Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa
File:                     323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa (raw, json)
Hash identifier:          QbVtLu69HCJmcqbacZYXplC8Vc3y+eX0pKOQnSJSeUE=
Subject key identifier:   2F:55:C0:22:0E:CD:A2:3E:16:AA:23:EF:C2:27:5F:B5:6C:72:1D:8B
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       7678167A6EE72927E2CCB0E7DEDAB236C17757FE
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa
Signing time:             Mon 16 Dec 2024 11:20:00 +0000
ROA not before:           Mon 16 Dec 2024 11:15:00 +0000
ROA not after:            Mon 15 Dec 2025 11:20:00 +0000
asID:                     262249
IP address blocks:        2801:140:bfa::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:78:16:7a:6e:e7:29:27:e2:cc:b0:e7:de:da:b2:36:c1:77:57:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 16 11:15:00 2024 GMT
            Not After : Dec 15 11:20:00 2025 GMT
        Subject: CN=2F55C0220ECDA23E16AA23EFC2275FB56C721D8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:0e:90:c9:49:fd:cc:e1:eb:c3:1f:35:42:
                    86:2a:50:5c:e5:ac:00:d1:d5:7d:b4:1a:c8:67:df:
                    65:42:01:50:21:d3:14:c7:e5:04:c8:f2:50:df:26:
                    24:9c:c1:58:1e:20:59:66:91:b8:83:a2:9a:dc:8c:
                    e7:fa:fd:0b:e2:83:77:d5:f8:c0:60:52:c7:98:b4:
                    a6:58:44:46:73:a4:23:b7:6b:09:c9:fd:d4:f4:7d:
                    c1:68:ac:4f:ec:be:58:ed:a5:8b:f3:3c:3f:98:aa:
                    0f:36:2a:f2:c0:82:ed:a8:fd:28:fd:94:02:59:a7:
                    0e:5a:f5:d6:9a:ae:80:7a:dc:59:ed:f9:11:55:0c:
                    23:be:ae:77:c7:c9:21:f2:df:8c:d1:ce:38:21:48:
                    69:0c:9b:bc:a8:91:6e:50:df:25:2a:29:a1:a7:ef:
                    e4:87:6d:ce:aa:21:47:62:a3:98:08:c7:b5:ab:eb:
                    20:42:25:93:09:c2:ed:0e:2c:2d:ef:56:c2:52:7a:
                    67:80:51:1d:eb:eb:5a:f3:29:81:2b:58:4e:56:f7:
                    cd:52:23:22:47:c5:3b:ad:f4:2a:3a:dc:51:c9:75:
                    e4:e1:ad:c4:42:77:58:3c:67:48:3e:da:26:d8:c4:
                    56:40:fc:1b:f6:1e:d8:06:48:74:42:f7:01:b8:a0:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:55:C0:22:0E:CD:A2:3E:16:AA:23:EF:C2:27:5F:B5:6C:72:1D:8B
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a6266613a3a2f34382d3438203d3e20323632323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:bfa::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:70:9c:98:42:7a:b6:cb:c0:d8:3e:38:0c:7f:04:8c:87:67:
         bd:9d:dd:d9:63:16:50:1f:f6:62:c6:ea:38:e3:48:de:e3:f9:
         b3:a7:b3:c1:25:e7:60:4c:42:d8:1e:a8:d9:8e:23:9e:56:78:
         f1:0b:d8:b1:ea:96:fc:1a:29:ee:d1:6c:3d:4e:9c:a6:9a:06:
         8a:fa:6d:03:96:99:6f:e5:84:9b:4e:92:48:e8:5f:ca:a5:94:
         e3:69:7e:90:ee:5f:4b:8b:45:f3:82:0f:14:87:09:db:07:f3:
         24:e0:3b:e3:b1:7a:3c:1f:bc:67:c6:e6:50:7d:7b:11:17:dd:
         c3:a0:1e:3a:a7:9d:b9:25:3f:e9:4d:2d:1f:9c:e2:29:d8:b1:
         ec:fb:d8:71:d0:08:fe:10:d9:41:70:bf:72:fd:96:ae:f4:87:
         09:0e:6a:ec:6f:ba:08:28:8f:be:32:58:1f:cd:a5:30:53:ca:
         e9:5b:90:b1:82:dd:35:7b:31:b1:83:fe:94:f9:98:41:31:d6:
         6a:71:97:58:2a:a6:d0:34:d7:00:33:7a:9a:83:68:6d:8a:b1:
         69:06:36:d9:de:1c:08:7c:80:9f:40:69:7d:40:46:c4:49:b2:
         a6:65:e7:b1:b1:dc:4d:a8:7f:f0:ca:c3:90:50:39:ad:e8:0c:
         e4:ef:14:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----