Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ddcfdb69783acb0266b2caebcb07fb744a3daa03.roa
File:                     ddcfdb69783acb0266b2caebcb07fb744a3daa03.roa (raw, json)
Hash identifier:          QLol2BRstSF9t9q9+zJ7qu0vkTEWaTOgD2jJi4EI8sw=
Subject key identifier:   15:8C:D4:4C:56:7A:5E:FB:66:6B:71:D9:3A:6A:F2:EA:B1:F4:32:F0
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D476A
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ddcfdb69783acb0266b2caebcb07fb744a3daa03.roa
Signing time:             Sun 17 Mar 2024 18:42:47 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     10620
IP address blocks:        2800:485::/32 maxlen: 48
                          2800:484::/32 maxlen: 48
                          2800:480:ff52::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2967402 (0x2d476a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=ddcfdb69783acb0266b2caebcb07fb744a3daa03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fd:a0:54:53:5f:9c:40:25:da:85:e5:e7:2d:
                    7b:7c:da:25:08:6d:5a:b7:14:bb:fa:87:8b:df:92:
                    f4:3f:da:f8:56:a2:ce:06:1e:b0:34:85:7c:42:76:
                    f3:87:cd:e9:e1:38:fa:54:bd:dc:64:b9:7e:26:bc:
                    52:91:d4:22:4f:99:01:ec:ed:c9:bf:14:4e:6d:ce:
                    32:ae:a0:1c:87:e3:f5:86:ea:12:dd:b0:d4:76:f9:
                    e4:18:34:ac:b5:b4:4d:bb:62:bd:84:bd:f0:e4:ac:
                    03:b6:9c:d5:6c:01:5e:5d:64:11:8e:ee:21:d5:46:
                    b6:5d:47:61:2f:ff:77:ac:34:90:be:be:6b:ba:f7:
                    79:7e:53:b4:5b:05:59:8a:b2:67:70:1a:30:47:e4:
                    7a:56:d6:26:54:58:e2:57:5c:88:ae:27:79:38:58:
                    e9:ab:ae:a5:5c:48:da:8f:c8:97:ee:40:1e:9a:3c:
                    97:9c:2a:99:f5:6f:a3:02:c3:4a:63:7e:1f:c6:d5:
                    f8:d0:36:df:9a:39:0a:33:38:41:5d:a0:cf:54:5d:
                    dc:c9:90:aa:d3:66:c2:f2:7b:2e:91:82:fb:d9:21:
                    83:bf:db:08:30:e4:65:cd:f1:59:64:60:fb:db:e8:
                    f4:a0:69:08:fd:46:4f:5f:14:ee:41:56:52:ba:92:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8C:D4:4C:56:7A:5E:FB:66:6B:71:D9:3A:6A:F2:EA:B1:F4:32:F0
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/ddcfdb69783acb0266b2caebcb07fb744a3daa03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480:ff52::/48
                  2800:484::/31

    Signature Algorithm: sha256WithRSAEncryption
         17:e0:b5:bd:63:e2:87:c4:58:51:bc:b8:c3:ba:4d:0e:7b:b0:
         41:e0:7a:b1:16:ab:c4:b2:a8:b4:be:76:48:bd:98:08:9e:46:
         49:83:28:bf:9a:18:2f:7c:cb:f3:83:e5:7e:72:4b:cd:b0:25:
         70:27:79:ce:37:9c:86:9a:5a:36:15:c8:ac:c8:c6:c7:18:f5:
         db:4b:d8:25:ec:3b:31:b5:81:13:fa:98:32:de:9a:e4:af:b4:
         81:0f:9f:e6:5f:2d:82:9d:aa:8c:9b:66:df:8e:e0:ea:8f:ff:
         7e:ff:68:f7:fb:59:48:2e:5f:4c:e0:e8:41:03:c8:05:e7:92:
         ef:16:7c:61:c5:e5:94:cd:b9:5c:04:3f:f0:03:15:f5:6d:99:
         0a:83:d4:dc:27:84:8d:82:f0:0d:38:8a:bb:f4:e9:bf:74:d5:
         58:ea:93:e4:b1:55:39:ea:20:79:d9:1a:0d:84:d1:56:86:72:
         bb:ba:63:c3:ab:0b:b3:b9:3f:ac:30:4d:40:bf:f4:3d:66:e6:
         8c:6f:9b:5a:ad:05:40:06:86:9b:26:f0:c2:dd:50:e9:36:48:
         95:83:b8:0e:cd:8e:2d:0c:cf:e3:3d:fd:35:79:c0:ea:5e:c5:
         e6:8b:d7:4c:0f:77:1b:5f:bd:f7:2c:e9:2a:64:27:b0:2e:2a:
         0f:70:9b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----