Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a323a3a2f34372d3438203d3e20323632313931.roa
File:                     323830303a6237303a323a3a2f34372d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          /vLH2RD7TM/4nGsGunwlaBfbO5xha9HMHdBBqmeR1xk=
Subject key identifier:   8B:5D:E2:8D:70:50:A5:15:7E:43:B6:27:CA:68:AC:FA:7C:32:58:A7
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       1F9A074286CFD22BE49BBE2E0BA183A5F9ED18F7
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a323a3a2f34372d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:22 +0000
ROA not before:           Tue 05 Mar 2024 18:11:22 +0000
ROA not after:            Tue 04 Mar 2025 18:16:22 +0000
asID:                     262191
IP address blocks:        2800:b70:2::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9a:07:42:86:cf:d2:2b:e4:9b:be:2e:0b:a1:83:a5:f9:ed:18:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:22 2024 GMT
            Not After : Mar  4 18:16:22 2025 GMT
        Subject: CN=8B5DE28D7050A5157E43B627CA68ACFA7C3258A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ab:88:b2:1a:25:52:d5:9c:53:fb:f7:af:0e:
                    a9:22:c0:f7:25:02:d6:4e:23:79:9d:7d:1b:e4:18:
                    3a:ea:67:b3:86:a4:2e:90:46:f5:fd:a9:cb:71:2d:
                    03:9c:46:22:d4:f3:15:40:b6:20:63:53:6d:45:4d:
                    a4:3f:5e:8f:bc:9d:52:e4:4e:55:7e:aa:d6:42:a7:
                    26:77:07:d9:75:8c:62:28:fe:e5:56:72:8a:89:4f:
                    68:e4:a4:c1:d3:dd:34:9a:9c:86:16:d2:70:33:d7:
                    f2:22:b3:a7:35:ed:91:c1:61:60:7a:69:34:ab:a0:
                    ea:eb:02:05:43:32:10:36:85:b0:6e:35:10:7e:0d:
                    ed:ca:53:ca:11:fb:04:92:ff:2c:c3:74:ac:20:a5:
                    07:a8:6b:a2:6e:a6:50:f9:9e:a5:f6:06:a8:ee:f8:
                    98:0c:5f:94:d3:e8:fe:ff:a6:da:26:bb:aa:e4:ff:
                    ea:4a:f0:0d:33:da:42:55:0d:c0:b7:28:19:06:4a:
                    2e:e6:ee:14:a0:ff:ee:14:84:fa:be:53:be:e5:7d:
                    df:d2:a2:92:58:ed:01:d6:2d:a9:ac:0a:c6:25:98:
                    6b:75:f8:2f:7b:31:02:19:cb:f2:69:44:41:70:c6:
                    6f:cb:52:10:bc:70:c2:42:bb:a3:57:1d:68:4d:ca:
                    9f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5D:E2:8D:70:50:A5:15:7E:43:B6:27:CA:68:AC:FA:7C:32:58:A7
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a323a3a2f34372d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:2::/47

    Signature Algorithm: sha256WithRSAEncryption
         07:d5:1c:a0:42:3c:52:68:e3:dd:95:6f:5e:4e:91:78:e7:79:
         43:8a:79:4a:0e:f8:8f:6d:b1:c1:49:45:d1:0f:64:d8:7b:d7:
         3a:fe:a4:70:d2:53:88:39:99:08:c0:8d:b6:3a:56:e0:25:11:
         06:e4:ec:99:75:40:19:c5:31:a7:de:58:82:04:2d:35:b4:34:
         2d:7d:e0:4d:1d:9f:4b:64:ee:9a:f8:1e:14:01:93:9b:ad:2a:
         39:18:f2:93:3d:69:13:bd:86:81:2c:00:50:0f:29:33:88:aa:
         fa:41:4e:fc:ce:5e:f6:cf:a2:ff:b1:ca:43:fb:6c:19:b8:29:
         af:6e:cb:c6:a8:d3:a2:b6:30:ba:22:97:6c:11:6a:0e:e6:b0:
         d3:0f:3c:2b:93:3d:0c:5e:2a:02:55:f3:fa:dd:7c:bf:ef:2c:
         32:99:c4:5e:9b:f4:89:ab:7a:e9:a3:4d:7a:48:f6:dd:03:1b:
         dd:d5:60:5d:45:0b:32:c0:71:57:1b:90:c3:3b:e0:af:b1:51:
         e3:6e:a8:b3:d9:90:7b:c6:21:a2:60:60:ce:55:2e:09:b0:b7:
         b3:6e:62:62:0d:8d:36:a9:5d:cc:fc:b3:d3:0a:7a:0b:53:48:
         aa:6f:fd:d1:3e:8e:17:55:b5:db:8f:78:6e:65:90:99:ab:df:
         97:57:9e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----