Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e89d141c07edf9903bbdd1db9ab43f0c2a19a87e.roa
File:                     e89d141c07edf9903bbdd1db9ab43f0c2a19a87e.roa (raw, json)
Hash identifier:          UOzKcJJ3O+v5NIhDnSGPHnt7uhRH39Akxh8iipbb5Rg=
Subject key identifier:   CE:D7:85:69:BB:5F:36:A6:9F:BC:08:65:BF:87:D2:36:38:BD:EC:B4
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D4C73
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e89d141c07edf9903bbdd1db9ab43f0c2a19a87e.roa
Signing time:             Sun 17 Mar 2024 18:42:49 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        2800:480:ff50::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2968691 (0x2d4c73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=e89d141c07edf9903bbdd1db9ab43f0c2a19a87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d4:43:c7:d5:28:dd:91:44:5d:e1:70:f7:4c:
                    e4:56:b0:4c:4d:6c:5a:3f:79:46:87:c1:1d:2e:a5:
                    0f:86:50:8d:4d:34:42:8b:d3:ba:c2:3e:da:46:25:
                    6d:0c:10:08:5b:ec:dc:9d:a8:a9:95:bd:3c:a9:ba:
                    b2:17:54:cf:5b:35:10:d0:48:9d:ad:ae:05:7d:5e:
                    a0:0e:07:ba:28:bc:61:15:ab:dd:f2:8c:2b:d4:69:
                    16:4c:e8:fb:7c:01:dc:de:85:5b:dc:91:cf:48:f8:
                    d6:7f:d7:48:c4:9c:6f:ea:cb:f8:ad:f8:2a:f0:64:
                    9c:b2:0f:49:5a:3a:cf:8c:3f:72:34:7d:e6:93:94:
                    46:54:3d:15:de:2b:50:5f:31:a7:c6:b5:50:85:36:
                    e6:e3:90:55:dd:97:8c:70:8b:88:82:20:5f:2a:00:
                    ad:72:ab:9c:87:67:00:b2:d8:c2:75:17:c6:91:05:
                    84:6b:a6:24:52:d9:50:84:e8:f5:e0:cb:e0:1a:5a:
                    9b:8b:69:49:1b:a7:06:34:e8:b0:73:0c:8a:b2:19:
                    3d:10:8f:26:52:27:88:70:23:ed:6b:3e:a9:1f:38:
                    af:18:8e:99:e1:1e:67:61:17:28:3d:91:67:65:e6:
                    75:3e:19:8f:ba:e0:52:4e:3d:fe:2a:78:07:9b:31:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D7:85:69:BB:5F:36:A6:9F:BC:08:65:BF:87:D2:36:38:BD:EC:B4
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/e89d141c07edf9903bbdd1db9ab43f0c2a19a87e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:480:ff50::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:65:f9:48:2a:3a:d6:86:8e:72:d0:01:ef:df:6b:b2:11:c7:
         fb:b8:94:30:05:6f:6b:b8:3c:47:46:15:4b:7c:20:53:1b:4e:
         46:45:68:89:d8:1b:84:27:f0:77:dd:42:06:dc:24:bd:ac:8f:
         03:cf:48:31:de:9b:56:ec:02:98:c9:54:a5:3c:24:a4:83:c1:
         88:76:af:cd:44:47:c6:ac:16:70:13:de:d5:37:b4:d6:ab:06:
         00:7f:c5:01:28:08:ab:9e:9c:1a:d7:cc:b8:46:d6:28:2c:3b:
         29:46:44:88:3b:13:b7:37:d9:16:06:32:1e:ce:20:b8:9e:ad:
         00:9e:93:d9:17:97:50:38:06:87:f8:f6:87:cd:ee:75:62:c0:
         14:cd:40:dd:f7:e1:e9:a3:b9:9e:6a:b0:b1:65:f5:ae:8e:f9:
         c6:4b:b2:8b:b5:d2:82:0d:31:62:d3:73:57:0d:5b:1e:cd:7b:
         98:d9:41:2f:3e:0c:35:b8:e1:9f:5b:9c:5c:4e:ba:cc:9b:bc:
         5d:25:71:ea:b2:21:f5:58:c8:94:f7:51:d9:a1:e7:77:86:fb:
         e2:af:b5:0f:54:a7:0c:4b:f1:68:14:cb:6a:4d:c9:d0:9c:37:
         d9:87:82:9c:68:a5:cd:39:70:b5:ee:03:16:4b:e9:61:3f:01:
         af:f8:dc:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----