Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/fc83281d8dc5ebbd01c32a10e1d4d536175c5025.roa
File:                     fc83281d8dc5ebbd01c32a10e1d4d536175c5025.roa (raw, json)
Hash identifier:          WDyssKskDpWOkur5EJueV+bss/Vc1u4JQuTGOZnH2eg=
Subject key identifier:   3A:32:20:E4:6F:2A:F6:3A:9E:94:57:11:40:E5:CA:72:7C:DD:B2:65
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2DAA68
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/fc83281d8dc5ebbd01c32a10e1d4d536175c5025.roa
Signing time:             Sun 17 Mar 2024 18:43:59 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        2800:486::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2992744 (0x2daa68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=fc83281d8dc5ebbd01c32a10e1d4d536175c5025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1e:3b:4d:f9:19:b6:a1:9d:3b:ab:f6:26:11:
                    d9:35:fc:cf:6a:63:92:a1:b3:62:66:fe:af:af:0e:
                    7b:a3:85:1b:9f:84:6d:ed:54:44:4e:c9:78:8f:76:
                    af:3e:2a:91:ce:c7:8d:a5:9f:93:51:55:58:0c:e1:
                    ba:8d:c0:2c:75:f8:25:91:8b:4c:d8:a0:65:af:7e:
                    e5:e3:c8:13:54:b6:9d:dd:b7:70:f1:57:12:d0:d9:
                    29:1d:07:ee:d9:41:07:98:83:02:70:61:c4:1e:ba:
                    e6:21:a0:ea:16:cf:c2:2f:dc:5c:93:a7:a6:af:27:
                    13:03:87:d4:2c:dd:32:8d:a8:0d:fd:cf:36:86:b7:
                    59:4e:a9:da:6b:24:26:20:53:4c:f9:e4:b9:46:b5:
                    91:25:c8:43:af:0a:47:55:02:90:1d:4c:39:16:a7:
                    a4:8e:49:53:70:b5:53:14:4e:6d:31:37:8d:a4:6a:
                    46:45:50:6a:6c:a5:8f:54:5c:c5:5c:6d:cf:ae:fc:
                    19:bf:2b:d3:a6:6b:23:60:11:06:fc:33:ea:9a:80:
                    91:99:2e:1c:33:f9:55:9f:2a:ac:b6:31:fe:c7:5e:
                    61:ad:61:7d:30:5d:c4:ec:97:b5:40:4f:ef:86:e5:
                    bb:82:b5:59:03:d7:17:b1:7e:2e:55:78:47:f7:f3:
                    3b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:32:20:E4:6F:2A:F6:3A:9E:94:57:11:40:E5:CA:72:7C:DD:B2:65
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/fc83281d8dc5ebbd01c32a10e1d4d536175c5025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:486::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:11:61:6d:ee:4f:a4:e3:ac:3e:3c:ca:9e:40:c0:28:33:72:
         dc:4e:54:c6:7e:06:eb:e7:0b:41:53:9c:fc:91:d5:76:c4:42:
         f6:a7:87:4d:47:c2:dd:93:7f:60:12:f1:73:d0:54:04:54:1c:
         09:69:7d:10:52:bd:2c:4e:dc:3e:96:91:33:bc:23:3f:be:dc:
         f5:4c:f9:e8:fb:80:9b:fe:c2:02:3e:78:e6:e4:cf:a7:df:b5:
         5d:b0:2a:02:18:a6:84:5b:b1:99:b7:f6:61:dd:40:ed:a7:3a:
         23:2c:78:1c:38:4c:01:29:3f:07:a4:97:6d:9e:5f:89:5a:3d:
         4a:34:1d:3e:7c:a2:7f:72:59:e9:0f:d7:b4:21:fc:3c:87:43:
         2a:e2:93:ae:e2:f4:db:5b:f2:d5:9e:a6:a0:29:f9:28:01:e8:
         66:90:98:e2:44:fb:82:94:af:6b:32:df:a8:2d:3c:37:5d:f8:
         c6:ee:8d:f0:8d:9c:e3:bc:c1:77:b0:88:44:4e:a1:eb:41:95:
         69:3c:09:ba:33:7e:bf:77:4e:47:ba:71:1e:91:ee:20:2f:cc:
         b9:16:9d:ec:55:c4:ff:1b:a3:5f:19:19:17:5f:32:cc:85:74:
         18:ae:ef:56:99:d0:08:9e:a9:94:08:0a:b1:7d:4a:18:72:88:
         c3:e3:c2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----