Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a34393a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a34393a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          l259vw/XhkG62HUSYtpjPOZOOGDeB7JJMBmGNvaMvFU=
Subject key identifier:   A9:10:84:08:88:3D:CB:4F:E3:C2:6B:87:F8:54:5B:03:BC:D2:22:6D
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       1EB7F76A04641AAC4DB317F80871DF37247A89E5
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a34393a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 16 Dec 2024 11:25:01 +0000
ROA not before:           Mon 16 Dec 2024 11:20:01 +0000
ROA not after:            Mon 15 Dec 2025 11:25:01 +0000
asID:                     262249
IP address blocks:        2801:140:49::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:b7:f7:6a:04:64:1a:ac:4d:b3:17:f8:08:71:df:37:24:7a:89:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 16 11:20:01 2024 GMT
            Not After : Dec 15 11:25:01 2025 GMT
        Subject: CN=A9108408883DCB4FE3C26B87F8545B03BCD2226D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4d:79:17:0f:f6:97:78:a2:e1:a1:5e:99:b2:
                    51:59:ef:ea:15:29:31:8a:5c:09:42:a9:6b:23:4d:
                    50:65:7e:f4:77:09:66:37:ec:69:36:77:d8:e9:e9:
                    36:7b:62:13:6c:6a:51:be:92:7e:6c:c7:a9:79:0c:
                    c7:c5:cb:3d:12:00:54:cd:f8:07:0d:8c:cc:1f:04:
                    27:f7:05:48:c9:81:b3:5d:84:3b:92:bd:07:6f:1f:
                    d1:3a:10:5d:37:7a:81:23:f8:28:1a:05:a3:d3:a0:
                    c8:ec:7c:a3:00:40:7a:5f:1a:1c:65:b5:bc:2c:3b:
                    9b:b1:1b:32:47:8d:43:6b:6c:b1:ff:0c:8b:96:57:
                    f8:53:d9:59:b6:3e:14:a1:d0:bc:50:79:c3:65:bf:
                    98:90:94:cc:21:b6:ac:9a:82:21:af:c0:53:ef:ab:
                    c2:38:14:3e:b3:74:8d:c2:e6:e3:0c:31:9d:d4:25:
                    16:a9:60:81:8e:82:60:28:ff:16:ec:cb:d8:89:af:
                    cb:5a:19:de:6d:cc:24:dc:aa:c8:17:40:3c:37:ad:
                    86:ec:bd:db:eb:ab:ad:71:e8:f3:a3:79:9b:95:de:
                    23:f7:85:07:55:77:6b:fb:f2:aa:77:30:09:32:63:
                    cd:03:4b:4a:be:f5:49:ba:3a:28:08:58:38:5c:3d:
                    44:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:10:84:08:88:3D:CB:4F:E3:C2:6B:87:F8:54:5B:03:BC:D2:22:6D
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a34393a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:49::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:07:3b:11:f0:df:4e:aa:8e:d1:5d:a8:05:e0:c4:a4:f5:a4:
         2c:7b:62:bc:ce:cb:74:8f:4d:89:2d:0e:ca:79:4a:cb:55:35:
         a4:ae:74:35:10:28:3f:37:85:b7:cf:ec:23:ec:bd:5f:a9:41:
         77:13:8a:f3:f0:52:79:cd:f4:40:da:05:95:40:2b:0c:d8:b9:
         f1:8a:c8:e7:34:07:15:06:05:cd:ed:2b:cb:fa:67:78:f7:da:
         a8:ec:0c:7c:93:80:7b:73:1a:35:f9:3f:d2:0b:65:b6:93:39:
         83:97:d8:0f:b0:77:0e:48:ca:5e:76:42:7d:e5:e3:11:2f:d7:
         90:65:9f:5f:f4:55:08:4c:d6:91:65:ae:c7:e4:4b:21:e4:32:
         88:ad:f1:dd:85:59:91:c3:e6:25:2d:8f:d4:7a:12:2b:0e:33:
         13:6e:fe:53:0b:f2:e3:a8:6b:7b:6d:4a:ae:d5:29:26:1f:cf:
         e5:14:df:56:83:d0:47:9c:a9:fb:4e:d0:ca:9f:ec:c8:d6:a6:
         b1:98:d2:86:84:7f:c1:a4:aa:e3:c0:6a:ac:ab:c5:94:79:ca:
         87:93:6d:45:d4:8e:fb:33:5d:8d:b8:ed:c0:22:d2:4d:90:fc:
         56:79:7e:ef:77:66:2c:a7:89:c5:0d:64:6a:95:41:1c:48:81:
         90:a1:fc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----