Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/91b07ff1bcfeb72346c2b423f1ecbd78641e20a1.roa
File:                     91b07ff1bcfeb72346c2b423f1ecbd78641e20a1.roa (raw, json)
Hash identifier:          o/7tJiVe6ZbRjOoLZ8X5mk0R5pao4EYJnVwYA+SCdNo=
Subject key identifier:   DB:1C:83:06:83:A5:CB:7C:B5:75:9B:F6:3E:CF:2E:40:7D:0D:D1:13
Certificate issuer:       /CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
Certificate serial:       28BE
Authority key identifier: 5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/91b07ff1bcfeb72346c2b423f1ecbd78641e20a1.roa
Signing time:             Sat 02 Mar 2024 00:34:46 +0000
ROA not before:           Sat 02 Mar 2024 00:34:46 +0000
ROA not after:            Mon 02 Mar 2026 00:34:46 +0000
asID:                     20473
IP address blocks:        2806:419::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10430 (0x28be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
        Validity
            Not Before: Mar  2 00:34:46 2024 GMT
            Not After : Mar  2 00:34:46 2026 GMT
        Subject: CN=91b07ff1bcfeb72346c2b423f1ecbd78641e20a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:89:a2:12:1f:34:d4:81:1c:77:66:32:90:
                    72:26:61:b8:92:85:7f:f9:81:3a:92:af:7c:67:97:
                    b7:c0:6b:70:06:20:e6:33:54:4b:db:26:fc:53:01:
                    f4:c6:3a:84:18:19:90:e2:0f:15:78:b6:ce:60:37:
                    89:bb:91:25:a4:86:95:bf:ab:b2:09:35:b2:45:7e:
                    bf:c2:54:60:a9:8b:f5:a6:87:1e:a0:e6:bb:70:81:
                    61:05:39:ca:65:10:32:77:df:a2:ec:45:58:a0:3a:
                    cc:36:e4:ec:13:d6:11:92:35:e0:59:9e:83:14:92:
                    b3:bf:79:1a:19:62:05:93:1a:9a:85:eb:8d:04:8e:
                    2d:64:9f:3b:2f:40:4f:2e:e3:e6:e1:05:7c:75:78:
                    13:51:ed:bc:37:04:a3:b8:c3:2b:0f:ea:39:fc:e5:
                    8d:ec:ff:f4:4b:f4:64:e2:49:42:29:8c:0f:d1:c7:
                    66:01:ef:65:06:26:74:01:8a:7a:aa:00:5c:8e:67:
                    7c:f2:39:b0:15:f9:e6:eb:6f:17:ae:1c:90:35:32:
                    1f:08:7e:6c:a3:6f:bb:da:e2:4d:9a:f2:f9:ad:c3:
                    52:8e:21:c1:47:e4:7a:fc:31:5e:0c:8b:95:54:ea:
                    02:65:9b:ee:47:b0:44:73:b9:4b:ae:fa:34:82:fc:
                    26:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1C:83:06:83:A5:CB:7C:B5:75:9B:F6:3E:CF:2E:40:7D:0D:D1:13
            X509v3 Authority Key Identifier:
                keyid:5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/91b07ff1bcfeb72346c2b423f1ecbd78641e20a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:5b:88:29:7e:29:90:5f:26:cf:e5:3a:cf:b9:ef:8d:b2:49:
         1d:d5:df:2c:a4:c1:d7:e1:82:ce:ec:80:d1:23:15:fc:6d:e0:
