Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/4731081f742b2cf4adfc3b501d783e85f1d828b5.roa
File:                     4731081f742b2cf4adfc3b501d783e85f1d828b5.roa (raw, json)
Hash identifier:          tc09lq+7WsHDEi+mA0GIG5aU6noG3ZqjQZJ91XuXD+8=
Subject key identifier:   E8:71:AE:B1:CA:43:8D:09:2D:AE:32:E7:5A:09:B6:37:79:A2:80:49
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D7360
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/4731081f742b2cf4adfc3b501d783e85f1d828b5.roa
Signing time:             Sun 17 Mar 2024 18:43:13 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     10620
IP address blocks:        2800:482::/32 maxlen: 48
                          2800:485::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2978656 (0x2d7360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=4731081f742b2cf4adfc3b501d783e85f1d828b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d3:64:8c:3c:7b:c2:1e:6a:40:c7:37:0a:38:
                    8b:99:65:fd:73:de:e3:51:4f:6c:c3:2f:b6:d7:dc:
                    d2:80:73:bc:e5:ee:02:60:38:24:2a:cb:01:bf:61:
                    05:a1:f3:2c:6a:2e:10:11:76:b1:d0:fc:a4:d5:dd:
                    26:e1:50:a2:b4:2e:37:6e:80:55:2e:0a:a0:29:6e:
                    8f:09:24:e1:b0:0e:18:23:ca:d3:64:7e:fb:f2:59:
                    c0:f5:98:2f:2a:b2:e1:d0:b8:36:43:8d:c9:92:8a:
                    d9:42:b7:d8:40:93:fd:3c:76:8e:18:d2:32:aa:e1:
                    e8:fa:d0:1f:bb:56:c1:8b:27:4b:1b:93:18:cc:37:
                    fe:b2:d3:50:69:92:d0:cf:f7:2e:f1:86:98:3f:2f:
                    35:4a:e7:4d:3f:cb:da:a9:77:56:84:0e:2b:0f:4c:
                    25:c3:85:d5:d9:5e:88:93:0a:ee:31:71:5f:88:ea:
                    dd:70:e1:6b:cc:09:85:f4:74:cf:b7:05:89:f4:06:
                    10:38:eb:d5:53:56:d6:cf:3b:59:2b:f6:ed:fe:df:
                    80:3f:da:bd:10:e8:bb:e0:ec:9e:43:08:80:55:e0:
                    d5:a1:3f:1d:ea:dd:be:38:3b:17:c5:6a:70:25:56:
                    90:d9:e9:e2:2d:f1:fd:3c:59:67:e3:4c:b1:83:3d:
                    aa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:71:AE:B1:CA:43:8D:09:2D:AE:32:E7:5A:09:B6:37:79:A2:80:49
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/4731081f742b2cf4adfc3b501d783e85f1d828b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:482::/32
                  2800:485::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:70:d5:53:59:23:f7:67:e7:c6:70:35:59:51:79:73:00:21:
         a5:45:75:0e:f0:ab:5e:f3:23:98:7d:b9:af:4f:ff:80:c6:99:
         95:ab:23:f4:9f:a1:51:e3:33:c7:6a:87:7c:a5:49:4f:c3:8f:
         17:9d:d7:19:9d:28:1e:ca:91:fa:6c:e7:85:04:b7:c8:cc:6b:
         68:15:a1:c6:2d:aa:4f:f2:01:05:1e:c5:d8:7f:27:79:e0:19:
         49:e3:09:87:8f:8c:d1:88:e6:46:41:68:01:49:d3:be:3b:7a:
         f0:97:9e:85:75:cd:96:f0:63:06:81:ed:b3:48:8d:11:eb:e3:
         c8:e4:98:a8:80:75:58:c5:94:eb:de:7b:b5:88:8b:cc:b0:98:
         e7:05:c1:57:40:e5:08:d0:31:93:c0:d4:cc:c4:91:fb:0d:62:
         34:0c:1f:d6:d7:2f:af:15:04:87:7b:71:66:ae:20:61:42:b3:
         30:dc:eb:74:a6:cd:db:49:f8:df:96:c4:cc:d7:84:97:de:01:
         a4:1a:b5:d6:4e:98:68:86:c0:c6:ab:39:20:f2:9b:04:f8:c2:
         18:8a:76:a1:06:bb:16:04:41:71:40:a1:52:30:53:2f:49:bc:
         44:69:32:16:96:9f:ea:80:be:41:34:8b:37:ee:d7:97:84:12:
         78:95:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----