Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/323830313a3137313a383a3a2f34352d3435203d3e20323732313135.roa
File:                     323830313a3137313a383a3a2f34352d3435203d3e20323732313135.roa (raw, json)
Hash identifier:          mbEo3++Ll16OHnsoUKjqUeq06jy4R995bPycnoGee+M=
Subject key identifier:   B9:6D:79:3E:79:10:6D:C0:2D:F8:91:89:07:73:D4:43:01:9D:5D:1E
Certificate issuer:       /CN=D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1
Certificate serial:       0335B3501DA5919C67CDD5C6904E7493BB77E138
Authority key identifier: D6:6B:84:79:A4:BF:E4:E7:C3:D4:0B:FB:86:26:BE:9E:87:84:05:D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/323830313a3137313a383a3a2f34352d3435203d3e20323732313135.roa
Signing time:             Tue 05 Mar 2024 18:17:43 +0000
ROA not before:           Tue 05 Mar 2024 18:12:43 +0000
ROA not after:            Tue 04 Mar 2025 18:17:43 +0000
asID:                     272115
IP address blocks:        2801:171:8::/45 maxlen: 45
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:35:b3:50:1d:a5:91:9c:67:cd:d5:c6:90:4e:74:93:bb:77:e1:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1
        Validity
            Not Before: Mar  5 18:12:43 2024 GMT
            Not After : Mar  4 18:17:43 2025 GMT
        Subject: CN=B96D793E79106DC02DF891890773D443019D5D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:e4:fa:0f:9e:ff:4e:98:32:21:1c:25:dc:
                    2c:e1:3a:e8:b6:49:fa:3b:82:93:dc:6e:55:34:53:
                    bb:3f:08:3a:aa:cd:e7:07:14:48:99:c2:33:6c:73:
                    d1:74:ba:9e:e1:04:eb:37:0c:17:49:3a:15:d9:b7:
                    0e:d9:6e:0e:2d:88:4e:54:10:d2:56:6c:e5:5d:90:
                    ee:f7:ad:df:22:0a:c7:2d:91:53:39:c3:28:d5:64:
                    5f:40:c8:73:44:5d:04:65:cf:bf:86:f5:40:84:fa:
                    57:be:71:a0:77:85:d1:b1:5a:a1:80:02:3c:1d:b6:
                    d0:45:3e:18:e3:a4:7a:b4:38:4a:85:d6:0d:bb:6b:
                    40:4e:72:2b:e9:f1:96:b4:b8:1e:74:57:48:55:76:
                    68:df:d9:22:64:e5:1b:1e:c9:7f:9f:12:ef:ac:bf:
                    9c:fe:84:5e:66:a2:de:28:97:8f:a3:23:c5:2f:b7:
                    48:66:48:58:55:d1:1c:9b:5d:5e:8f:45:c5:2f:0d:
                    35:72:1d:e6:9e:71:c8:13:c3:a6:84:2f:db:2e:f6:
                    09:6a:ac:30:b9:b5:83:19:37:f9:85:68:f2:b9:a9:
                    0d:1a:3b:7e:37:81:ad:47:01:66:ce:87:f2:91:ff:
                    f1:73:98:fd:b7:93:ee:4d:dc:60:8a:c7:6d:15:7f:
                    b3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6D:79:3E:79:10:6D:C0:2D:F8:91:89:07:73:D4:43:01:9D:5D:1E
            X509v3 Authority Key Identifier:
                keyid:D6:6B:84:79:A4:BF:E4:E7:C3:D4:0B:FB:86:26:BE:9E:87:84:05:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D66B8479A4BFE4E7C3D40BFB8626BE9E878405D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/05EA1E1B1EBC88335304FDE0BA38FBB2E72D47BEC2B95E350CBCBDC5D87D6781/0/323830313a3137313a383a3a2f34352d3435203d3e20323732313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:171:8::/45

    Signature Algorithm: sha256WithRSAEncryption
         11:36:5a:da:db:04:7a:b5:f9:4c:8d:62:63:fa:76:19:14:83:
         77:92:3d:e6:9a:7c:c4:3b:79:5b:eb:32:45:95:64:5a:2b:9a:
         6b:b1:af:7e:bf:a8:0d:56:99:54:59:f2:03:01:e2:02:ca:57:
         58:fd:c6:3b:2f:e3:22:1a:d1:08:d8:b2:35:ad:a6:92:6e:78:
         d6:59:ba:5d:cc:38:48:36:7d:94:a3:e0:08:bc:dd:e9:9f:62:
         c3:4c:71:55:53:f8:a9:83:f8:9e:26:5c:d5:69:23:17:e9:4d:
         1a:72:f9:9e:df:75:0d:96:49:44:10:86:78:b5:8f:d3:e3:4c:
         06:bd:48:71:1f:73:f9:dd:cb:d5:bf:db:21:95:c6:a9:a0:44:
         30:d5:08:18:d7:36:71:7f:72:06:ae:7e:8e:c8:6b:f6:cb:ae:
         71:11:da:74:e4:1e:c4:de:41:6b:30:5c:aa:c2:2b:ac:4e:c7:
         33:8f:c0:bb:b1:4e:ee:1a:3b:4a:02:20:da:4a:37:df:93:7f:
         28:70:85:cc:40:e3:20:82:d3:c6:e3:28:26:92:bf:53:1c:a5:
         24:8a:98:37:e8:d0:56:8f:d7:dd:05:b9:3a:c1:54:79:b9:a5:
         0c:2a:3d:a9:9e:3b:b7:bc:68:1c:4c:64:16:23:c8:f0:45:28:
         9a:8f:a5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----