Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a646464643a3a2f34382d3438203d3e20323635373331.roa
File:                     323830313a3134303a646464643a3a2f34382d3438203d3e20323635373331.roa (raw, json)
Hash identifier:          fRRCek4zFh1/IiFVceHX7VQwmmrYuW5wnTf7MP8teM0=
Subject key identifier:   EF:DB:E0:82:FA:15:6F:2F:67:59:BB:CA:56:B2:BF:AC:07:E3:D0:0C
Certificate issuer:       /CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
Certificate serial:       4C1FA00969A9D2C67ACF26BDE69ED6E739E38299
Authority key identifier: D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a646464643a3a2f34382d3438203d3e20323635373331.roa
Signing time:             Mon 16 Dec 2024 11:40:00 +0000
ROA not before:           Mon 16 Dec 2024 11:35:00 +0000
ROA not after:            Mon 15 Dec 2025 11:40:00 +0000
asID:                     265731
IP address blocks:        2801:140:dddd::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:1f:a0:09:69:a9:d2:c6:7a:cf:26:bd:e6:9e:d6:e7:39:e3:82:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600
        Validity
            Not Before: Dec 16 11:35:00 2024 GMT
            Not After : Dec 15 11:40:00 2025 GMT
        Subject: CN=EFDBE082FA156F2F6759BBCA56B2BFAC07E3D00C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:d2:0f:e3:69:7e:2f:38:3b:30:d1:57:cf:b0:
                    30:23:8c:ad:ef:e4:20:36:40:59:db:ad:86:65:5f:
                    66:e3:da:8c:33:91:a9:ec:e1:99:ef:8f:dc:bc:f2:
                    bb:37:a8:9f:7d:92:73:3c:ba:d3:9d:87:49:61:9a:
                    60:c0:d8:21:8a:55:c7:e6:fd:18:7c:b0:93:d7:19:
                    29:ef:50:06:b9:bc:c8:69:91:98:7e:45:cc:29:7a:
                    90:8d:54:11:3a:64:44:b5:59:46:63:70:e9:8f:79:
                    7d:48:eb:36:2f:74:5c:d9:17:c1:eb:30:f4:75:4a:
                    68:0e:2a:d7:9f:db:8e:21:0a:e3:6f:6f:3a:4e:4e:
                    55:77:f1:07:08:fd:a2:8f:9b:0e:6b:cf:b4:e4:59:
                    19:5e:35:91:5e:12:fc:00:90:ea:d7:24:95:c5:46:
                    43:44:91:33:b2:a8:80:dd:3c:07:48:c0:96:0a:9a:
                    c9:b7:65:e8:e8:3b:51:41:55:b5:02:63:a7:23:43:
                    67:a2:ee:ff:db:15:d0:93:84:58:8a:e3:8e:8c:f0:
                    38:e1:4a:d8:59:58:d5:4a:cb:29:db:f0:70:84:1c:
                    37:41:3f:2a:4f:13:7a:6f:9c:27:08:86:8d:ce:80:
                    ec:6d:56:70:0a:6a:d9:59:cf:09:25:32:ed:92:a5:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DB:E0:82:FA:15:6F:2F:67:59:BB:CA:56:B2:BF:AC:07:E3:D0:0C
            X509v3 Authority Key Identifier:
                keyid:D8:E6:D9:C0:6E:4D:8F:FC:DC:C2:2A:FF:4B:4C:A3:92:C1:A7:D6:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D8E6D9C06E4D8FFCDCC22AFF4B4CA392C1A7D600.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2F68360C435EE14612C1944DD8B7A65EB90937EC2C1D68FA42CB06CA7E300F3C/0/323830313a3134303a646464643a3a2f34382d3438203d3e20323635373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:140:dddd::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:2d:f1:85:b8:c2:79:69:41:e2:23:d4:c8:88:b8:04:c6:02:
         e3:c6:2d:05:de:7f:c7:2c:bb:3e:6c:cf:99:4e:1b:c6:fd:2b:
         e5:24:6a:16:38:04:1d:49:9c:89:d6:48:7c:40:c1:94:12:18:
         0d:b1:b1:1c:25:ff:18:8d:c3:91:cd:e0:5d:bc:6d:62:ec:69:
         39:c4:58:b2:32:17:9f:10:59:ad:54:45:3c:bb:4d:7f:41:72:
         24:f2:85:d6:bf:28:ac:8d:e9:ea:7d:f6:d9:94:e0:34:c5:e0:
         3e:c1:7a:21:9b:6f:0a:2b:0c:c4:35:59:08:a1:9b:50:e7:e2:
         11:a2:af:34:ef:eb:9d:53:8f:94:d2:f8:71:b3:ed:1b:09:67:
         b6:62:d7:69:20:f9:11:36:b9:a6:ec:c8:2a:9f:b2:b3:1b:42:
         78:40:7b:8b:43:48:52:8c:da:90:7f:e2:f0:e6:dc:1e:de:70:
         57:80:54:0c:40:66:66:d1:9d:02:b2:ea:5e:7f:bb:80:64:01:
         17:d0:5c:f4:f7:2f:74:8f:f3:6c:5b:bc:a6:3b:a7:31:bb:cf:
         d3:fe:2e:93:5c:13:95:4b:d2:08:da:a3:15:d9:67:e3:95:97:
         29:86:a4:df:e8:ca:69:8c:1d:6a:c0:92:4e:5a:e0:da:4f:de:
         5d:59:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----