Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a3634303a3a2f34382d3438203d3e20323732383231.roa
File:                     323830313a3164343a3634303a3a2f34382d3438203d3e20323732383231.roa (raw, json)
Hash identifier:          6TJEKL1yDFwpau3f6s/71obvKLQaDx3U7tILDi28ERE=
Subject key identifier:   00:39:4D:D8:2E:E6:4E:27:8A:AA:3C:DD:6E:27:9D:EC:6D:3A:24:D1
Certificate issuer:       /CN=A06BAE214A0B6811D36AB18B3D4882EF55013A91
Certificate serial:       018148693628CAE69A0F3EEDF3E62540983DF137
Authority key identifier: A0:6B:AE:21:4A:0B:68:11:D3:6A:B1:8B:3D:48:82:EF:55:01:3A:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a3634303a3a2f34382d3438203d3e20323732383231.roa
Signing time:             Tue 05 Mar 2024 18:17:15 +0000
ROA not before:           Tue 05 Mar 2024 18:12:15 +0000
ROA not after:            Tue 04 Mar 2025 18:17:15 +0000
asID:                     272821
IP address blocks:        2801:1d4:640::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:81:48:69:36:28:ca:e6:9a:0f:3e:ed:f3:e6:25:40:98:3d:f1:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A06BAE214A0B6811D36AB18B3D4882EF55013A91
        Validity
            Not Before: Mar  5 18:12:15 2024 GMT
            Not After : Mar  4 18:17:15 2025 GMT
        Subject: CN=00394DD82EE64E278AAA3CDD6E279DEC6D3A24D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c7:e2:dd:ae:f6:a3:c5:45:55:8b:68:fc:3e:
                    f7:4c:f2:52:59:da:cd:76:95:9b:0a:83:18:d9:ca:
                    fe:17:35:d4:4c:0d:8f:00:53:ff:a5:45:e6:ba:e8:
                    74:a0:ad:25:18:6f:d8:67:bb:2b:21:10:a2:f3:b3:
                    44:cb:00:b4:ae:fd:98:56:55:d7:ad:94:ac:92:27:
                    1f:31:fb:18:f2:d3:de:18:cc:ff:03:a7:33:e1:ed:
                    42:4a:c4:32:cc:e1:8d:62:df:4b:48:ff:1c:bc:a1:
                    3c:30:88:ee:6b:b5:2f:77:ca:e7:95:9e:a8:0e:83:
                    c2:9c:47:8c:7b:ee:14:8a:dc:9b:77:ac:5b:e7:c0:
                    9d:d4:ca:b8:2e:9d:cb:16:43:cd:e3:0d:8e:cf:83:
                    18:d6:75:a4:ff:3a:73:9a:d9:c8:ae:44:98:7d:eb:
                    0d:71:67:c9:79:ad:4c:cc:5f:2b:19:76:fa:90:af:
                    74:a9:67:0c:ac:e1:2a:da:1f:53:f5:d9:6b:1a:01:
                    66:7b:e7:6b:e1:6c:f6:03:33:85:b9:f2:7e:cb:6a:
                    d3:be:a0:28:6c:84:3a:6c:c8:75:60:79:2c:a8:e3:
                    40:61:ff:f0:74:a8:9c:e2:47:bc:d6:25:9f:cb:d3:
                    39:99:59:d4:f7:fe:d1:39:90:f4:98:e2:2c:22:4e:
                    7d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:39:4D:D8:2E:E6:4E:27:8A:AA:3C:DD:6E:27:9D:EC:6D:3A:24:D1
            X509v3 Authority Key Identifier:
                keyid:A0:6B:AE:21:4A:0B:68:11:D3:6A:B1:8B:3D:48:82:EF:55:01:3A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A06BAE214A0B6811D36AB18B3D4882EF55013A91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F51C08B4D5191C7F019574926433E112688CEA92166AEDAD2EFED0EB8641266/0/323830313a3164343a3634303a3a2f34382d3438203d3e20323732383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d4:640::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:01:55:6e:cd:31:80:aa:e7:88:c4:0d:3d:e8:78:3c:59:6b:
         c9:28:45:9c:7d:62:aa:d7:b2:ba:07:f0:64:13:f0:c5:78:a1:
         03:82:27:05:6c:a2:c0:ed:33:1e:c3:22:e9:26:e4:ad:5c:bd:
         b0:aa:43:05:b5:89:45:37:6d:8b:76:04:89:93:db:5d:e3:a5:
         c1:bc:b8:46:ca:31:e5:bc:89:51:fc:a3:9c:6c:e0:7a:fa:c0:
         2e:5a:56:ac:9c:43:01:fa:72:b1:bc:01:df:50:cc:d0:4a:9a:
         98:03:d0:f0:08:fe:3c:1c:69:26:68:15:45:1e:24:f6:85:7a:
         9d:97:32:8d:38:a5:ce:75:c0:81:91:f0:c9:a6:a4:fd:d0:42:
         53:38:54:01:27:1c:2c:02:ff:5d:22:e3:ac:a8:ef:65:a3:03:
         68:1d:3b:d2:da:a8:95:99:36:c5:89:92:6f:4b:10:ed:92:73:
         45:d1:2b:b0:eb:61:d7:b7:25:80:6b:35:1d:24:e4:e0:d1:78:
         72:a0:a6:d0:fd:63:98:9e:ef:d9:c4:79:ae:c4:b2:e4:e9:61:
         4f:54:96:2a:5e:3c:35:22:d5:1c:e7:9a:6f:46:b9:40:8b:63:
         d5:1d:fd:c6:9e:4d:fc:cd:90:80:72:59:89:23:ea:f6:98:61:
         ac:9c:da:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----