Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa
File:                     323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa (raw, json)
Hash identifier:          pi9KNn2qaJlZQ2RICAWeO4e7FEuVhuM3xhSYUR+pZ9c=
Subject key identifier:   FF:9A:AD:45:02:68:47:B6:4A:85:E3:A2:DA:14:56:2E:98:62:24:2E
Certificate issuer:       /CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
Certificate serial:       01E4CA13B20CB199FB7A2688925B4872F4039DBE
Authority key identifier: FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa
Signing time:             Tue 05 Mar 2024 18:00:20 +0000
ROA not before:           Tue 05 Mar 2024 17:55:20 +0000
ROA not after:            Tue 04 Mar 2025 18:00:20 +0000
asID:                     269844
IP address blocks:        2801:1b:4800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e4:ca:13:b2:0c:b1:99:fb:7a:26:88:92:5b:48:72:f4:03:9d:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FF941E14D5CF47AE65FBFC53B7F577CEC71BB790
        Validity
            Not Before: Mar  5 17:55:20 2024 GMT
            Not After : Mar  4 18:00:20 2025 GMT
        Subject: CN=FF9AAD45026847B64A85E3A2DA14562E9862242E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:0f:70:75:00:62:1a:91:f2:73:96:0a:db:
                    09:62:19:fb:93:54:f4:f8:b7:ce:07:39:3c:62:49:
                    d2:d9:a8:d8:07:ad:b5:71:5c:41:ac:f5:82:21:94:
                    8a:c6:98:24:6b:71:d7:9e:62:da:f7:b6:ee:7d:3f:
                    57:64:b9:10:24:41:2a:bc:e7:b8:ba:5f:72:a4:58:
                    0d:a1:4d:c6:47:4f:1f:f2:65:12:fb:ac:ff:45:d4:
                    c0:79:3a:e1:09:ec:f0:5e:f3:50:45:e4:1f:53:c4:
                    18:3a:95:cd:60:21:f5:ab:50:99:4a:2f:b3:0c:2e:
                    b5:19:09:ae:78:18:09:08:2d:43:40:fc:4c:d2:53:
                    8d:40:6f:14:6a:4f:13:23:d4:f9:69:63:fd:d6:b7:
                    34:57:c6:a4:28:0c:9e:ba:b8:e3:12:c0:93:da:a8:
                    6b:2b:fe:6c:2a:a6:e8:62:a4:8d:4f:c1:e4:23:21:
                    34:7c:ba:b1:e3:85:73:1e:86:90:81:86:12:14:e6:
                    c2:4c:4e:1e:0a:f7:86:17:1f:4c:84:07:f0:95:34:
                    71:c1:0b:d7:e0:16:17:ee:21:d3:0a:30:63:4e:a0:
                    e8:9f:8d:bc:c8:36:cd:78:3a:19:36:bc:eb:83:07:
                    a2:3d:d1:2f:2b:55:e0:f8:96:cf:c4:c5:36:fb:90:
                    86:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9A:AD:45:02:68:47:B6:4A:85:E3:A2:DA:14:56:2E:98:62:24:2E
            X509v3 Authority Key Identifier:
                keyid:FF:94:1E:14:D5:CF:47:AE:65:FB:FC:53:B7:F5:77:CE:C7:1B:B7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FF941E14D5CF47AE65FBFC53B7F577CEC71BB790.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/188A1D498C301AA156F811C7CD8E22590AA546D5DFA3EF07CD6505314978787C/0/323830313a31623a343830303a3a2f34382d3438203d3e20323639383434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         bd:d4:d2:07:a9:32:7f:b2:63:c0:f2:89:ee:95:8b:40:b5:db:
         06:89:cb:15:e7:ab:57:a3:25:a6:bf:1a:56:10:90:21:c0:9d:
         2a:f5:99:d5:be:94:3f:d9:c7:57:f7:aa:db:1c:be:89:e0:30:
         94:fa:09:34:5d:87:c4:1c:4f:bc:f8:de:f5:68:97:25:2b:cb:
         44:49:42:99:fe:6e:e2:63:75:13:e6:a0:a4:87:44:48:7e:17:
         68:50:bb:d7:11:7c:5d:15:09:7f:78:70:d9:97:81:c7:ee:73:
         46:bd:72:00:5a:48:73:c7:d2:47:d9:95:6b:78:af:b0:e1:ea:
         1a:12:8f:e6:08:55:27:cf:03:df:19:ee:1b:4c:8b:27:46:bb:
         12:bd:f6:8a:9e:ac:3a:eb:2f:23:fd:56:4f:73:2e:41:bf:8a:
         e9:68:7e:ea:e5:0c:a4:b8:e5:44:60:b3:76:de:81:f1:3d:76:
         77:28:21:8a:a6:3d:76:5e:bd:9a:69:40:99:62:7a:70:8c:a9:
         76:1a:57:eb:63:a3:5d:f5:57:01:f3:3d:5b:11:bb:45:0e:2d:
         4b:50:35:62:f6:41:ab:3c:b9:11:c0:74:4f:db:cb:08:02:c0:
         8b:66:28:1e:3c:28:a8:85:ff:4b:28:9f:0d:8b:8b:c7:2e:a7:
         78:d8:9f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----