Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/65f76dabfd70510681e4138abe233784d9c2d60a.roa
File:                     65f76dabfd70510681e4138abe233784d9c2d60a.roa (raw, json)
Hash identifier:          8y18i6Hpay1dUGPTQiT4C7EPRicyfkSwdozcyEob8Bg=
Subject key identifier:   85:80:C9:9E:D7:6D:C0:96:03:5C:79:56:A4:B2:7A:63:24:D5:D8:07
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DA2FD
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/65f76dabfd70510681e4138abe233784d9c2d60a.roa
Signing time:             Sun 17 Mar 2024 18:43:55 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     10620
IP address blocks:        2800:486::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2990845 (0x2da2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=65f76dabfd70510681e4138abe233784d9c2d60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b6:24:39:4c:52:a2:a9:29:d8:3f:46:70:01:
                    00:ae:8d:93:50:67:0f:cd:95:2c:6b:95:e0:2b:dd:
                    98:91:12:c5:36:d2:55:7b:59:0f:25:1d:5d:06:21:
                    7e:f0:d3:57:f2:f5:72:de:c7:40:ba:04:3a:76:04:
                    de:9a:e2:92:71:b4:1c:f8:ff:ff:07:bc:07:b3:11:
                    70:70:33:54:e5:00:1f:75:a5:e2:24:18:ae:36:32:
                    8b:16:94:7b:21:ae:a9:b1:e3:07:cd:03:2d:19:3c:
                    7a:55:47:72:69:8d:55:8b:86:25:67:fe:90:b1:0e:
                    44:65:5b:3f:a2:c6:70:91:d4:48:d9:84:7c:34:bd:
                    25:29:62:9f:fc:a7:a2:eb:58:fc:ca:a0:32:11:17:
                    cc:15:b2:8d:ed:15:80:39:8c:ce:68:28:53:97:87:
                    d5:dc:ad:43:97:20:25:00:7f:63:78:fd:b9:75:4a:
                    0a:e0:c6:da:43:37:c8:ad:45:be:49:e7:89:13:de:
                    b6:be:5a:64:a6:c9:ed:11:1e:ce:f1:5f:0d:e7:92:
                    fe:eb:b9:56:22:1b:a6:c0:da:ec:e2:27:43:1e:c4:
                    02:69:02:45:6f:4e:c2:f8:ef:51:92:9b:80:ac:f6:
                    0d:5c:86:a5:b5:04:74:ba:58:f2:b7:0d:10:7e:c9:
                    5f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:80:C9:9E:D7:6D:C0:96:03:5C:79:56:A4:B2:7A:63:24:D5:D8:07
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/65f76dabfd70510681e4138abe233784d9c2d60a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:486::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:c7:b2:cd:55:36:6c:05:de:51:09:ca:dd:0e:cc:a7:81:6a:
         ce:dd:76:6a:b0:12:f2:06:09:dd:f9:4b:08:f6:51:1a:7f:a7:
         7d:89:2e:5e:25:c6:ad:fa:1d:38:10:b2:50:5a:c4:ae:0c:26:
         f6:35:0c:96:03:5b:1b:a3:ef:5b:93:73:c1:41:13:4d:e1:39:
         99:1b:8d:47:66:a5:91:02:5a:a4:0f:a8:27:2b:d0:60:dd:ff:
         0d:a6:dd:5a:71:3b:8f:e3:6c:b6:2c:ed:e9:13:4a:9b:49:ac:
         69:fa:8a:04:da:33:e7:38:6e:26:c8:df:7e:1f:b4:7f:a7:47:
         b5:1b:db:83:c7:02:46:1c:86:d8:05:d3:7c:8d:7d:23:8b:0c:
         33:42:d7:2b:ef:8c:c0:ca:46:3b:15:4f:9a:b8:bd:2c:19:8a:
         9a:74:54:36:c3:c7:c8:07:3c:f8:ed:6e:53:84:47:67:8e:1f:
         fa:f9:3b:18:8c:70:99:f6:66:27:05:0d:b1:1b:60:d1:3b:39:
         9c:40:22:db:db:c8:96:1b:ef:ef:5b:2e:34:c4:d7:5c:d4:ed:
         43:d4:14:da:f8:1a:7d:d0:50:a5:32:46:6f:49:86:7e:d2:81:
         e5:2d:0a:91:4f:56:59:2d:a5:fb:05:5c:23:ab:0e:0a:16:07:
         e5:55:4e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----