Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/4797f3ff7b3c3fa960547b4f84aeb96d9aeaeaee.roa
File:                     4797f3ff7b3c3fa960547b4f84aeb96d9aeaeaee.roa (raw, json)
Hash identifier:          VtGCja2SC7VXpbSkyNEwEGvZuovnWZan2zM9EOm/m2M=
Subject key identifier:   EC:06:C1:50:19:DD:12:B3:EF:0A:17:EA:0C:09:B9:07:B8:85:CB:E7
Certificate issuer:       /CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
Certificate serial:       CACD
Authority key identifier: 5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/4797f3ff7b3c3fa960547b4f84aeb96d9aeaeaee.roa
Signing time:             Wed 27 Mar 2024 05:04:05 +0000
ROA not before:           Wed 27 Mar 2024 05:04:05 +0000
ROA not after:            Fri 27 Mar 2026 05:04:05 +0000
asID:                     272373
IP address blocks:        2806:419:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51917 (0xcacd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
        Validity
            Not Before: Mar 27 05:04:05 2024 GMT
            Not After : Mar 27 05:04:05 2026 GMT
        Subject: CN=4797f3ff7b3c3fa960547b4f84aeb96d9aeaeaee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:07:78:4d:bf:25:3a:ca:5f:64:c9:95:84:66:
                    b4:df:8f:e2:32:ff:fd:2a:8e:00:50:6e:97:f2:cb:
                    29:30:6c:d0:46:33:b7:4d:81:74:7e:52:fb:a6:62:
                    e8:27:67:ab:5c:e2:d0:d8:14:34:46:ed:a9:d5:da:
                    d4:b0:37:e1:f6:6b:b4:06:4b:9d:b8:b3:e8:5b:ff:
                    79:68:a1:ef:dc:a0:71:57:2e:fa:d7:ae:86:dc:08:
                    32:18:6f:ab:d1:a6:49:c2:3d:3b:8d:a1:2b:30:bc:
                    d6:42:55:71:e5:48:74:48:65:be:c0:30:ba:52:d8:
                    bc:16:69:47:28:94:41:5b:dc:04:f8:14:ff:79:d7:
                    cf:36:6c:d0:b3:73:d7:f0:c0:58:73:f1:fb:74:8c:
                    4a:c4:2a:09:23:57:c0:96:34:39:be:71:eb:27:80:
                    9b:a8:0a:dc:75:5e:39:7c:93:07:1d:50:c6:10:b2:
                    c4:e5:25:70:53:e3:24:35:b0:24:5d:43:59:56:e0:
                    44:9e:b0:71:85:cd:50:49:2e:3e:e8:57:94:7c:67:
                    bf:b2:11:c2:5a:16:26:96:e4:64:f6:ae:25:6f:a3:
                    9a:73:13:9d:a4:52:4c:ac:8b:b8:4d:c9:76:5e:98:
                    72:a7:e7:87:c8:95:6d:90:b0:9d:ed:fe:39:a9:b5:
                    53:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:06:C1:50:19:DD:12:B3:EF:0A:17:EA:0C:09:B9:07:B8:85:CB:E7
            X509v3 Authority Key Identifier:
                keyid:5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/4797f3ff7b3c3fa960547b4f84aeb96d9aeaeaee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:4c:1b:06:31:b6:07:ae:11:1f:23:9b:1a:9e:43:5c:20:ef:
         31:71:8a:9b:fd:ff:fc:a2:7b:d0:fd:22:1b:48:48:bf:2d:ed:
         be:f2:25:48:18:e8:5c:f3:1c:c7:eb:0a:76:b6:05:23:e9:74:
         22:79:8e:66:f3:72:79:5f:98:7a:4b:fa:96:de:07:b1:a3:ed:
         d3:99:25:48:7d:1d:94:11:8c:4f:4a:22:8a:e3:86:71:b6:f5:
         a5:89:37:34:62:ea:0d:0f:b4:52:ba:c7:a3:d8:30:3f:ee:32:
         51:82:36:30:fa:ca:ad:2f:cb:bb:cf:c8:a6:18:db:df:e6:5e:
         31:9c:95:8e:4c:7a:ce:13:ad:da:01:eb:de:8f:7b:81:18:00:
         54:ff:76:e6:da:26:68:64:95:ed:47:f6:01:a2:6d:90:ba:68:
         b3:fa:c6:a9:89:b5:84:6f:cf:98:67:0c:ed:61:3a:48:b4:b0:
         15:bf:b6:72:88:da:b6:3e:cd:33:f4:7f:92:eb:38:80:1f:4e:
         32:af:82:d5:9e:51:8e:5d:20:78:ac:69:99:f5:d6:a5:96:a3:
         85:06:62:93:01:f6:62:d8:bf:c4:b7:28:09:e3:34:64:ed:4d:
         6d:be:4d:33:82:45:bf:ea:70:0c:1a:ce:28:66:ed:d9:48:4c:
         84:0b:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----