Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa
File:                     323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa (raw, json)
Hash identifier:          rmvcz7Kq5etp3AVpYSNGZ/z0HuVZupZd6wGGT6a2r9I=
Subject key identifier:   7E:AA:86:37:46:1B:BD:BF:FE:5A:23:F7:BA:23:FE:2C:E8:43:94:74
Certificate issuer:       /CN=90FA89BC83FD94C22D83DE3D35F34FEFEF422C56
Certificate serial:       01A7306F60F45BD0EB37FC640493CDF9D9976F7A
Authority key identifier: 90:FA:89:BC:83:FD:94:C2:2D:83:DE:3D:35:F3:4F:EF:EF:42:2C:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa
Signing time:             Tue 05 Mar 2024 18:09:39 +0000
ROA not before:           Tue 05 Mar 2024 18:04:39 +0000
ROA not after:            Tue 04 Mar 2025 18:09:39 +0000
asID:                     61475
IP address blocks:        2801:19:a000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a7:30:6f:60:f4:5b:d0:eb:37:fc:64:04:93:cd:f9:d9:97:6f:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90FA89BC83FD94C22D83DE3D35F34FEFEF422C56
        Validity
            Not Before: Mar  5 18:04:39 2024 GMT
            Not After : Mar  4 18:09:39 2025 GMT
        Subject: CN=7EAA8637461BBDBFFE5A23F7BA23FE2CE8439474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:8c:af:fd:5c:9f:31:71:33:70:a4:b5:73:
                    42:3a:0f:17:e1:ad:ac:05:1b:94:24:9e:81:31:25:
                    ce:e0:6f:b6:74:27:9b:f4:6f:12:34:4c:6c:29:2a:
                    2b:9d:8f:c0:8e:4a:03:20:45:70:4b:9f:cf:5f:2a:
                    b6:e7:0f:92:9e:75:e7:99:4c:07:8e:78:2d:dc:b4:
                    82:c8:94:84:e9:bd:96:4c:ed:14:9a:62:53:d7:9f:
                    5b:ef:ac:e6:0d:1a:1f:a3:43:54:c5:ab:83:96:75:
                    c7:48:15:03:aa:32:a8:ee:c8:f2:47:60:3e:ed:ff:
                    99:d4:60:08:17:77:f3:fd:27:6b:01:a3:56:2b:3f:
                    83:fa:a2:a3:25:31:c2:b9:b8:62:3a:ff:8e:ab:0a:
                    54:1d:e3:b1:2f:53:cf:10:32:1d:68:d6:60:90:a7:
                    27:de:0b:66:80:7f:5e:95:ac:38:e7:c5:10:70:84:
                    c0:00:e2:39:7f:aa:82:00:27:6e:2d:ae:7e:78:b7:
                    bf:6d:a2:8a:50:a8:23:63:95:a9:08:d8:b4:ad:ab:
                    df:19:a1:20:79:02:28:26:60:e1:25:07:2a:d6:8f:
                    b5:9f:1d:40:c7:bc:50:b7:47:46:e3:19:92:a0:1e:
                    e3:57:fa:fd:02:38:91:f2:71:0f:2f:66:63:5c:c7:
                    db:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AA:86:37:46:1B:BD:BF:FE:5A:23:F7:BA:23:FE:2C:E8:43:94:74
            X509v3 Authority Key Identifier:
                keyid:90:FA:89:BC:83:FD:94:C2:2D:83:DE:3D:35:F3:4F:EF:EF:42:2C:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/90FA89BC83FD94C22D83DE3D35F34FEFEF422C56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FFA0E0B6901FE40A8CA6DECFD5A8FAA5DD4CAA138A3D762280875E175B5ECBA/0/323830313a31393a613030303a3a2f34382d3438203d3e203631343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:b7:11:25:b9:ae:e8:2a:f1:c6:b1:bc:48:a9:f4:f2:bf:5e:
