Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a3161393a313a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          aVt1ee5xv9j8/jqxHHoFJNU2QTwWagkSlbTv7hVStSE=
Subject key identifier:   4D:1C:75:48:E2:8E:3C:BA:D6:55:32:BF:DA:AC:4F:DF:FB:BF:ED:FC
Certificate issuer:       /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Certificate serial:       4978B146CC620990B739A97BEED3B25435C1A30E
Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 17:44:22 +0000
ROA not before:           Tue 05 Mar 2024 17:39:22 +0000
ROA not after:            Tue 04 Mar 2025 17:44:22 +0000
asID:                     13489
IP address blocks:        2801:1a9:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:78:b1:46:cc:62:09:90:b7:39:a9:7b:ee:d3:b2:54:35:c1:a3:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
        Validity
            Not Before: Mar  5 17:39:22 2024 GMT
            Not After : Mar  4 17:44:22 2025 GMT
        Subject: CN=4D1C7548E28E3CBAD65532BFDAAC4FDFFBBFEDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:15:22:cb:cb:2f:35:83:92:fa:93:ff:b2:b0:
                    90:35:37:18:0a:8f:88:4f:48:5f:30:5c:4e:12:d9:
                    af:58:9c:1d:af:17:08:00:63:91:c5:85:42:14:ef:
                    d5:44:cd:a5:63:10:03:e5:1d:cd:5b:65:c5:aa:8d:
                    99:b7:e4:81:2e:cd:8a:73:29:f8:0b:0b:39:40:a9:
                    54:af:e4:d5:98:b2:b8:45:96:3a:f4:47:8c:8c:4a:
                    60:a5:08:53:71:9b:fc:73:4b:63:38:ca:a5:f7:4e:
                    94:7c:8d:df:bd:ab:85:56:19:9f:72:32:6b:df:e8:
                    42:68:90:55:20:a8:11:5d:dd:02:48:2b:b5:7a:5c:
                    b8:de:e3:13:44:e0:26:ce:48:22:56:e2:d9:1b:52:
                    74:52:ba:78:33:99:9d:4d:c0:9d:fe:f3:2c:e0:89:
                    50:30:09:6e:32:56:c8:6b:49:4e:1f:1f:64:2c:3c:
                    22:31:cc:07:3a:e1:e5:fc:b3:37:c9:af:61:db:0b:
                    f7:b0:eb:c9:5b:38:35:a7:8c:d3:af:40:dc:87:17:
                    0c:ef:2f:db:b7:0e:68:5c:22:e5:9a:bc:7c:75:c8:
                    51:cb:fc:38:5a:d2:33:08:0e:ba:ad:07:f5:4c:a6:
                    b5:ad:b0:95:5c:1f:5d:80:1f:4c:6d:61:d6:8a:18:
                    10:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1C:75:48:E2:8E:3C:BA:D6:55:32:BF:DA:AC:4F:DF:FB:BF:ED:FC
            X509v3 Authority Key Identifier:
                keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:56:99:2a:81:73:1b:35:d1:c9:71:71:41:03:06:13:05:be:
         e6:96:7b:34:df:da:d7:c5:4e:83:2a:c7:57:fd:7f:bb:aa:2f:
         db:d7:79:1d:d6:b8:3d:13:f3:9e:ce:84:f1:74:d0:04:50:dd:
         1f:ab:b1:aa:52:bf:f8:0a:3b:7b:46:f4:b7:52:39:83:bd:54:
         9d:16:4a:1d:25:99:81:87:a3:62:94:e1:af:6b:f5:06:27:5b:
         35:ef:b0:fc:46:73:32:4b:8b:07:cd:5e:ff:bb:67:13:7a:58:
         8f:37:3b:31:49:6e:62:4e:57:a4:fc:e1:83:21:bc:f3:4a:60:
         ed:f3:f3:21:2b:cc:04:bd:e7:26:07:57:9b:78:65:d9:53:e6:
         2f:97:6b:3d:b7:4c:04:46:a8:7c:9a:cf:19:2f:96:af:5a:c1:
         17:34:2d:11:5a:a2:8a:5a:cd:af:5c:e9:c3:3b:d9:ac:02:bd:
         b4:06:1f:94:ee:6e:b1:8d:b7:fc:e0:51:2b:e0:1d:ba:9d:bc:
         01:9d:4c:36:a9:3d:98:a1:b8:c3:01:f7:73:62:5e:0b:92:05:
         30:41:d3:47:f7:9d:79:b3:ab:32:b2:b9:65:82:fa:b6:27:34:
         3e:99:f5:a7:78:94:3f:97:7d:0a:c8:88:d9:51:e3:5f:e0:06:
         c4:a8:7e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----