wf/QPZrfHFet9SdVCeErPGB+l3cAHm8bbo
FybHWPlR/bDXWz4OXrIbMthXVsNIbdoQR6hHDM0Gex+XzV6QsOjDpa03si3IOKS3
bKfXLnd3RWsDQjVY2NZgG/4BrpC1VGBtzmC7xCEtBEE0VAGd2NaS7XUeVoSvlbjC
BoOsCxij6t8YGZeDSeHFmJMo5LQ681wOfThT9y+//4SuVBbQ2qw/+dFD+FPyLpBz
snOaSA8ICbFmWIlp8QW3ZH6cauzdkYHLsFxJ2S9WLIvaoA45kBp1jGB39MKnBnSC
QIEYGuph0UlPLCNotQXlJzuCBAQSxG9Q8YugPwIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFAxcvfcb2ubqodWullTFqXvXXs4RMB8GA1UdIwQYMBaAFMLSc6Z8Bh9jCzEo
oEBMvuztIjGIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTg2NmM0
NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIyZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzQ1N2E4YzAzNzM4ZjMyZmEwMWQ4Njg5MDQ2NGY0YTE0OGFiMGVjZTQu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvMTg2NmM0NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIy
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wGwQCAAIwFQMFACgABIADBQAoAASCAwUBKAAEhDANBgkqhkiG9w0BAQsFAAOC
AQEALBugP2h4kElHqDkzVWAIP+wDvGlR5twNAfHEy9WwHvhNRyTheW2EzJcbNMTr
Zo51JCW2wtyPYTlnDPbKbf75I1WqglBQuLgAvlPxvEUUApBll/LDTargbRMfiDgn
McCzSOLXwLdBUNynhefOLGGWZ+MlTenEtVHOp4Laju2faY/ONaClEdpcfSwqvIez
X0sjYNDH554O+HnHRoaVUY65YG3e2WfbxTJDBpgLG1DX1uXsSpzp/JvEgT8nJq/W
wsuvOyIYYOGMVj3yYZ0jrtpLvWWcZsO6QVC12f4RN5MJwjwFW+i3i0GOANhcloWP
f45zSASTwgUFsqmU2McylgSBgQ==
-----END CERTIFICATE-----