Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/4a6363f92d98331eda5c3dac3038192c3abf0cee.roa
File:                     4a6363f92d98331eda5c3dac3038192c3abf0cee.roa (raw, json)
Hash identifier:          8BRRl0VmG4r+VuZN/KiszSaCusIf94Nh55U6Rf6SU3o=
Subject key identifier:   8A:2F:C6:00:24:88:EA:A2:A3:CE:8B:DF:6D:18:C4:61:92:C3:40:80
Certificate issuer:       /CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
Certificate serial:       2A92FF
Authority key identifier: A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/4a6363f92d98331eda5c3dac3038192c3abf0cee.roa
Signing time:             Thu 14 Dec 2023 07:30:06 +0000
ROA not before:           Thu 14 Dec 2023 07:30:06 +0000
ROA not after:            Sat 13 Dec 2025 07:30:06 +0000
asID:                     26611
IP address blocks:        2800:480:ff50::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2790143 (0x2a92ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1f68ecd3896b3288f83c29a2c3da44c821c7684
        Validity
            Not Before: Dec 14 07:30:06 2023 GMT
            Not After : Dec 13 07:30:06 2025 GMT
        Subject: CN=4a6363f92d98331eda5c3dac3038192c3abf0cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:95:77:7b:24:a9:43:54:bb:cf:05:b3:1f:
                    f9:4d:5d:6d:08:f6:a2:c3:1c:e4:a9:02:4b:55:f9:
                    eb:47:59:1f:6d:53:ee:44:3f:88:ba:d4:6f:9f:f1:
                    45:25:07:81:12:b8:a7:a6:43:66:82:d1:ad:c6:a9:
                    7f:6b:2c:88:cb:e1:80:b0:d3:00:38:53:89:4a:24:
                    8b:ba:b2:93:14:fa:d7:e8:da:1f:09:26:00:1c:04:
                    b4:11:a0:19:4c:23:f9:17:c1:8f:56:b5:27:9b:16:
                    e9:85:eb:93:26:81:3c:b1:74:77:f0:60:6f:89:f7:
                    a2:50:76:a6:4a:5d:83:59:35:c9:b1:30:70:aa:51:
                    65:de:52:30:90:da:83:5e:a3:ce:cc:4f:f8:35:0d:
                    c3:69:b7:2d:8b:a4:e6:0d:e0:f7:22:46:f5:93:8d:
                    a8:93:85:76:60:6a:ac:f9:13:14:cc:c5:38:f4:52:
                    3e:c6:8f:fc:02:d9:39:77:0b:7f:e6:1a:5a:ec:e6:
                    e9:9c:f5:8b:63:37:bd:ea:c8:df:9e:3e:e2:fe:c8:
                    f4:58:a5:5c:eb:98:a0:a8:4e:83:ff:a4:4c:8d:1f:
                    4c:23:5b:cc:63:b3:90:ca:eb:ac:aa:29:3c:5b:62:
                    c9:59:ac:0a:d6:ad:29:2d:08:ec:8e:6c:f5:41:d3:
                    ff:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2F:C6:00:24:88:EA:A2:A3:CE:8B:DF:6D:18:C4:61:92:C3:40:80
            X509v3 Authority Key Identifier:
                keyid:A8:73:83:2C:03:09:14:B8:FD:00:F5:3F:AF:46:E4:95:D9:71:1B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1f68ecd3896b3288f83c29a2c3da44c821c7684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/4a6363f92d98331eda5c3dac3038192c3abf0cee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c1f68ecd3896b3288f83c29a2c3da44c821c7684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480:ff50::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:91:d5:77:c6:9f:da:fa:94:f7:a9:af:79:ab:0b:6a:46:59:
         9d:f5:02:0f:07:eb:c7:7c:8d:a5:f6:fa:58:08:3c:82:0a:1f:
         cd:7a:fa:44:fe:ba:13:9f:6c:94:c6:ee:c8:1f:b6:e8:e0:ad:
         90:97:00:c5:c2:ce:dd:29:d2:ec:bc:03:6b:3e:9c:7c:59:c4:
         77:91:2f:a4:ca:34:34:67:ff:28:59:21:4c:cd:25:80:18:4a:
         25:6b:a0:da:c2:19:ad:a9:75:55:91:a5:bc:5b:6f:55:28:ba:
         0c:e2:b9:2f:cc:9f:66:4d:c6:05:7b:f8:80:8f:a8:14:10:51:
         8d:64:eb:d8:d6:33:f7:22:97:7f:a0:eb:55:cd:bf:8c:07:d4:
         06:3f:4d:5d:b2:9c:f2:13:75:12:21:37:29:48:27:7d:b2:48:
         94:9d:86:ad:ad:68:ad:3d:b8:86:bc:21:65:97:f5:a9:72:a7:
         97:89:26:46:bd:e1:d6:44:1c:66:07:13:b3:01:00:60:b6:b9:
         29:78:0f:13:01:0c:a6:e0:f5:92:3d:04:4d:3d:d7:dc:69:40:
         e0:67:8c:da:d0:25:31:e6:2a:fb:78:86:d0:c2:23:96:cf:32:
         e5:41:b4:0c:17:f8:a1:16:0c:ef:f6:ec:76:20:cf:c4:b8:cd:
         82:9d:a2:0b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIDKpL/MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGMx
ZjY4ZWNkMzg5NmIzMjg4ZjgzYzI5YTJjM2RhNDRjODIxYzc2ODQwHhcNMjMxMjE0
MDczMDA2WhcNMjUxMjEzMDczMDA2WjAzMTEwLwYDVQQDEyg0YTYzNjNmOTJkOTgz
MzFlZGE1YzNkYWMzMDM4MTkyYzNhYmYwY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAp4KVd3skqUNUu88Fsx/5TV1tCPaiwxzkqQJLVfnrR1kfbVPu
RD+IutRvn/FFJQeBErinpkNmgtGtxql/ayyIy+GAsNMAOFOJSiSLurKTFPrX6Nof
CSYAHAS0EaAZTCP5F8GPVrUnmxbpheuTJoE8sXR38GBvifeiUHamSl2DWTXJsTBw
qlFl3lIwkNqDXqPOzE/4NQ3Dabcti6TmDeD3Ikb1k42ok4V2YGqs+RMUzMU49FI+
xo/8Atk5dwt/5hpa7ObpnPWLYze96sjfnj7i/sj0WKVc65igqE6D/6RMjR9MI1vM
Y7OQyuusqik8W2LJWawK1q0pLQjsjmz1QdP/6QIDAQABo4ICXjCCAlowHQYDVR0O
BBYEFIovxgAkiOqio86L320YxGGSw0CAMB8GA1UdIwQYMBaAFKhzgywDCRS4/QD1
P69G5JXZcRs8MA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvYzFmNjhl
Y2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4NC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhLzRhNjM2M2Y5MmQ5ODMzMWVkYTVjM2RhYzMwMzgxOTJjM2FiZjBjZWUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvYzFmNjhlY2QzODk2YjMyODhmODNjMjlhMmMzZGE0NGM4MjFjNzY4
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT
MBEwDwQCAAIwCQMHACgABID/UDANBgkqhkiG9w0BAQsFAAOCAQEAcZHVd8af2vqU
96mveasLakZZnfUCDwfrx3yNpfb6WAg8ggofzXr6RP66E59slMbuyB+26OCtkJcA
xcLO3SnS7LwDaz6cfFnEd5EvpMo0NGf/KFkhTM0lgBhKJWug2sIZral1VZGlvFtv
VSi6DOK5L8yfZk3GBXv4gI+oFBBRjWTr2NYz9yKXf6DrVc2/jAfUBj9NXbKc8hN1
EiE3KUgnfbJIlJ2Gra1orT24hrwhZZf1qXKnl4kmRr3h1kQcZgcTswEAYLa5KXgP
EwEMpuD1kj0ETT3X3GlA4GeM2tAlMeYq+3iG0MIjls8y5UG0DBf4oRYM7/bsdiDP
xLjNgp2iCw==
-----END CERTIFICATE-----