         79:c0:f5:b3:0a:3f:9a:26:7e:0f:3b:28:ad:8e:31:c1:57:50:
         54:cc:cc:06:79:1d:70:b2:27:6d:aa:a8:ae:44:85:91:e9:ca:
         e7:28:fc:c0:b4:19:6a:15:77:d3:d8:ad:ab:6f:e1:c6:e9:82:
         ae:06:91:d1:31:44:ec:15:a7:97:34:ea:a6:2a:2b:51:8f:0c:
         30:62:72:54:98:72:ec:51:12:12:da:2d:c9:5f:eb:6e:66:f3:
         cb:b6:16:d9:62:40:76:39:98:ac:75:ca:32:1e:2e:a7:f5:09:
         37:44:a2:6f:0f:4e:14:9e:5a:f3:56:2d:18:d0:52:2a:da:86:
         d0:38:c1:99:fc:cb:d0:f5:01:ed:7c:03:3c:29:1d:47:43:53:
         c2:da:b6:8d:f4:fc:33:02:1c:e7:82:9d:88:74:59:19:96:0f:
         fd:56:40:09:dc:ec:f1:9f:4e:1d:97:40:ff:da:da:e9:af:5a:
         a4:e6:42:91:21:20:ec:67:15:b9:33:67:76:90:7a:39:f0:d7:
         89:0f:de:54:6b:d7:69:6a:79:93:ab:33:e8:ec:a2:18:e3:b6:
         be:d7:05:3b:d7:db:b1:c2:eb:2b:2d:93:7e:3f:d5:5d:ce:b2:
         5b:da:6f:64
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUAacwb2D0W9DrN/xkBJPN+dmXb3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBGQTg5QkM4M0ZEOTRDMjJEODNERTNEMzVGMzRGRUZF
RjQyMkM1NjAeFw0yNDAzMDUxODA0MzlaFw0yNTAzMDQxODA5MzlaMDMxMTAvBgNV
BAMTKDdFQUE4NjM3NDYxQkJEQkZGRTVBMjNGN0JBMjNGRTJDRTg0Mzk0NzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCckoyv/VyfMXEzcKS1c0I6Dxfh
rawFG5QknoExJc7gb7Z0J5v0bxI0TGwpKiudj8COSgMgRXBLn89fKrbnD5KedeeZ
TAeOeC3ctILIlITpvZZM7RSaYlPXn1vvrOYNGh+jQ1TFq4OWdcdIFQOqMqjuyPJH
YD7t/5nUYAgXd/P9J2sBo1YrP4P6oqMlMcK5uGI6/46rClQd47EvU88QMh1o1mCQ
pyfeC2aAf16VrDjnxRBwhMAA4jl/qoIAJ24trn54t79toopQqCNjlakI2LStq98Z
oSB5AigmYOElByrWj7WfHUDHvFC3R0bjGZKgHuNX+v0COJHycQ8vZmNcx9s/AgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQUfqqGN0Ybvb/+WiP3uiP+LOhDlHQwHwYDVR0j
BBgwFoAUkPqJvIP9lMItg949NfNP7+9CLFYwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yRkZBMEUwQjY5MDFGRTQwQThDQTZERUNGRDVBOEZBQTVE
RDRDQUExMzhBM0Q3NjIyODA4NzVFMTc1QjVFQ0JBLzAvOTBGQTg5QkM4M0ZEOTRD
MjJEODNERTNEMzVGMzRGRUZFRjQyMkM1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC85MEZBODlCQzgzRkQ5NEMyMkQ4
M0RFM0QzNUYzNEZFRkVGNDIyQzU2LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMkZGQTBFMEI2OTAxRkU0MEE4Q0E2REVDRkQ1QThGQUE1REQ0Q0FBMTM4
QTNENzYyMjgwODc1RTE3NUI1RUNCQS8wLzMyMzgzMDMxM2EzMTM5M2E2MTMwMzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzEzNDM3MzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAZoAAwDQYJKoZIhvcNAQELBQADggEBAIy3ESW5rugq8caxvEip9PK/XnnA9bMK
P5omfg87KK2OMcFXUFTMzAZ5HXCyJ22qqK5EhZHpyuco/MC0GWoVd9PYratv4cbp
gq4GkdExROwVp5c06qYqK1GPDDBiclSYcuxREhLaLclf625m88u2FtliQHY5mKx1
yjIeLqf1CTdEom8PThSeWvNWLRjQUirahtA4wZn8y9D1Ae18AzwpHUdDU8Lato30
/DMCHOeCnYh0WRmWD/1WQAnc7PGfTh2XQP/a2umvWqTmQpEhIOxnFbkzZ3aQejnw
14kP3lRr12lqeZOrM+jsohjjtr7XBTvX27HC6ystk34/1V3Oslvab2Q=
-----END CERTIFICATE-----