Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/2a22d60953bdf574c89814632bf15984bd297482.roa
File:                     2a22d60953bdf574c89814632bf15984bd297482.roa (raw, json)
Hash identifier:          drFpD3JkxUbsb0HjlTqat+88OjY86zrbvmdBW46Jccc=
Subject key identifier:   FE:3D:FC:AB:E7:07:25:8E:23:89:55:AA:6C:2D:FA:C6:0E:7F:F2:FA
Certificate issuer:       /CN=60bda1835669673ce44949762eeb19a30a9546be
Certificate serial:       014B60
Authority key identifier: 12:5C:B2:99:60:E0:CA:F9:F0:9F:3B:FA:17:B6:C5:18:99:2A:BD:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60bda1835669673ce44949762eeb19a30a9546be.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/2a22d60953bdf574c89814632bf15984bd297482.roa
Signing time:             Fri 12 Apr 2024 16:56:09 +0000
ROA not before:           Fri 12 Apr 2024 16:56:08 +0000
ROA not after:            Thu 12 Apr 2029 16:56:08 +0000
asID:                     20473
IP address blocks:        2806:419::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84832 (0x14b60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60bda1835669673ce44949762eeb19a30a9546be
        Validity
            Not Before: Apr 12 16:56:08 2024 GMT
            Not After : Apr 12 16:56:08 2029 GMT
        Subject: CN=2a22d60953bdf574c89814632bf15984bd297482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bd:f7:07:49:4f:69:77:7b:8b:3a:0e:df:f0:
                    8e:d8:36:77:99:9d:0d:9a:2b:7d:50:55:85:95:bd:
                    ee:39:60:3e:08:9e:3a:8b:6d:4f:68:46:75:8a:1d:
                    56:d4:7c:56:51:1e:d1:fc:e4:c2:d2:b3:8c:b4:16:
                    ba:9f:d4:5c:ad:ea:5d:90:5f:30:31:1f:63:86:8d:
                    f1:ba:54:fa:c6:85:b6:fc:b6:35:43:91:f1:33:13:
                    f2:83:8e:e4:7f:13:a1:5a:3e:44:14:cb:30:dc:dc:
                    77:a1:0b:a8:b5:5a:2e:60:fc:ad:71:19:83:dc:27:
                    ca:5f:24:bd:b4:cb:fb:13:00:c1:89:80:18:28:84:
                    66:1e:0b:f1:cb:ce:ed:5d:55:27:b2:a7:08:b6:21:
                    57:42:60:1e:91:a7:82:fc:12:e2:07:a2:52:d3:ed:
                    59:1c:d6:38:f2:8e:c6:00:2a:18:df:2c:d2:71:bc:
                    84:e6:86:bf:61:e0:a4:74:4c:3e:bf:5a:51:bb:01:
                    65:94:0d:61:d4:5b:27:1d:4e:a0:14:44:c0:d4:75:
                    83:24:c6:9c:20:95:0d:80:9f:27:32:c2:d0:35:68:
                    7f:84:da:7c:e6:20:15:38:f7:e2:0e:fe:87:d1:94:
                    12:21:69:28:d6:cb:51:b0:df:81:2c:97:f6:a3:c7:
                    9e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3D:FC:AB:E7:07:25:8E:23:89:55:AA:6C:2D:FA:C6:0E:7F:F2:FA
            X509v3 Authority Key Identifier:
                keyid:12:5C:B2:99:60:E0:CA:F9:F0:9F:3B:FA:17:B6:C5:18:99:2A:BD:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60bda1835669673ce44949762eeb19a30a9546be.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/2a22d60953bdf574c89814632bf15984bd297482.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/60bda1835669673ce44949762eeb19a30a9546be.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:17:da:90:86:54:24:9a:36:8f:74:f6:53:0f:b0:08:51:2f:
         bd:1d:5f:7c:1b:b3:e7:39:66:cb:5e:ef:ea:d3:90:cd:4f:bb:
         bb:58:d4:ea:29:40:a3:3e:f0:56:39:8b:a1:64:73:3f:5a:27:
         d5:c1:d6:b2:99:d1:ca:12:3e:8f:00:26:f8:5b:cf:66:f5:83:
         b9:fb:1c:64:1d:b6:11:5b:4e:73:d1:7d:42:f5:55:61:a3:f1:
         09:70:ab:b4:3e:9b:40:ac:7d:8e:26:fd:16:b8:3c:eb:b9:74:
         d3:f7:8a:83:cc:2e:96:8a:e7:86:be:6f:d5:b6:5b:ba:e7:36:
         d7:0e:b8:35:e0:43:e1:63:b2:d5:ff:08:83:af:ca:ba:85:aa:
         0f:38:11:be:a9:dc:45:93:52:95:24:fc:6b:7c:d3:c2:fa:d8:
         1b:4a:b5:f9:01:f1:29:88:7d:b6:86:33:5c:c2:73:ed:30:3e:
         5e:e0:bd:27:b5:91:97:a5:fe:ee:d6:02:39:74:a7:41:52:68:
         dc:1c:48:a6:9f:5f:0f:82:39:b5:da:9a:bb:ab:ec:83:46:f6:
         9b:cc:54:ad:6e:64:f6:3a:54:37:a1:98:60:a0:98:45:61:ab:
         f3:52:ec:25:ee:b8:4c:6e:a4:16:bc:20:98:6c:fc:23:d6:55:
         a7:dd:b0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----