Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/57a85bc872a725d1eacb35164154e04d6fc552e8.roa
File:                     57a85bc872a725d1eacb35164154e04d6fc552e8.roa (raw, json)
Hash identifier:          5Y/Iye2mGN8f+sbv6KAQ0H/ljzXA1vccnnPLh2Ywg/Q=
Subject key identifier:   FB:2F:53:91:E1:3F:1C:04:09:E8:06:60:E4:46:ED:42:0C:4E:39:B7
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D1C63
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/57a85bc872a725d1eacb35164154e04d6fc552e8.roa
Signing time:             Sun 17 Mar 2024 18:42:29 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        2800:485::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2956387 (0x2d1c63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=57a85bc872a725d1eacb35164154e04d6fc552e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3f:9c:00:a1:9c:f8:3f:f7:7b:49:08:76:63:
                    e5:9d:0b:3d:ff:dd:8b:e7:8d:4e:b1:ad:79:22:71:
                    24:39:9a:64:2e:58:e9:d8:9e:fd:41:8f:10:06:a9:
                    81:77:0e:e2:bd:ed:7c:f6:f5:3d:46:41:0e:f9:2f:
                    0b:29:05:d4:ec:95:20:a7:a3:d3:21:58:b9:67:a9:
                    cb:37:09:73:6a:df:eb:d6:0a:d9:1f:6b:4f:97:40:
                    12:8e:61:8d:f3:69:1a:2f:4f:74:3d:84:6d:0c:83:
                    fd:87:4c:f6:25:8f:e3:51:93:34:8a:f4:19:b0:65:
                    89:c9:85:53:43:ba:10:20:e7:a1:76:ad:fd:ba:88:
                    81:45:ca:2e:03:33:89:34:00:83:83:8e:56:cd:27:
                    c3:a1:b4:1c:75:1d:66:26:58:da:17:3e:ef:56:1f:
                    ae:c6:9f:f0:62:0d:e1:26:ce:30:dd:18:22:54:f0:
                    4d:e6:a5:25:05:ad:05:1e:5c:b0:4e:ce:4d:70:45:
                    64:d5:f8:12:fb:a2:fc:f6:ee:e6:fb:85:a8:bf:6f:
                    0d:59:e1:31:4d:31:e9:2d:e8:83:76:69:69:73:0c:
                    dc:ed:34:98:e1:6f:f3:8c:d8:7e:3f:2f:42:60:8c:
                    3d:6c:2f:29:92:4c:b0:a8:ff:b7:d1:4f:e6:5f:87:
                    01:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2F:53:91:E1:3F:1C:04:09:E8:06:60:E4:46:ED:42:0C:4E:39:B7
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/57a85bc872a725d1eacb35164154e04d6fc552e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:485::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:1b:16:ae:75:c2:6c:bf:50:b6:61:34:cc:1a:fa:44:8b:3e:
         53:7e:6a:c8:be:99:0e:2e:da:22:7c:8c:3a:ac:64:17:59:da:
         02:d0:c1:b4:82:89:da:13:31:2c:66:3c:2a:6c:d1:07:ec:46:
         c4:cf:bf:ef:36:5c:7b:1d:e5:d5:f2:0a:56:05:d6:80:91:76:
         f0:87:4c:6b:a6:3f:74:8e:1a:d0:3f:9d:79:93:f7:89:ad:78:
         46:56:1d:02:70:ad:9d:d4:be:9f:43:9b:c5:2f:55:9a:7e:68:
         5c:6b:56:d6:57:66:0e:de:f9:5e:10:87:a3:52:18:84:12:50:
         42:9e:e3:1e:4e:1c:1d:86:72:9d:55:37:be:58:0e:f4:b8:ba:
         43:3d:7c:48:62:d7:a0:9b:0e:f4:88:09:88:90:5b:f5:27:d8:
         50:f7:1e:de:11:42:b7:7b:f6:51:70:04:0e:78:3d:0d:b1:a6:
         5a:9b:f0:49:75:81:1e:7b:4f:c5:a8:6a:c3:d4:dc:ba:81:96:
         b7:e3:b2:c5:d1:6a:ba:b2:5b:35:ef:dd:96:5d:41:ea:40:0d:
         c3:de:9a:7a:11:d0:32:ae:f4:6a:d2:6e:9d:82:d0:24:1e:62:
         37:5c:88:bd:70:f3:23:3e:fb:24:6c:57:2c:cd:23:e4:e1:e1:
         b2:f4:4b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----