Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/d928381753cf92ab17175eef703c2cdf8a6bf4c6.roa
File:                     d928381753cf92ab17175eef703c2cdf8a6bf4c6.roa (raw, json)
Hash identifier:          gKKsz++E80x5dBKg4N+pIPETL92bSXQKeZoscD+7nNE=
Subject key identifier:   FE:B1:05:FB:A9:4D:D7:BE:98:EB:7D:55:88:FC:A0:B3:B6:2D:1A:3F
Certificate issuer:       /CN=60bda1835669673ce44949762eeb19a30a9546be
Certificate serial:       015131
Authority key identifier: 12:5C:B2:99:60:E0:CA:F9:F0:9F:3B:FA:17:B6:C5:18:99:2A:BD:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60bda1835669673ce44949762eeb19a30a9546be.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/d928381753cf92ab17175eef703c2cdf8a6bf4c6.roa
Signing time:             Fri 12 Apr 2024 16:56:10 +0000
ROA not before:           Fri 12 Apr 2024 16:56:08 +0000
ROA not after:            Thu 12 Apr 2029 16:56:08 +0000
asID:                     20473
IP address blocks:        2806:419:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86321 (0x15131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60bda1835669673ce44949762eeb19a30a9546be
        Validity
            Not Before: Apr 12 16:56:08 2024 GMT
            Not After : Apr 12 16:56:08 2029 GMT
        Subject: CN=d928381753cf92ab17175eef703c2cdf8a6bf4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:01:be:47:2c:61:8a:f9:8e:77:ae:d2:85:79:
                    11:ad:b9:82:6e:b7:55:c8:5b:f1:1c:a4:ac:77:d5:
                    60:ea:a6:d1:9e:cf:6c:20:e8:41:2d:16:1f:e8:40:
                    0a:e0:8f:2c:6c:a2:12:cd:8b:22:09:d2:e0:52:af:
                    79:f3:2d:0c:64:71:1c:d7:61:44:5f:71:47:44:87:
                    8a:b5:46:4e:cd:4f:77:62:9d:a0:fe:7b:39:d8:86:
                    be:d4:2f:99:56:de:c1:a0:3f:5b:34:e1:f9:87:f4:
                    8f:e6:e5:25:8d:d2:27:a7:9c:54:1e:82:52:83:78:
                    b0:03:df:c4:50:c0:dd:34:23:d5:09:b3:71:08:a2:
                    38:24:8b:ee:13:d6:7d:02:77:54:71:b0:2b:6f:25:
                    22:ea:fc:99:18:0a:10:00:f0:4b:39:61:50:8e:7f:
                    57:2a:66:cc:0b:49:7d:bf:ee:e5:0e:c6:d0:8a:53:
                    d1:f7:97:f7:e4:ba:0d:36:21:04:61:76:d3:e2:e4:
                    84:fd:e5:df:44:63:43:02:ff:76:a6:07:de:0a:1a:
                    59:3e:ee:0d:76:85:df:6c:27:03:4e:28:b0:41:1e:
                    6c:f3:ee:f2:56:f3:b5:6b:c5:40:68:37:0e:68:b8:
                    c8:7a:f2:be:80:f8:05:1f:f9:67:b2:21:b9:72:a0:
                    ef:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B1:05:FB:A9:4D:D7:BE:98:EB:7D:55:88:FC:A0:B3:B6:2D:1A:3F
            X509v3 Authority Key Identifier:
                keyid:12:5C:B2:99:60:E0:CA:F9:F0:9F:3B:FA:17:B6:C5:18:99:2A:BD:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/60bda1835669673ce44949762eeb19a30a9546be.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/d928381753cf92ab17175eef703c2cdf8a6bf4c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/60bda1835669673ce44949762eeb19a30a9546be.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:d9:42:66:62:5d:e9:fc:6b:9d:51:42:f4:49:92:34:3f:a0:
         3d:8c:2a:87:a7:fd:eb:40:fb:60:11:2f:a7:a2:2a:ea:3e:fe:
         4d:41:76:82:cd:26:48:90:fd:5d:dd:a5:a9:bf:f2:9e:e8:c9:
         70:72:c1:18:a1:d9:cf:a2:6a:d9:b8:23:de:4d:4c:1b:d1:4b:
         39:54:c6:c0:6b:e7:49:86:fa:58:94:f1:e1:26:fa:8b:b7:e4:
         1f:53:ea:a2:4a:4f:48:77:55:05:9b:fe:46:cc:b8:5e:16:fb:
         27:a3:b4:2d:b3:84:35:1b:cd:20:f0:50:57:54:58:bd:f2:0a:
         58:1d:56:64:85:60:03:6e:92:23:91:40:1b:73:eb:20:fb:d3:
         0e:78:5e:b9:fd:a0:c9:36:1c:c2:ad:85:67:05:e5:e8:87:ee:
         8b:63:c1:0b:5b:c3:8a:4e:fd:7d:28:31:65:71:75:f1:74:86:
         99:30:c9:a8:a7:bf:75:b0:9a:61:97:4d:d3:31:95:51:f8:34:
         c3:b0:03:61:ce:05:06:cd:6f:54:d3:30:77:d0:cf:17:cc:89:
         3e:93:07:65:c5:43:1a:2c:91:7f:0e:0d:36:46:19:9e:46:41:
         13:93:37:86:e9:1d:28:b5:34:6c:b7:63:b9:91:9a:41:00:f9:
         77:8f:4f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----