Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a383a3a2f34372d3438203d3e20323632313931.roa
File:                     323830303a6237303a383a3a2f34372d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          UqVhHJtsK6WE4f0qBjjCcLOxp4JkguH5BacFKIcNm9Q=
Subject key identifier:   E9:BA:6C:B2:9B:21:F0:D6:6C:E0:99:19:18:8B:4A:95:70:4F:51:E3
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       34F4506E5003461CDE095D5B9911E82205A9C11E
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a383a3a2f34372d3438203d3e20323632313931.roa
Signing time:             Tue 05 Mar 2024 18:16:13 +0000
ROA not before:           Tue 05 Mar 2024 18:11:13 +0000
ROA not after:            Tue 04 Mar 2025 18:16:13 +0000
asID:                     262191
IP address blocks:        2800:b70:8::/47 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f4:50:6e:50:03:46:1c:de:09:5d:5b:99:11:e8:22:05:a9:c1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Mar  5 18:11:13 2024 GMT
            Not After : Mar  4 18:16:13 2025 GMT
        Subject: CN=E9BA6CB29B21F0D66CE09919188B4A95704F51E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:2d:45:4b:2f:e7:d8:5a:fb:14:f6:16:c2:
                    5a:9a:4a:f2:99:8b:9b:27:dd:d1:74:89:6b:c3:c5:
                    df:2f:d0:3c:84:46:36:dd:6f:4c:89:97:15:9e:80:
                    df:cf:06:79:d6:93:bf:c2:6e:92:96:f9:87:f3:73:
                    ab:26:78:18:c0:4e:cf:34:b0:b6:54:02:f8:91:bf:
                    fc:be:22:61:90:dc:0f:15:ba:c2:4b:6b:ef:c7:59:
                    6d:d7:e4:8c:d6:d8:d6:5a:48:1e:2d:e2:a6:cb:80:
                    02:84:2a:f5:dd:fe:4a:be:35:b3:8d:61:86:af:8b:
                    cc:07:ae:a6:ce:0c:77:c1:33:71:42:c7:13:08:2d:
                    a7:c8:b5:01:ce:bc:0c:16:75:b9:3b:7b:8f:c1:27:
                    6d:f3:81:b7:71:b6:72:04:f8:5c:f4:33:d6:dc:e1:
                    f1:e1:9b:83:54:07:46:49:3d:1e:fe:d3:0a:df:e3:
                    99:28:1e:56:a7:10:7f:6f:b0:7a:a4:e9:eb:dc:7f:
                    50:6c:7d:1e:90:bc:33:9f:7a:ac:8d:89:14:2d:0d:
                    7c:b1:fb:e2:1f:43:80:95:b0:4a:e5:ca:36:90:88:
                    4e:17:0b:b7:d2:f1:44:85:be:70:9a:b6:66:44:b8:
                    56:26:35:99:3a:c2:2e:93:77:29:2e:93:09:1d:9f:
                    1f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BA:6C:B2:9B:21:F0:D6:6C:E0:99:19:18:8B:4A:95:70:4F:51:E3
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a383a3a2f34372d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:8::/47

    Signature Algorithm: sha256WithRSAEncryption
         88:c6:98:1b:a4:6e:d8:ba:1b:83:1c:91:34:b4:24:e8:2d:53:
         a3:2e:2e:b6:de:da:7f:3d:96:9a:7a:98:7a:50:5e:9e:83:a1:
         90:06:bd:52:9c:3f:84:57:5c:dc:f6:e0:a3:65:1a:a9:31:c2:
         ef:f0:41:38:61:b5:5d:28:2a:b1:c8:56:76:32:a5:ec:fd:51:
         34:86:3e:53:f6:a4:6d:6a:13:5e:77:c9:6d:b4:04:7b:ee:24:
         74:c2:2f:3e:49:9a:b1:57:7b:59:cf:8b:79:22:4d:0f:c8:68:
         64:51:70:e5:4e:ab:ec:f7:19:d5:28:da:64:b5:51:36:6e:86:
         62:64:c3:83:00:3d:03:05:58:4a:45:22:cf:83:db:66:cc:14:
         0d:c8:31:74:1b:ae:5b:66:34:9f:1f:8b:da:2a:ee:32:82:f7:
         77:da:b3:3d:00:16:79:91:04:9b:c3:8b:ca:9e:4d:de:bf:22:
         6c:54:95:5b:e1:f4:3a:cc:84:09:be:4b:26:0e:b0:cd:01:fd:
         30:e1:32:be:2a:df:3b:48:a0:13:5b:5c:94:6b:99:31:db:16:
         99:77:c7:0d:0a:1c:95:a5:65:c5:3e:82:0a:27:c6:e9:68:01:
         e0:e6:49:ff:b9:c3:87:9c:65:f6:f0:11:38:dd:86:cd:32:8f:
         13:7f:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----