Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/8719a66059841917bb7491c040eb4d12a6615724.roa
File:                     8719a66059841917bb7491c040eb4d12a6615724.roa (raw, json)
Hash identifier:          2Vk8elN6Zt5HuWCzLJPjqEjUX1LUl4orHZktRuwlIAk=
Subject key identifier:   88:5A:B0:CE:74:E6:CD:84:67:A5:25:3B:EA:54:52:0F:E6:A5:30:A5
Certificate issuer:       /CN=60bda1835669673ce44949762eeb19a30a9546be
Certificate serial:       0152EF
Authority key identifier: 12:5C:B2:99:60:E0:CA:F9:F0:9F:3B:FA:17:B6:C5:18:99:2A:BD:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60bda1835669673ce44949762eeb19a30a9546be.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/8719a66059841917bb7491c040eb4d12a6615724.roa
Signing time:             Fri 12 Apr 2024 16:56:11 +0000
ROA not before:           Fri 12 Apr 2024 16:56:08 +0000
ROA not after:            Thu 12 Apr 2029 16:56:08 +0000
asID:                     272373
IP address blocks:        2806:419:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86767 (0x152ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60bda1835669673ce44949762eeb19a30a9546be
        Validity
            Not Before: Apr 12 16:56:08 2024 GMT
            Not After : Apr 12 16:56:08 2029 GMT
        Subject: CN=8719a66059841917bb7491c040eb4d12a6615724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3d:12:f3:78:00:80:3f:57:8a:ce:be:3f:24:
                    33:6f:64:89:6f:d8:32:9c:41:c1:2a:71:c3:9d:e9:
                    a7:ce:a5:36:57:89:3f:03:b5:0a:c9:61:12:84:66:
                    43:29:cc:53:b1:41:1e:8f:7e:62:58:a1:af:7c:65:
                    a3:b8:18:8c:59:e0:ef:88:29:d6:9e:e6:dc:69:4b:
                    90:2d:c0:99:9d:f5:26:f5:2d:2d:c9:d1:a4:c4:20:
                    33:c8:78:d1:65:3c:7f:bf:91:f8:18:8d:13:b3:12:
                    e0:28:ad:0c:0f:cf:89:8e:bd:ee:58:dd:bc:88:23:
                    4d:2b:ec:d0:48:56:99:eb:b5:53:66:bf:98:e4:f0:
                    b3:1d:1a:e0:f1:8c:21:3b:c3:48:66:18:8c:65:3d:
                    52:cb:88:01:29:e2:9f:1d:3f:6f:f1:3a:50:08:59:
                    ee:e3:a9:eb:74:b4:82:c8:47:e7:b3:d2:b1:55:d8:
                    c3:03:dd:60:76:3b:0f:64:8c:ca:ab:6f:75:b2:cd:
                    58:ab:04:15:0b:f6:26:ea:4e:22:3e:ae:74:15:e6:
                    2e:f8:95:37:f8:d3:f0:a5:cd:d4:31:70:b5:d5:f4:
                    5b:ca:87:24:5c:71:80:e8:21:df:74:41:96:8e:c3:
                    81:84:9c:ab:18:ba:8f:82:49:ad:86:0d:ad:79:9b:
                    ad:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5A:B0:CE:74:E6:CD:84:67:A5:25:3B:EA:54:52:0F:E6:A5:30:A5
            X509v3 Authority Key Identifier:
                keyid:12:5C:B2:99:60:E0:CA:F9:F0:9F:3B:FA:17:B6:C5:18:99:2A:BD:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60bda1835669673ce44949762eeb19a30a9546be.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/8719a66059841917bb7491c040eb4d12a6615724.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/60bda1835669673ce44949762eeb19a30a9546be.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:7b:39:0c:fd:18:05:7a:25:8d:9c:26:43:17:36:46:c2:
         c5:97:09:4f:69:24:c0:8a:b9:42:36:39:f6:6f:00:54:17:b7:
         09:d7:2d:fb:62:06:5e:7d:2a:5a:82:bd:31:90:75:37:bc:b2:
         50:f5:d2:7f:2b:51:89:8e:b4:49:f9:1e:1b:e8:9c:ef:a0:ad:
         0a:6e:3e:b0:76:4d:c9:20:19:bc:c1:b5:f4:7e:e5:d8:a2:bd:
         ae:18:45:aa:0d:4e:a7:06:cd:88:a3:7a:8b:0c:63:4b:fb:d7:
         ff:d6:2c:d1:f5:71:7e:50:40:b6:93:ae:bc:4b:c1:8c:3a:c8:
         4e:cc:5c:0e:9a:8e:51:57:01:9d:27:ba:70:7e:6e:95:56:5d:
         c9:58:84:06:7e:2c:b6:24:ac:97:a7:10:8d:9c:2c:79:03:54:
         8b:72:9c:ff:b0:24:a2:88:05:d8:39:34:4a:6e:20:05:96:9a:
         e2:35:f7:b5:03:38:b2:6e:21:40:e6:50:04:49:39:96:4f:69:
         87:d3:de:57:34:2e:1f:a1:80:95:35:9f:f8:f1:0f:bd:5a:8a:
         c0:53:e5:66:bc:de:8a:7e:b0:f4:f5:c9:89:8e:de:7b:51:0f:
         d6:50:ff:7a:d5:e0:96:1d:c3:86:06:f0:cc:22:7e:1a:33:5d:
         3e:54:67:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----