Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/705e0101b9048399eeaee21841ffd37f1fb682fa.roa
File:                     705e0101b9048399eeaee21841ffd37f1fb682fa.roa (raw, json)
Hash identifier:          p9Bd3mvL29K7IkmoNZqLA84devcP/jKDXzzolNTWfmI=
Subject key identifier:   D0:E1:57:25:DE:69:69:DE:59:57:86:E2:34:AD:DB:2A:3E:F1:EE:16
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D1F86
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/705e0101b9048399eeaee21841ffd37f1fb682fa.roa
Signing time:             Sun 17 Mar 2024 18:42:30 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     10620
IP address blocks:        2800:485:fe00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2957190 (0x2d1f86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=705e0101b9048399eeaee21841ffd37f1fb682fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:33:26:e2:fc:d9:af:94:1a:13:29:f9:af:
                    53:41:f3:20:e2:ed:67:cd:dd:47:92:47:1e:c9:88:
                    01:b0:0f:83:1d:66:9f:40:99:d9:ba:92:f2:ec:ed:
                    00:7d:69:0a:55:39:b3:ae:17:d1:71:36:a5:fe:3b:
                    20:59:6a:0c:b2:16:69:3f:6c:fa:b0:ca:50:e1:bc:
                    d7:27:75:7f:34:16:66:98:b6:04:a2:2a:d8:12:3c:
                    75:0f:69:9d:23:a1:c9:ec:ef:e2:d2:09:4f:94:65:
                    de:1a:d6:0e:c0:d1:e4:8e:be:c0:c4:24:41:2e:f1:
                    d9:13:78:b7:c8:7f:f1:73:e8:23:4d:d4:6c:68:47:
                    05:be:39:84:2b:3c:ee:7f:d8:b0:5c:1e:22:d0:4f:
                    72:73:3a:31:ee:fa:4f:b7:f7:ab:53:6d:4f:1c:20:
                    cd:1f:37:23:44:2c:8d:ff:d9:27:5d:c4:09:49:6d:
                    a1:47:43:24:84:e5:e1:31:8e:2d:b9:a5:04:5d:20:
                    d4:0b:86:cf:06:44:59:b8:1c:98:5c:61:a9:f6:14:
                    58:20:78:03:c3:5f:85:3f:53:1e:db:00:a8:45:58:
                    54:38:66:d0:de:c9:51:e9:30:33:6d:2f:04:d3:73:
                    4d:c1:ee:24:1d:14:2d:7a:3d:38:d6:fa:2d:d8:d2:
                    9c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E1:57:25:DE:69:69:DE:59:57:86:E2:34:AD:DB:2A:3E:F1:EE:16
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/705e0101b9048399eeaee21841ffd37f1fb682fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:485:fe00::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:14:53:0c:fa:24:06:ed:10:d4:05:11:79:d0:59:b9:1b:e1:
         3e:7d:b8:1d:49:ae:05:3f:99:f3:3a:e5:e2:5f:90:62:cc:63:
         f4:e0:15:4d:e7:ae:ad:40:69:4f:c0:86:c7:ec:b5:cc:0f:89:
         6f:2e:b7:78:2c:0e:a3:31:8a:58:e4:8a:33:6b:ae:7b:ea:f4:
         e0:33:2f:8a:f3:f5:88:7a:c8:93:56:9a:c0:1d:95:ce:49:92:
         2d:74:92:98:a9:f6:2f:2a:0c:38:44:dd:68:e3:c2:52:f3:60:
         af:25:f7:3e:07:bd:85:ec:bb:f5:03:71:8b:0f:cf:5e:eb:3a:
         70:ce:d3:5e:87:ff:26:4b:8d:fc:6d:94:98:44:01:2b:f4:f5:
         7d:a4:8d:77:dd:9e:6c:2a:6f:8f:5c:e3:19:78:e2:ae:b4:4f:
         5a:62:68:95:eb:dc:b7:1e:9f:fa:f5:d7:b4:3a:bc:8e:36:82:
         64:61:f5:74:3d:f1:b4:70:a1:7a:55:9e:5f:a0:a8:1a:1d:5b:
         8f:b7:6b:f0:e4:cf:8d:0f:f7:2d:f9:13:65:cd:f5:e3:31:7e:
         92:d4:4a:e4:3c:92:56:a4:3a:6d:1a:65:32:86:f4:93:7f:c8:
         5c:2f:00:06:09:29:41:80:0c:15:00:7d:20:ff:4a:74:2f:f3:
         e4:9d:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----