Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C8AD6BEB030F7573700A80D5E7CBA554A2B7FE8BCCA77BB7D0FF47FF1AE70C/0/323830313a31353a653830303a3a2f34342d3438203d3e20323733393130.roa
File:                     323830313a31353a653830303a3a2f34342d3438203d3e20323733393130.roa (raw, json)
Hash identifier:          m9FW3s6Q6MCeObzhzKQrhh49YgyPA4L1Ze4iUHy7J9c=
Subject key identifier:   41:5D:CC:A1:6D:6B:1B:F8:32:64:52:EA:D7:8B:2C:F4:F0:DD:C1:A6
Certificate issuer:       /CN=7E11514030C48301E6A8548A756987670C000312
Certificate serial:       4DF0047114BF59BDB8108C19A7178F39DFB8F2C3
Authority key identifier: 7E:11:51:40:30:C4:83:01:E6:A8:54:8A:75:69:87:67:0C:00:03:12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E11514030C48301E6A8548A756987670C000312.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22C8AD6BEB030F7573700A80D5E7CBA554A2B7FE8BCCA77BB7D0FF47FF1AE70C/0/323830313a31353a653830303a3a2f34342d3438203d3e20323733393130.roa
Signing time:             Fri 25 Oct 2024 20:50:00 +0000
ROA not before:           Fri 25 Oct 2024 20:45:00 +0000
ROA not after:            Fri 24 Oct 2025 20:50:00 +0000
asID:                     273910
IP address blocks:        2801:15:e800::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f0:04:71:14:bf:59:bd:b8:10:8c:19:a7:17:8f:39:df:b8:f2:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E11514030C48301E6A8548A756987670C000312
        Validity
            Not Before: Oct 25 20:45:00 2024 GMT
            Not After : Oct 24 20:50:00 2025 GMT
        Subject: CN=415DCCA16D6B1BF8326452EAD78B2CF4F0DDC1A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6c:2b:77:01:31:ca:ee:72:28:71:29:b2:19:
                    0b:df:39:cc:64:47:1c:1e:55:f7:b3:27:95:37:f7:
                    96:85:b1:92:9b:45:9b:08:68:a8:a7:80:fa:7e:da:
                    c6:17:07:29:89:c0:44:0d:e6:e4:a7:76:92:0f:2d:
                    3b:ae:33:9f:11:87:a2:69:85:92:21:34:3f:ec:c8:
                    f7:7b:26:5b:3c:5b:f8:3d:2b:c4:18:97:0a:24:60:
                    8e:15:15:96:96:17:47:e4:fa:8b:75:d0:77:af:f0:
                    d2:a7:2d:42:e7:82:90:b1:17:28:b3:fd:68:80:ed:
                    e7:e4:f3:cc:2c:08:56:72:38:fb:0a:c0:e8:2f:b7:
                    c5:7f:d0:52:03:26:5f:20:77:d7:dd:9d:71:7f:a2:
                    d8:d4:89:c3:c2:55:22:b5:68:95:42:f4:36:82:04:
                    c9:8e:6c:00:f1:fe:e6:4c:f4:dc:ee:30:af:c8:ac:
                    98:0a:46:fa:5d:9d:45:f2:d9:5a:80:a6:38:e6:12:
                    3f:93:d2:2e:90:08:dc:cf:8b:71:d5:5f:f4:3c:06:
                    f8:69:e3:20:08:96:14:d7:b1:0c:74:fc:58:1e:53:
                    83:f3:ff:93:23:f7:72:35:78:e8:98:71:da:a2:b0:
                    c1:12:52:cd:45:46:31:7c:b7:cd:42:8d:10:3b:02:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5D:CC:A1:6D:6B:1B:F8:32:64:52:EA:D7:8B:2C:F4:F0:DD:C1:A6
            X509v3 Authority Key Identifier:
                keyid:7E:11:51:40:30:C4:83:01:E6:A8:54:8A:75:69:87:67:0C:00:03:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22C8AD6BEB030F7573700A80D5E7CBA554A2B7FE8BCCA77BB7D0FF47FF1AE70C/0/7E11514030C48301E6A8548A756987670C000312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E11514030C48301E6A8548A756987670C000312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C8AD6BEB030F7573700A80D5E7CBA554A2B7FE8BCCA77BB7D0FF47FF1AE70C/0/323830313a31353a653830303a3a2f34342d3438203d3e20323733393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:e800::/44

    Signature Algorithm: sha256WithRSAEncryption
         bf:27:7c:b6:7b:11:f2:44:fa:f5:a5:97:bf:40:9e:2e:00:5d:
         fd:97:37:9b:8a:d8:fd:2a:03:07:65:1c:5c:66:57:1b:41:ad:
         d4:71:fe:a6:5a:1e:92:26:47:80:15:0b:f6:af:9d:29:1b:65:
         84:d0:a3:fb:e3:a5:c5:78:48:8b:4a:1f:d1:af:85:a3:64:c6:
         d7:ad:b5:c9:17:2e:c9:19:ec:1d:26:e1:ac:d3:b6:41:ef:be:
         0f:49:b1:cc:97:66:5b:6d:53:3a:b7:f4:b8:73:c2:9b:7b:33:
         e6:a4:e3:13:bc:4c:f8:bf:5a:00:6e:c5:40:8a:dc:31:bd:7f:
         5b:8d:a2:b4:b9:96:5b:2d:c6:aa:fd:45:25:91:c9:13:57:22:
         80:91:e3:3c:eb:55:41:d9:f3:dd:59:0b:ef:8a:5a:a2:64:42:
         3d:c2:66:20:d9:e4:86:c2:30:cf:72:46:f8:2d:ba:f2:e4:11:
         59:5b:6b:4f:86:e4:f8:20:02:08:04:10:dc:da:a3:b7:9c:ec:
         f2:26:71:b1:a1:50:5c:ef:1e:df:17:7a:1c:b5:d8:60:1f:e6:
         b8:98:86:f7:2c:c1:f7:1b:41:dd:dd:62:d1:7f:37:62:90:17:
         cd:0a:03:2e:6a:86:7f:17:32:5e:aa:30:0c:47:47:95:db:ad:
         66:c0:1e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----