Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          zX0pOORPqboeILKnAMeOw5ki8U/PjMA6dGh7zKiliRI=
Subject key identifier:   BB:56:CA:AE:A5:E7:5B:5B:03:B8:F7:BA:5D:2B:1A:42:B8:D1:28:BC
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       39C65DDD2EC69C0791201B7E96C7BE6D5A1B0622
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:18 +0000
ROA not before:           Tue 05 Mar 2024 18:11:18 +0000
ROA not after:            Tue 04 Mar 2025 18:16:18 +0000
asID:                     262191
IP address blocks:        2800:b70:20::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:c6:5d:dd:2e:c6:9c:07:91:20:1b:7e:96:c7:be:6d:5a:1b:06:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:18 2024 GMT
            Not After : Mar  4 18:16:18 2025 GMT
        Subject: CN=BB56CAAEA5E75B5B03B8F7BA5D2B1A42B8D128BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:7d:81:ce:b0:e1:23:49:29:f0:a5:c1:ed:
                    fe:83:dd:74:7b:46:67:e4:92:c1:ae:95:68:d7:c9:
                    00:b8:54:4c:fc:e2:5e:0f:95:cf:94:e6:f2:4c:22:
                    44:72:99:c8:16:60:ca:a5:a9:a8:ca:b1:47:5c:12:
                    57:bc:fa:89:57:a7:11:40:64:80:23:80:bb:33:65:
                    cb:51:d3:ec:43:32:74:bf:94:d8:f1:06:ba:4d:69:
                    a5:55:fe:07:31:98:b5:dc:9a:37:01:03:dd:f0:79:
                    72:5f:ca:ed:40:2d:4c:3d:8b:44:c6:e6:e5:e7:51:
                    69:fc:5b:2f:44:4d:67:65:43:f0:c7:e8:0e:a3:10:
                    16:46:0b:f3:85:f3:8f:31:db:f4:2a:35:0a:15:c7:
                    8a:23:63:4a:46:43:71:6d:11:5a:8a:a4:c7:0c:40:
                    4b:30:95:46:c6:dc:1c:62:a3:ec:0a:ce:fe:b1:fa:
                    36:82:7f:5b:c9:4c:70:b0:86:89:ae:cd:74:8c:84:
                    82:e6:d7:0f:9b:2f:ad:81:8e:ab:f1:8b:8a:0f:2b:
                    16:dd:3a:b1:63:24:4b:5d:36:f3:f6:ee:88:3e:2f:
                    8d:8f:94:d4:01:31:01:d7:19:41:e1:42:7b:4a:72:
                    ee:b5:20:f6:26:95:38:8d:0c:0f:88:78:11:13:b7:
                    48:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:56:CA:AE:A5:E7:5B:5B:03:B8:F7:BA:5D:2B:1A:42:B8:D1:28:BC
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a32303a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:80:44:8f:e9:9c:c6:ed:f4:a0:2f:5f:62:37:5a:95:cc:6e:
         c0:8c:f8:ac:d0:5f:56:6e:e4:cf:03:54:56:32:cc:e7:0f:50:
         18:ff:35:15:8c:4a:44:24:7d:07:4a:da:a4:37:31:70:c5:73:
         5f:a5:72:9d:39:dd:c5:30:a1:3e:fe:6b:45:97:13:b8:b0:84:
