Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a343a3a2f34362d3438203d3e20323632313931.roa
File:                     323830303a6237303a343a3a2f34362d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          4mMkfH2mIv0X4goEAU4NJxLTO0ARvwCNNcejxIqwB4A=
Subject key identifier:   75:AF:64:80:38:29:E1:80:27:38:D6:BB:4C:60:82:E3:07:20:11:F7
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       294FCCA93EB2992CC478E608A076DE70BADE2EDE
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a343a3a2f34362d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:08 +0000
ROA not before:           Tue 05 Mar 2024 18:11:08 +0000
ROA not after:            Tue 04 Mar 2025 18:16:08 +0000
asID:                     262191
IP address blocks:        2800:b70:4::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4f:cc:a9:3e:b2:99:2c:c4:78:e6:08:a0:76:de:70:ba:de:2e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:08 2024 GMT
            Not After : Mar  4 18:16:08 2025 GMT
        Subject: CN=75AF64803829E1802738D6BB4C6082E3072011F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1d:ad:00:31:f8:f8:85:6b:de:82:d5:e7:76:
                    65:4d:2c:02:95:08:37:87:9d:a0:ea:f9:a5:71:f5:
                    6c:0c:38:7a:0b:f1:15:b6:86:ce:5f:98:97:9c:a7:
                    d4:4e:59:ae:1f:40:c5:f0:b9:51:0d:cc:e6:56:ec:
                    9d:5b:63:f9:e3:d4:99:06:61:d9:8f:cb:2e:0d:b4:
                    47:ad:bd:ea:62:32:5c:14:39:fd:30:3a:83:0b:fc:
                    aa:02:75:75:9a:20:2a:b6:19:9f:b8:ce:e3:c1:9a:
                    8a:d3:90:8b:cb:2e:92:2d:b8:48:99:76:e3:f7:e0:
                    97:3b:48:0c:10:6b:9d:23:ff:7a:12:c1:47:3f:71:
                    15:ec:c4:d9:75:fe:86:e1:d5:8b:40:2b:6a:e9:bc:
                    d4:88:01:f0:bf:72:03:46:98:46:50:20:a1:af:94:
                    fc:80:76:2a:a8:7c:c1:c4:dd:f7:15:9a:f8:61:e1:
                    9c:cf:e8:f5:29:7d:bd:13:18:fc:5b:6e:35:14:70:
                    13:02:9e:26:e8:04:f4:4f:e1:78:e7:b9:21:dd:44:
                    17:c7:fa:c9:80:0c:e3:a9:0c:12:7f:58:d4:71:7e:
                    5f:d6:39:e6:8f:05:d1:ed:63:9c:4e:3c:0e:e9:9c:
                    09:a8:94:29:d1:0f:aa:e4:1f:d8:af:a1:51:3b:cc:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AF:64:80:38:29:E1:80:27:38:D6:BB:4C:60:82:E3:07:20:11:F7
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a343a3a2f34362d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         8e:0d:a7:9a:79:e6:82:89:60:bc:45:b3:c0:10:97:91:d6:45:
         fb:b0:10:8f:7f:5c:ec:d6:8a:ab:cd:e7:93:a6:f8:9e:aa:40:
         c5:fb:77:43:5d:db:1a:24:e4:25:1e:7e:02:12:85:24:23:39:
         c0:66:ac:55:d0:4b:8c:58:23:d0:b6:3a:fb:cc:90:f3:b9:8d:
         17:db:2f:15:0a:32:65:68:17:cb:76:90:eb:26:cd:a7:59:a8:
         80:52:fe:1b:1c:d2:2b:ce:6b:c4:04:db:bf:a0:66:da:7e:a5:
         de:f7:5e:6b:25:3f:f9:88:9b:02:91:d9:53:9f:81:b7:dc:86:
         a0:92:54:2b:18:f9:91:4e:a3:8a:6f:bc:7b:79:64:32:16:71:
         89:cc:43:62:40:f0:c1:79:39:56:1a:61:10:3d:18:45:3b:33:
         ad:83:76:c6:92:fb:b9:fa:69:88:d8:43:69:6d:43:14:01:a5:
         d6:50:f1:b2:55:c4:79:0d:a2:c1:0e:8a:e9:74:06:23:5d:d7:
         30:2b:4f:4f:87:92:3f:d1:70:f5:6e:93:c2:71:49:05:38:32:
         88:ec:6e:e4:5d:2e:49:73:88:12:6c:f4:73:ae:c8:bd:6c:fd:
         59:a4:7d:fc:a7:5f:1f:62:99:5e:54:95:54:76:36:9c:df:a1:
         3b:6e:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----