Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/323830313a31323a373030303a3a2f34382d3438203d3e20323636373337.roa
File:                     323830313a31323a373030303a3a2f34382d3438203d3e20323636373337.roa (raw, json)
Hash identifier:          MhI+fZo7aMLJDuOEHYx19okM+k7tBuC6nHlKLCoa6iw=
Subject key identifier:   B6:53:CC:99:7C:80:7B:4B:0A:AD:2F:7A:3F:3E:95:E9:0A:9C:8B:0E
Certificate issuer:       /CN=69D4A331FF0D28734F9E4E330ED38A514B7DB5BD
Certificate serial:       5277D26BE3944905488B73C6C2617622E644FCF8
Authority key identifier: 69:D4:A3:31:FF:0D:28:73:4F:9E:4E:33:0E:D3:8A:51:4B:7D:B5:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/323830313a31323a373030303a3a2f34382d3438203d3e20323636373337.roa
Signing time:             Tue 05 Mar 2024 18:11:07 +0000
ROA not before:           Tue 05 Mar 2024 18:06:07 +0000
ROA not after:            Tue 04 Mar 2025 18:11:07 +0000
asID:                     266737
IP address blocks:        2801:12:7000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:77:d2:6b:e3:94:49:05:48:8b:73:c6:c2:61:76:22:e6:44:fc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69D4A331FF0D28734F9E4E330ED38A514B7DB5BD
        Validity
            Not Before: Mar  5 18:06:07 2024 GMT
            Not After : Mar  4 18:11:07 2025 GMT
        Subject: CN=B653CC997C807B4B0AAD2F7A3F3E95E90A9C8B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:f9:d1:5a:e4:6e:e0:3f:18:35:67:a5:9a:
                    8b:c7:43:cf:8b:10:13:bf:d4:ea:14:6a:06:15:fc:
                    53:42:4f:c2:14:6e:df:90:59:77:2d:da:8a:ff:58:
                    8a:64:e8:ef:9c:89:22:b4:e4:dd:81:05:08:d2:bd:
                    bb:22:e4:18:38:48:90:1e:10:1e:bb:3b:74:93:0d:
                    cb:86:52:ca:fa:e5:d3:4a:36:23:c2:ec:7d:83:0f:
                    7a:70:94:c2:0e:11:36:e9:af:a3:29:50:3d:92:15:
                    22:45:5e:03:e7:d0:66:02:91:fe:42:cc:1a:3a:9a:
                    10:dc:5c:91:73:0f:2a:c5:64:2b:09:49:1c:c5:48:
                    d0:1e:ea:40:61:23:af:d8:b7:f9:d5:20:bc:64:e4:
                    b5:a9:10:f7:bc:af:09:91:bc:69:a8:98:f0:41:8f:
                    13:34:55:0c:3a:9e:be:f5:c0:30:e8:6f:45:1f:0d:
                    38:1c:fb:91:ef:61:71:44:94:bc:01:f9:5d:9a:4e:
                    7d:dd:01:23:96:a9:d9:26:9e:81:f1:af:fd:86:11:
                    3c:cc:41:c3:f9:56:97:83:65:39:cc:24:83:85:8a:
                    1b:bf:b0:fa:d8:ea:49:f8:ad:63:a6:0b:7e:d6:ee:
                    67:9b:19:d7:1f:07:cd:fc:d2:b6:df:15:b9:09:7c:
                    1b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:53:CC:99:7C:80:7B:4B:0A:AD:2F:7A:3F:3E:95:E9:0A:9C:8B:0E
            X509v3 Authority Key Identifier:
                keyid:69:D4:A3:31:FF:0D:28:73:4F:9E:4E:33:0E:D3:8A:51:4B:7D:B5:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/69D4A331FF0D28734F9E4E330ED38A514B7DB5BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2135A998E86B5C4ECFB76641F6486F118CB29BCBD993DE9C09B9EB22235F15EB/0/323830313a31323a373030303a3a2f34382d3438203d3e20323636373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:f4:3d:79:ba:71:e6:3a:f2:d3:66:e6:27:27:5c:da:1c:ff:
         75:38:f9:3c:b7:bd:aa:ab:2e:82:f1:14:de:f7:03:c8:d4:6e:
         c2:86:ec:bb:bf:40:05:bf:11:ea:cc:2d:c2:6e:08:6e:d2:e9:
         7b:3f:bc:ea:88:9f:d7:5f:f5:a1:e6:74:11:05:d4:2f:d8:8d:
         09:21:a9:41:79:27:43:82:ab:64:ca:52:71:b7:66:ae:22:e9:
         77:0b:3e:44:ea:92:2a:7a:8d:95:de:84:b4:92:8b:9d:d3:f4:
         cb:4c:72:b8:30:37:c2:21:3b:05:fc:ba:71:96:73:ba:72:b5:
         b1:89:2e:41:0e:98:bd:8c:32:2c:b2:e6:c5:ac:78:f6:fe:c1:
         7d:f7:d4:67:10:54:e4:7e:06:fd:35:dd:c4:d5:f3:67:b2:83:
         8d:d7:a2:2e:eb:c5:f6:56:09:97:0c:a6:0f:02:81:55:c1:ce:
         94:5f:70:ef:f0:d1:7b:3e:bb:4e:fe:ef:2a:9d:d2:90:48:12:
         83:a0:2e:39:f0:2b:12:d2:67:1f:9b:df:01:86:c7:66:c1:02:
         7d:d6:88:78:15:ff:64:63:5d:38:22:6b:c1:95:3a:78:f0:70:
         03:2e:c6:04:4d:77:54:27:ba:9a:49:97:68:38:87:0d:11:ce:
         6e:ac:9a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----