Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bdd87efe847a2124211be4e137acb5772593ddb8.roa
File:                     bdd87efe847a2124211be4e137acb5772593ddb8.roa (raw, json)
Hash identifier:          iA9QdLJ1037D65lAj0FpeMYP2VzLfuSZcjIVGg0UY9w=
Subject key identifier:   C8:B8:89:24:DE:B2:D3:E4:FC:D8:C2:9F:56:F7:1A:8D:08:CC:A0:BD
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D4537
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bdd87efe847a2124211be4e137acb5772593ddb8.roa
Signing time:             Sun 17 Mar 2024 18:42:45 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        2800:481::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2966839 (0x2d4537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=bdd87efe847a2124211be4e137acb5772593ddb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6f:2c:c3:b7:ab:6e:05:c9:81:d9:e8:7a:fd:
                    37:c6:d2:d3:fd:68:a2:c1:6a:4a:62:f5:c3:8d:11:
                    4a:b2:92:49:9b:d5:34:b2:79:44:14:2f:43:c2:27:
                    c6:d3:5b:f6:1b:22:b4:d9:9d:15:63:07:84:2e:97:
                    9a:0f:90:f0:66:30:d0:03:12:10:87:a9:3f:fa:8c:
                    7d:ba:97:e8:e5:93:6f:d8:0d:d2:30:aa:6b:7e:99:
                    a8:11:39:b2:df:f2:65:09:d8:e7:58:f4:f1:36:de:
                    e1:48:89:d9:12:44:18:61:cc:8a:8f:c2:1f:8b:af:
                    cf:91:54:80:c5:78:25:af:af:b5:af:d5:b8:5b:7a:
                    5b:54:50:82:7d:34:23:d1:5d:b6:b4:96:c5:1f:80:
                    02:ef:15:79:0e:37:92:42:da:59:a7:e7:85:75:a6:
                    e7:c5:af:dc:3b:71:f0:82:69:9a:f3:c5:77:55:99:
                    58:81:dc:a2:2d:4f:68:a9:bd:33:f8:ef:93:2c:f2:
                    c4:4b:61:8f:ed:f2:e2:6f:39:bb:43:a9:20:9d:ea:
                    4d:9c:84:f7:a7:d9:93:48:c0:e7:a8:08:da:d3:d1:
                    08:e3:ca:94:f9:90:5a:99:7b:76:7e:2e:3a:fc:1f:
                    0d:9c:bf:7d:19:1a:88:9d:58:bc:49:d1:55:29:c7:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:B8:89:24:DE:B2:D3:E4:FC:D8:C2:9F:56:F7:1A:8D:08:CC:A0:BD
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/bdd87efe847a2124211be4e137acb5772593ddb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:481::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:ff:9a:9b:e0:2a:e6:2f:67:2a:28:a6:32:a0:c1:fa:28:b7:
         ec:bb:96:d5:50:8a:a4:0e:33:a3:cd:0c:e6:f3:45:a7:47:42:
         05:4f:cb:33:28:95:07:d1:97:fc:8d:b0:eb:54:b1:ae:18:88:
         e2:70:80:c3:b3:39:76:5d:e4:c3:0b:c9:c6:e3:0f:0d:58:20:
         49:b9:f8:dc:c4:6f:6c:3e:13:04:b6:34:7b:01:d5:fb:f5:05:
         bb:d1:81:55:80:f7:3d:50:e3:3f:19:85:3c:ba:65:56:ca:7a:
         1f:a5:be:a2:f2:bd:23:ef:ad:e2:21:cb:e2:11:5f:bb:32:9e:
         5b:69:45:52:3e:eb:06:48:8d:30:b5:32:19:81:ff:5c:bb:21:
         13:a3:b3:5a:18:f3:d7:63:fb:7b:51:b7:62:e3:ef:7b:f1:f9:
         db:2b:01:ab:87:75:4a:3d:cb:9c:d5:37:81:5a:d7:0e:9e:2c:
         0f:34:f4:07:d3:99:db:5a:b8:a2:57:44:1a:f0:e2:5a:ed:26:
         c1:d3:6c:c2:a7:7b:00:97:31:44:fe:73:1f:c1:d9:9e:06:76:
         48:fa:27:9c:df:53:e3:19:e1:f6:b7:90:ed:74:b2:41:f5:19:
         aa:ba:3f:98:96:ec:30:4d:10:1c:e9:84:41:a5:7a:26:0e:c1:
         7a:8d:83:89
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDLUU3MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDE4
NjZjNDViMjE3ODdlMTJhZjRkZWFmYzA4NTMwM2U3ODZmNTBiMmYwHhcNMjQwMzE3
MTg0MjE5WhcNMjkwMzE3MTg0MjE5WjAzMTEwLwYDVQQDEyhiZGQ4N2VmZTg0N2Ey
MTI0MjExYmU0ZTEzN2FjYjU3NzI1OTNkZGI4MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAim8sw7erbgXJgdnoev03xtLT/WiiwWpKYvXDjRFKspJJm9U0
snlEFC9DwifG01v2GyK02Z0VYweELpeaD5DwZjDQAxIQh6k/+ox9upfo5ZNv2A3S
MKprfpmoETmy3/JlCdjnWPTxNt7hSInZEkQYYcyKj8Ifi6/PkVSAxXglr6+1r9W4
W3pbVFCCfTQj0V22tJbFH4AC7xV5DjeSQtpZp+eFdabnxa/cO3Hwgmma88V3VZlY
gdyiLU9oqb0z+O+TLPLES2GP7fLibzm7Q6kgnepNnIT3p9mTSMDnqAja09EI48qU
+ZBamXt2fi46/B8NnL99GRqInVi8SdFVKcf0NQIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFMi4iSTestPk/NjCn1b3Go0IzKC9MB8GA1UdIwQYMBaAFMLSc6Z8Bh9jCzEo
oEBMvuztIjGIMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvMTg2NmM0
NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIyZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00MDRiLWEyMjktZjM4NjVk
NTdhNDZhL2JkZDg3ZWZlODQ3YTIxMjQyMTFiZTRlMTM3YWNiNTc3MjU5M2RkYjgu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJhLTQwNGItYTIyOS1mMzg2
NWQ1N2E0NmEvMTg2NmM0NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4NmY1MGIy
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgABIEwDQYJKoZIhvcNAQELBQADggEBAGz/mpvgKuYvZyoo
pjKgwfoot+y7ltVQiqQOM6PNDObzRadHQgVPyzMolQfRl/yNsOtUsa4YiOJwgMOz
OXZd5MMLycbjDw1YIEm5+NzEb2w+EwS2NHsB1fv1BbvRgVWA9z1Q4z8ZhTy6ZVbK
eh+lvqLyvSPvreIhy+IRX7synltpRVI+6wZIjTC1MhmB/1y7IROjs1oY89dj+3tR
t2Lj73vx+dsrAauHdUo9y5zVN4Fa1w6eLA809AfTmdtauKJXRBrw4lrtJsHTbMKn
ewCXMUT+cx/B2Z4Gdkj6J5zfU+MZ4fa3kO10skH1Gaq6P5iW7DBNEBzphEGleiYO
wXqNg4k=
-----END CERTIFICATE-----