Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa
File:                     323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa (raw, json)
Hash identifier:          af04W/5pDwTxuWQLL8s/Qaxq9SfyeM4rBkbFtvWVljc=
Subject key identifier:   99:9B:77:93:FF:F3:FB:CD:0F:F1:57:31:9C:0C:B6:50:4E:47:AE:A4
Certificate issuer:       /CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
Certificate serial:       10C76C45C847B016019DAB06C104D700B10FDC2A
Authority key identifier: BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa
Signing time:             Tue 05 Mar 2024 17:44:22 +0000
ROA not before:           Tue 05 Mar 2024 17:39:22 +0000
ROA not after:            Tue 04 Mar 2025 17:44:22 +0000
asID:                     272909
IP address blocks:        2801:1a9:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c7:6c:45:c8:47:b0:16:01:9d:ab:06:c1:04:d7:00:b1:0f:dc:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDDC3BF7FCA3B086A7E32760A12D6D60036CC131
        Validity
            Not Before: Mar  5 17:39:22 2024 GMT
            Not After : Mar  4 17:44:22 2025 GMT
        Subject: CN=999B7793FFF3FBCD0FF157319C0CB6504E47AEA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:58:3a:8a:d7:d8:d0:cf:3a:75:5a:da:00:bd:
                    4e:60:fb:5b:05:d1:09:fd:e2:52:8b:0f:d5:5a:82:
                    ea:34:3d:f6:e6:22:4a:04:d4:ae:16:fe:a2:9f:6c:
                    f9:7f:29:55:be:e1:c9:8d:a0:db:e6:e1:24:2f:8f:
                    ac:3e:98:9b:60:58:93:3d:03:eb:a2:8b:cd:c4:e4:
                    7e:ac:b8:8a:8b:66:fa:e5:4e:d2:e8:7b:43:96:c4:
                    28:d2:1f:f4:af:8a:26:91:35:53:3b:e1:bf:91:9e:
                    c3:cc:7a:07:9a:a8:da:f8:20:ba:48:d9:2b:e5:ae:
                    b8:05:c8:f3:e0:8a:1d:26:d6:47:3e:ca:15:96:e0:
                    af:71:28:4a:a7:14:27:24:d3:46:65:54:b8:89:68:
                    75:f2:1b:71:13:46:f4:49:7e:cf:2f:55:ff:81:51:
                    ed:62:b2:3d:14:d4:e4:fc:1d:ea:e0:aa:40:f0:98:
                    71:24:6d:c2:64:fe:11:cd:4d:c4:41:0b:60:b3:75:
                    12:4c:1b:2a:de:98:17:75:3e:72:f4:13:f6:b1:e4:
                    c9:1d:84:60:cd:c0:4b:59:2a:e5:34:70:23:a2:9f:
                    8e:66:03:b6:5d:28:15:92:5f:db:53:e3:82:0a:2e:
                    a6:e0:57:17:b9:95:77:1d:8e:6d:cd:a6:0d:6a:13:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9B:77:93:FF:F3:FB:CD:0F:F1:57:31:9C:0C:B6:50:4E:47:AE:A4
            X509v3 Authority Key Identifier:
                keyid:BD:DC:3B:F7:FC:A3:B0:86:A7:E3:27:60:A1:2D:6D:60:03:6C:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDDC3BF7FCA3B086A7E32760A12D6D60036CC131.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4DF3799E9FC491DB3AFE70B5EC6AC722EF341769438D04AD580EFCD76A8D03F2/0/323830313a3161393a313a3a2f34382d3438203d3e20323732393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:19:a0:5e:36:89:69:f7:07:9f:72:64:06:fc:c6:4d:a1:40:
         4d:97:4f:d2:9c:53:00:7e:38:47:15:d1:ed:a4:1c:16:8a:95:
         9d:a2:25:d6:a3:a0:09:9d:5a:59:8b:9a:54:ab:3e:e8:94:a6:
         b5:86:cc:86:94:9c:54:9c:d9:56:fd:19:01:3b:83:7d:72:4d:
         58:16:05:9b:bf:15:a7:61:88:82:c1:da:87:2c:19:93:bf:bf:
         38:78:9d:74:fc:18:2d:e9:b7:3f:8e:80:62:a4:fe:0d:5b:3c:
         43:f0:4c:1c:a5:89:8d:52:ae:67:da:aa:16:6c:01:ad:31:7e:
         04:3d:a9:15:af:f5:8c:20:56:75:0f:c9:6a:cc:34:68:d9:e9:
         9c:f5:48:e2:fb:e8:2a:85:6a:f6:a8:2e:37:bd:48:7f:47:a7:
         ff:38:1c:a9:5e:dd:7a:e2:09:15:3a:81:d8:59:56:67:b9:fc:
         41:3f:d5:ca:c2:32:b4:f2:87:8a:e9:b4:8b:ff:3a:15:10:29:
         07:9b:2f:97:5e:75:7b:fa:b3:5b:e5:66:11:96:bc:f0:de:e0:
         01:d0:76:6b:35:8d:56:33:4e:2c:d8:23:80:a6:9f:1d:68:ac:
         23:c6:c6:96:1c:4c:24:d5:68:e5:41:9d:75:f9:d3:4d:00:47:
         5f:3e:b2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----