Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130303a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a3130303a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          /UZNZZdenkZm8D/k5IT1d8p4/tDBcvTuI7YwsM5POxk=
Subject key identifier:   2A:18:EB:A9:01:93:A6:77:85:9D:64:E8:7D:B1:C9:82:48:72:40:93
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       4B765E6FEE43E893D2A89828CF514116F5C17E02
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130303a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:22 +0000
ROA not before:           Tue 05 Mar 2024 18:11:22 +0000
ROA not after:            Tue 04 Mar 2025 18:16:22 +0000
asID:                     262191
IP address blocks:        2800:b70:100::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:76:5e:6f:ee:43:e8:93:d2:a8:98:28:cf:51:41:16:f5:c1:7e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:22 2024 GMT
            Not After : Mar  4 18:16:22 2025 GMT
        Subject: CN=2A18EBA90193A677859D64E87DB1C98248724093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:54:05:79:0b:27:48:05:64:f4:bf:21:cf:32:
                    aa:c4:5d:b3:bd:1f:b0:70:15:2f:7a:16:84:00:a2:
                    3d:52:bc:f7:f9:4f:4b:7e:23:44:64:2a:a3:1c:8d:
                    64:11:23:15:b5:11:6c:46:d6:8c:2f:2f:a1:29:ed:
                    cc:31:1d:19:14:18:fa:8d:84:7d:21:d4:02:63:5e:
                    c0:fe:f9:18:37:3d:07:bf:61:03:7c:92:f8:9d:67:
                    c1:02:5d:25:d7:13:8d:78:81:20:5a:ec:e4:37:22:
                    d9:8f:ed:65:25:bd:b6:78:0b:45:b8:04:d6:be:bf:
                    d9:9a:24:6f:96:ef:e9:a6:82:62:10:00:78:8f:ef:
                    a1:e9:78:d1:f4:4c:57:32:7d:84:e8:07:a6:ce:cd:
                    6d:3f:9a:30:53:20:1b:fe:fb:31:fb:5b:fa:24:35:
                    e3:73:3c:68:a6:f7:89:1f:10:e1:a6:c9:4e:51:b0:
                    b7:d6:2d:59:96:7e:8d:0f:b6:6e:c8:3f:95:e8:6b:
                    6c:a4:23:ec:2f:17:82:01:3e:b0:5f:a5:22:6a:c1:
                    8b:ee:63:d3:04:b0:3f:2d:ec:01:b4:96:b2:75:e5:
                    a0:b2:07:bd:81:5c:8a:13:8f:26:4c:2d:3d:81:75:
                    d0:b1:39:c6:3d:9d:f2:a8:c2:64:a9:cb:f8:4c:78:
                    b4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:18:EB:A9:01:93:A6:77:85:9D:64:E8:7D:B1:C9:82:48:72:40:93
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a3130303a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:b1:80:76:ce:35:00:79:0d:b2:9c:cb:af:e2:0f:a0:1f:
         51:01:af:92:34:5d:ae:29:32:a3:06:bd:45:4a:74:dd:ea:b5:
         12:75:92:01:cd:ab:34:f8:13:8a:b4:ec:e2:1a:a3:87:ce:78:
         c4:80:cb:3d:fe:11:c4:b5:3c:8a:d6:8e:7f:a8:de:04:6d:60:
         7b:22:ca:da:50:63:bb:19:e4:77:ea:db:52:f2:db:36:dd:9c:
         30:f1:30:f8:29:20:e4:30:10:c5:ed:33:1d:ae:ee:84:65:08:
         c2:11:54:08:ae:02:f8:32:3e:fa:46:32:9f:93:7e:c5:de:27:
         77:7e:80:a8:18:df:60:01:e6:45:23:85:21:84:32:fe:d1:b7:
         14:f7:2f:64:d1:9d:fd:6e:c1:71:ab:dc:37:0e:08:7f:59:e0:
         6a:25:82:8c:c4:c3:f6:a9:9e:75:97:75:ef:e7:8f:95:0e:d1:
         80:68:b7:ba:83:77:59:32:3b:b2:c3:f8:ea:ec:5f:17:f5:40:
         0d:cd:df:08:6a:80:51:ff:20:42:43:49:5e:e6:5e:00:c8:77:
         34:30:3e:ea:1b:9d:78:35:e7:3b:ff:c1:b2:09:5c:13:ab:f2:
         21:98:04:41:bb:f5:31:f2:31:53:a9:72:86:6d:94:ff:9d:e1:
         8c:0b:2a:23
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUS3Zeb+5D6JPSqJgoz1FBFvXBfgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNDAzMDUxODExMjJaFw0yNTAzMDQxODE2MjJaMDMxMTAvBgNV
BAMTKDJBMThFQkE5MDE5M0E2Nzc4NTlENjRFODdEQjFDOTgyNDg3MjQwOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyVAV5CydIBWT0vyHPMqrEXbO9
H7BwFS96FoQAoj1SvPf5T0t+I0RkKqMcjWQRIxW1EWxG1owvL6Ep7cwxHRkUGPqN
hH0h1AJjXsD++Rg3PQe/YQN8kvidZ8ECXSXXE414gSBa7OQ3ItmP7WUlvbZ4C0W4
BNa+v9maJG+W7+mmgmIQAHiP76HpeNH0TFcyfYToB6bOzW0/mjBTIBv++zH7W/ok
NeNzPGim94kfEOGmyU5RsLfWLVmWfo0Ptm7IP5Xoa2ykI+wvF4IBPrBfpSJqwYvu
Y9MEsD8t7AG0lrJ15aCyB72BXIoTjyZMLT2BddCxOcY9nfKowmSpy/hMeLSRAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUKhjrqQGTpneFnWTofbHJgkhyQJMwHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMxMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzYzMjMxMzkzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgAC3ABADANBgkqhkiG9w0BAQsFAAOCAQEAf9exgHbONQB5DbKcy6/iD6AfUQGv
kjRdrikyowa9RUp03eq1EnWSAc2rNPgTirTs4hqjh854xIDLPf4RxLU8itaOf6je
BG1geyLK2lBjuxnkd+rbUvLbNt2cMPEw+Ckg5DAQxe0zHa7uhGUIwhFUCK4C+DI+
+kYyn5N+xd4nd36AqBjfYAHmRSOFIYQy/tG3FPcvZNGd/W7BcavcNw4If1ngaiWC
jMTD9qmedZd17+ePlQ7RgGi3uoN3WTI7ssP46uxfF/VADc3fCGqAUf8gQkNJXuZe
AMh3NDA+6hudeDXnO//BsglcE6vyIZgEQbv1MfIxU6lyhm2U/53hjAsqIw==
-----END CERTIFICATE-----