         3d:49:78:ae:41:15:1c:70:76:83:44:36:7b:7f:66:f1:d9:4f:
         3c:6f:3e:52:f8:15:5c:c4:9f:bf:fd:72:9c:1a:0a:c3:7a:bf:
         1c:85:ca:c6:81:e2:24:65:05:ef:6b:21:c1:fc:41:90:48:04:
         2e:77:99:9f:1c:65:f1:90:92:b2:56:63:be:99:b2:f0:e6:9a:
         5c:fd:00:69:dc:5d:8e:a0:0b:f9:40:4f:7d:1d:83:b8:19:69:
         f3:84:a0:4a:ac:54:6d:2a:b2:40:5d:69:fc:b7:cf:5c:ae:6b:
         d8:c9:ea:6d:2d:1a:a5:9b:d8:e8:12:fe:be:3e:db:55:eb:b8:
         46:1a:93:11:cc:89:e6:ee:51:f3:d9:f5:21:93:af:b5:f9:ec:
         3c:28:3d:a0:54:13:8b:76:82:f4:25:28:44:04:05:34:f5:eb:
         f4:e0:e5:79:c7:fe:fa:3e:8a:bb:b6:49:9d:ce:2b:1f:28:61:
         91:5b:43:91
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUOcZd3S7GnAeRIBt+lse+bVobBiIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODVEOUU3RDlCRUVGRUQwQjlFMTg4REI3RThDQzNCNjQ4
OTA2NkRDRDAeFw0yNDAzMDUxODExMThaFw0yNTAzMDQxODE2MThaMDMxMTAvBgNV
BAMTKEJCNTZDQUFFQTVFNzVCNUIwM0I4RjdCQTVEMkIxQTQyQjhEMTI4QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvcH2BzrDhI0kp8KXB7f6D3XR7
RmfkksGulWjXyQC4VEz84l4Plc+U5vJMIkRymcgWYMqlqajKsUdcEle8+olXpxFA
ZIAjgLszZctR0+xDMnS/lNjxBrpNaaVV/gcxmLXcmjcBA93weXJfyu1ALUw9i0TG
5uXnUWn8Wy9ETWdlQ/DH6A6jEBZGC/OF848x2/QqNQoVx4ojY0pGQ3FtEVqKpMcM
QEswlUbG3Bxio+wKzv6x+jaCf1vJTHCwhomuzXSMhILm1w+bL62Bjqvxi4oPKxbd
OrFjJEtdNvP27og+L42PlNQBMQHXGUHhQntKcu61IPYmlTiNDA+IeBETt0jpAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUu1bKrqXnW1sDuPe6XSsaQrjRKLwwHwYDVR0j
BBgwFoAUhdnn2b7v7QueGI236Mw7ZIkGbc0wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8xQUQ3MjYxQzdGRDFFNEVGRUNFQkU2RjM2MkZDRDBDNzU2
OTdFMDZCNDE0NzRCRUE4Q0FCQzcwNkY3OUVDRjNELzAvODVEOUU3RDlCRUVGRUQw
QjlFMTg4REI3RThDQzNCNjQ4OTA2NkRDRC5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84NUQ5RTdEOUJFRUZFRDBCOUUx
ODhEQjdFOENDM0I2NDg5MDY2RENELmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMUFENzI2MUM3RkQxRTRFRkVDRUJFNkYzNjJGQ0QwQzc1Njk3RTA2QjQx
NDc0QkVBOENBQkM3MDZGNzlFQ0YzRC8wLzMyMzgzMDMwM2E2MjM3MzAzYTMyMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMjM2MzIzMTM5MzEucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AAtwACAwDQYJKoZIhvcNAQELBQADggEBADGARI/pnMbt9KAvX2I3WpXMbsCM+KzQ
X1Zu5M8DVFYyzOcPUBj/NRWMSkQkfQdK2qQ3MXDFc1+lcp053cUwoT7+a0WXE7iw
hD1JeK5BFRxwdoNENnt/ZvHZTzxvPlL4FVzEn7/9cpwaCsN6vxyFysaB4iRlBe9r
IcH8QZBIBC53mZ8cZfGQkrJWY76ZsvDmmlz9AGncXY6gC/lAT30dg7gZafOEoEqs
VG0qskBdafy3z1yua9jJ6m0tGqWb2OgS/r4+21XruEYakxHMiebuUfPZ9SGTr7X5
7DwoPaBUE4t2gvQlKEQEBTT16/Tg5XnH/vo+iru2SZ3OKx8oYZFbQ5E=
-----END CERTIFICATE-----