Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/323830313a31323a3130303a3a2f34342d3434203d3e20323731383138.roa
File:                     323830313a31323a3130303a3a2f34342d3434203d3e20323731383138.roa (raw, json)
Hash identifier:          nsoywAkL6n1CMHFcRB5dX+ky8bQpWp6W3943SPAtO1c=
Subject key identifier:   F7:27:12:B4:46:A9:05:9A:7F:6F:A2:4A:2E:1C:ED:B1:6C:BC:39:CF
Certificate issuer:       /CN=5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D
Certificate serial:       17B646321C26D65D69FEFD9D1F38D526C3DCD188
Authority key identifier: 5A:7F:E4:35:0D:2A:09:E9:16:46:C0:DE:6C:4A:3F:A6:7C:EB:BB:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/323830313a31323a3130303a3a2f34342d3434203d3e20323731383138.roa
Signing time:             Tue 05 Mar 2024 18:05:11 +0000
ROA not before:           Tue 05 Mar 2024 18:00:11 +0000
ROA not after:            Tue 04 Mar 2025 18:05:11 +0000
asID:                     271818
IP address blocks:        2801:12:100::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b6:46:32:1c:26:d6:5d:69:fe:fd:9d:1f:38:d5:26:c3:dc:d1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D
        Validity
            Not Before: Mar  5 18:00:11 2024 GMT
            Not After : Mar  4 18:05:11 2025 GMT
        Subject: CN=F72712B446A9059A7F6FA24A2E1CEDB16CBC39CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f0:ec:1d:51:2a:0f:88:d4:ad:57:33:c9:ec:
                    74:8f:c2:db:ec:98:21:fd:2a:0f:b0:ba:3d:4a:b2:
                    75:5d:83:45:1c:b2:6d:fe:73:97:21:46:47:d8:ad:
                    d3:de:62:67:8e:e4:16:8d:10:3b:e0:11:7b:d2:0c:
                    a0:76:8a:a4:af:4d:9d:9f:e6:dd:d1:0d:09:a1:a5:
                    ef:6d:fe:2e:df:3b:87:60:bb:55:59:6b:b5:b5:a5:
                    e4:38:f4:7d:5a:42:83:29:08:9e:c3:b3:29:18:10:
                    fc:47:3b:0a:00:5e:3a:cc:1c:cc:48:75:35:70:e8:
                    66:8a:13:7f:c7:a8:94:b2:98:d0:fe:2e:e6:1a:42:
                    12:ef:35:10:ac:54:dc:06:ba:df:b8:b4:aa:a2:83:
                    67:5e:87:6a:51:3c:4e:fb:d5:ac:4a:3f:43:ab:dd:
                    c8:34:28:f7:4a:09:ac:94:74:67:cc:2c:1d:ad:b8:
                    9f:15:21:39:20:46:6f:c7:67:49:fb:5b:37:15:21:
                    33:a5:bf:cf:b3:3b:5b:74:fa:e3:c4:8c:ef:72:fd:
                    e7:38:20:60:5d:6b:cf:5f:28:07:f6:4e:87:26:8e:
                    0b:f8:e8:a1:0a:21:aa:25:39:56:41:e8:c3:87:bd:
                    4d:81:01:b8:36:38:75:f2:7f:02:c1:db:0c:92:44:
                    e8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:27:12:B4:46:A9:05:9A:7F:6F:A2:4A:2E:1C:ED:B1:6C:BC:39:CF
            X509v3 Authority Key Identifier:
                keyid:5A:7F:E4:35:0D:2A:09:E9:16:46:C0:DE:6C:4A:3F:A6:7C:EB:BB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5A7FE4350D2A09E91646C0DE6C4A3FA67CEBBB3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/085C2714B66BBAD24DA8A9ED6F0516EA0CB027581A3603337B1402B3CA948870/0/323830313a31323a3130303a3a2f34342d3434203d3e20323731383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:100::/44

    Signature Algorithm: sha256WithRSAEncryption
         58:bb:83:0c:24:32:be:79:1b:10:fd:55:61:cc:8d:58:2a:89:
         cf:7b:1c:a1:6e:cf:98:49:ff:9c:a8:16:bc:e2:26:a8:ad:93:
         88:f1:bc:f6:6a:f5:a6:37:47:04:17:aa:9a:45:f5:b9:75:cf:
         f2:aa:9f:40:8a:60:4a:d6:dd:49:37:05:18:a2:89:28:75:3c:
         a2:d4:19:12:72:87:1d:5a:e7:ce:48:e9:f8:2c:d2:56:52:dc:
         b1:6f:74:22:c4:fa:ef:db:15:39:6b:9c:06:85:c1:3e:dd:ba:
         9c:e2:3f:b8:d3:e1:b5:1a:86:af:03:af:ff:6d:6d:f1:e4:ea:
         f1:9f:c2:97:5c:4e:7e:d6:14:9c:69:f1:4a:14:19:e5:c6:d1:
         68:c6:41:fd:67:9f:c2:1a:c6:f3:7e:6c:08:e2:11:54:1e:0f:
         ed:6d:0b:a5:96:6b:8b:a4:16:b7:64:12:60:63:71:98:6c:3d:
         57:b5:26:93:45:6d:4b:13:bf:6e:63:4f:20:ad:1f:d6:6e:fb:
         21:4c:c2:58:f7:fa:84:67:a0:3d:f9:ef:6c:26:3a:d0:58:be:
         5d:9b:1e:0f:2b:63:ab:d8:a3:ad:26:46:32:4f:a8:e7:a5:29:
         08:f8:28:35:fb:59:6a:70:17:15:fd:e1:ed:f4:52:67:4b:99:
         eb:c4:f3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----