Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/156E0FA7FAA4FCD0E71B6549B738DCFB2A8F1889983C1013F40E646EDB88DBD5/0/323830313a3134653a313a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3134653a313a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          P6TEn7O/oUhn8wI0WGAvGTvDIAo8bwhmUBFOhXkE4+I=
Subject key identifier:   4D:EB:2A:55:5D:AD:80:68:6B:79:39:52:11:5E:E8:FC:D6:FA:23:AA
Certificate issuer:       /CN=F2AC2C4B93199A4F5EB2D116562BF8479BE0935A
Certificate serial:       316B7B3ABA8365A2DC6712077080879A4C962715
Authority key identifier: F2:AC:2C:4B:93:19:9A:4F:5E:B2:D1:16:56:2B:F8:47:9B:E0:93:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AC2C4B93199A4F5EB2D116562BF8479BE0935A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/156E0FA7FAA4FCD0E71B6549B738DCFB2A8F1889983C1013F40E646EDB88DBD5/0/323830313a3134653a313a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:11:22 +0000
ROA not before:           Tue 05 Mar 2024 18:06:22 +0000
ROA not after:            Tue 04 Mar 2025 18:11:22 +0000
asID:                     19429
IP address blocks:        2801:14e:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6b:7b:3a:ba:83:65:a2:dc:67:12:07:70:80:87:9a:4c:96:27:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2AC2C4B93199A4F5EB2D116562BF8479BE0935A
        Validity
            Not Before: Mar  5 18:06:22 2024 GMT
            Not After : Mar  4 18:11:22 2025 GMT
        Subject: CN=4DEB2A555DAD80686B793952115EE8FCD6FA23AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:82:ec:92:ae:bb:01:cb:20:f7:f0:4a:16:
                    21:ef:ef:dd:9c:01:10:12:6a:60:ff:6a:c1:83:82:
                    7d:00:ae:ae:3b:29:5d:89:d1:d3:09:89:19:61:1f:
                    a2:a0:6c:74:d8:e8:51:c3:5d:7e:c8:11:b7:5f:61:
                    5f:96:d6:37:a9:c3:58:33:f9:bb:11:df:bb:78:ee:
                    39:34:5a:4c:d2:f9:48:06:19:3d:c6:9c:90:69:fc:
                    04:2e:59:b9:f6:50:23:78:2e:68:df:0e:02:87:93:
                    cd:26:32:5a:cb:f7:98:70:44:cb:cb:a7:92:ea:47:
                    db:af:f8:c0:ed:86:5e:be:63:10:50:99:bc:ea:70:
                    f2:eb:7a:d8:17:11:cb:b6:ad:86:8a:cb:9c:16:2e:
                    da:e3:1f:8d:00:93:82:02:06:77:65:17:dc:43:2f:
                    ca:e6:6a:ca:4a:9c:ef:37:44:71:65:a2:c7:cd:e4:
                    3b:08:c1:0d:26:64:29:4e:79:a5:19:35:38:0a:0d:
                    64:e9:cb:41:d6:6f:bb:56:8c:00:34:11:f2:67:d2:
                    8e:2c:1c:fc:b7:41:5c:f2:a4:6a:1b:7f:39:ee:0b:
                    76:35:e0:8c:11:64:1b:23:bf:af:43:3e:cd:5b:9e:
                    b8:d1:3c:60:03:99:4f:0a:64:bd:f0:78:96:e2:53:
                    d8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EB:2A:55:5D:AD:80:68:6B:79:39:52:11:5E:E8:FC:D6:FA:23:AA
            X509v3 Authority Key Identifier:
                keyid:F2:AC:2C:4B:93:19:9A:4F:5E:B2:D1:16:56:2B:F8:47:9B:E0:93:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/156E0FA7FAA4FCD0E71B6549B738DCFB2A8F1889983C1013F40E646EDB88DBD5/0/F2AC2C4B93199A4F5EB2D116562BF8479BE0935A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2AC2C4B93199A4F5EB2D116562BF8479BE0935A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/156E0FA7FAA4FCD0E71B6549B738DCFB2A8F1889983C1013F40E646EDB88DBD5/0/323830313a3134653a313a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14e:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:e4:d6:40:35:1f:52:fc:bb:cb:23:85:76:fa:a1:47:d9:60:
         68:a0:64:05:3c:bb:7d:09:91:9b:58:96:5d:98:07:5b:1c:ea:
         04:14:ca:7f:77:da:88:2e:b9:a3:fe:e1:c8:75:0e:72:30:14:
         35:1e:8b:c5:ee:81:da:7a:75:31:81:7c:97:69:f8:d9:fa:63:
         4a:dd:c9:86:bf:82:4c:02:01:61:96:2f:59:90:38:13:67:9f:
         b4:0c:e0:24:4d:ae:89:de:8f:51:e5:71:46:4d:2b:57:dd:5b:
         fd:c7:e9:b6:5f:05:d9:e2:85:b8:67:5d:d7:24:27:08:f3:4c:
         d9:72:c2:f6:06:4d:a6:ca:2d:c8:95:c9:54:21:70:8d:2c:3a:
         21:f9:48:2a:7e:63:85:86:7f:9e:62:a3:a2:9a:3e:2e:6e:87:
         f9:fa:c5:fb:bf:58:aa:ad:bb:c3:98:9f:48:f3:3f:82:fe:93:
         f8:28:1c:99:83:6a:6f:ee:7d:2b:0c:e6:3b:d9:b3:ad:5f:9a:
         48:63:3a:25:0a:b3:4a:53:01:49:b4:e5:88:1b:88:56:68:2c:
         6f:1f:c4:5c:39:cf:70:98:fd:98:fc:cd:4f:1c:ce:52:67:eb:
         0d:83:2f:04:21:f3:3d:0c:80:df:b5:ac:61:bb:5c:a7:5a:c5:
         7a:ff:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----