         60:d2:4a:1e:7a:7b:be:bc:3d:14:98:d3:f9:37:52:f6:ac:ef:
         0e:ba:2f:59:e6:fd:c3:a1:79:8e:a7:20:bf:5f:79:57:af:d4:
         d6:53:72:46:3b:4f:53:08:2d:9a:0e:c6:a0:9c:f9:47:de:a5:
         6d:3a:8f:74:5e:4b:8b:00:cb:03:55:ad:47:ca:03:75:3f:77:
         f1:a5:b6:52:3c:4b:62:32:04:a3:f7:d4:97:a0:cb:50:6e:5d:
         76:fe:9c:8b:79:f6:ce:33:f0:23:36:7b:9a:f0:ca:3d:6f:b5:
         52:2d:b8:ad:bf:79:22:e0:1e:5f:87:87:7f:3d:3f:3d:7d:ff:
         db:ae:4a:83:8c:2e:d3:aa:5c:30:6c:02:34:6c:29:4b:3f:0a:
         ae:35:54:a0:da:05:99:de:b8:83:96:36:91:f8:f5:48:75:2b:
         be:78:f1:19:20:f0:50:0e:08:2a:85:4e:2c:65:c6:c5:60:40:
         85:f2:0d:2a:14:63:7c:fd:90:69:bf:a1:2c:24:ef:30:10:f4:
         04:b0:45:27:3a:d9:af:bb:73:2c:55:30:50:25:76:74:8c:6d:
         0d:6c:9e:8a
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgICKL4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTRh
YTIyNmYzZTgyODZlMjFiZjJlYzkzN2MyYzYxNTllYWJmZGE0ZjAeFw0yNDAzMDIw
MDM0NDZaFw0yNjAzMDIwMDM0NDZaMDMxMTAvBgNVBAMTKDkxYjA3ZmYxYmNmZWI3
MjM0NmMyYjQyM2YxZWNiZDc4NjQxZTIwYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCjiomiEh801IEcd2YykHImYbiShX/5gTqSr3xnl7fAa3AGIOYz
VEvbJvxTAfTGOoQYGZDiDxV4ts5gN4m7kSWkhpW/q7IJNbJFfr/CVGCpi/Wmhx6g
5rtwgWEFOcplEDJ336LsRVigOsw25OwT1hGSNeBZnoMUkrO/eRoZYgWTGpqF640E
ji1knzsvQE8u4+bhBXx1eBNR7bw3BKO4wysP6jn85Y3s//RL9GTiSUIpjA/Rx2YB
72UGJnQBinqqAFyOZ3zyObAV+ebrbxeuHJA1Mh8Ifmyjb7va4k2a8vmtw1KOIcFH
5Hr8MV4Mi5VU6gJlm+5HsERzuUuu+jSC/Ca9AgMBAAGjggJeMIICWjAdBgNVHQ4E
FgQU2xyDBoOly3y1dZv2Ps8uQH0N0RMwHwYDVR0jBBgwFoAUW9XFFPSovwp/8Og1
EyRZ7iTov8swDgYDVR0PAQH/BAQDAgeAMIGaBggrBgEFBQcBAQSBjTCBijCBhwYI
KwYBBQUHMAKGe3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj
bmljLzQ4ZjA4M2JiLWY2MDMtNDg5My05OTkwLTAyODRjMDRjZWI4NS8xNGFhMjI2
ZjNlODI4NmUyMWJmMmVjOTM3YzJjNjE1OWVhYmZkYTRmLmNlcjCBmgYIKwYBBQUH
AQsEgY0wgYowgYcGCCsGAQUFBzALhntyc3luYzovL3JlcG9zaXRvcnkubGFjbmlj
Lm5ldC9ycGtpL2xhY25pYy8wZjBmNzU1MS0xZDViLTQ0NzQtYmUxMi1iMDE0YTMz
NzcwZjcvOTFiMDdmZjFiY2ZlYjcyMzQ2YzJiNDIzZjFlY2JkNzg2NDFlMjBhMS5y
b2EwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge3JzeW5jOi8vcmVwb3NpdG9yeS5sYWNu
aWMubmV0L3Jwa2kvbGFjbmljLzBmMGY3NTUxLTFkNWItNDQ3NC1iZTEyLWIwMTRh
MzM3NzBmNy8xNGFhMjI2ZjNlODI4NmUyMWJmMmVjOTM3YzJjNjE1OWVhYmZkYTRm
LmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAKAYEGQAAMA0GCSqGSIb3DQEBCwUAA4IBAQBzW4gpfimQXybP
5TrPue+Nskkd1d8spMHX4YLO7IDRIxX8beBg0koeenu+vD0UmNP5N1L2rO8Oui9Z
5v3DoXmOpyC/X3lXr9TWU3JGO09TCC2aDsagnPlH3qVtOo90XkuLAMsDVa1HygN1
P3fxpbZSPEtiMgSj99SXoMtQbl12/pyLefbOM/AjNnua8Mo9b7VSLbitv3ki4B5f
h4d/PT89ff/brkqDjC7TqlwwbAI0bClLPwquNVSg2gWZ3riDljaR+PVIdSu+ePEZ
IPBQDggqhU4sZcbFYECF8g0qFGN8/ZBpv6EsJO8wEPQEsEUnOtmvu3MsVTBQJXZ0
jG0NbJ6K
-----END CERTIFICATE-----