Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/323830313a31343a353830303a3a2f34382d3438203d3e20323732313534.roa
File:                     323830313a31343a353830303a3a2f34382d3438203d3e20323732313534.roa (raw, json)
Hash identifier:          5bYRtqfo5JfSNLv5DSSZuoWCTogyV7zJOGEjHWo+hAg=
Subject key identifier:   81:6B:55:86:36:3F:FC:E3:54:85:FC:A9:62:69:82:30:8A:8F:39:B8
Certificate issuer:       /CN=7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0
Certificate serial:       6859B32885D4E8CE9D04BFF6C946FDA172203977
Authority key identifier: 7B:99:00:64:AA:53:A1:5F:F6:FE:CC:8E:19:5D:28:C5:C4:A2:A6:D0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/323830313a31343a353830303a3a2f34382d3438203d3e20323732313534.roa
Signing time:             Tue 05 Mar 2024 17:57:16 +0000
ROA not before:           Tue 05 Mar 2024 17:52:16 +0000
ROA not after:            Tue 04 Mar 2025 17:57:16 +0000
asID:                     272154
IP address blocks:        2801:14:5800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:59:b3:28:85:d4:e8:ce:9d:04:bf:f6:c9:46:fd:a1:72:20:39:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0
        Validity
            Not Before: Mar  5 17:52:16 2024 GMT
            Not After : Mar  4 17:57:16 2025 GMT
        Subject: CN=816B5586363FFCE35485FCA9626982308A8F39B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:72:b7:9b:09:0b:17:1b:68:fd:af:ae:f1:2f:
                    62:87:9a:c0:ad:8f:0a:9e:9c:6f:f5:f6:fe:91:04:
                    fe:f8:b5:69:c0:1e:34:15:ba:f1:33:5d:f4:dd:93:
                    fc:43:7e:2a:23:78:4d:8b:bc:14:24:f9:72:de:db:
                    0a:18:62:41:ee:d5:a5:01:e8:b3:ab:75:f2:f5:d4:
                    d2:d1:a5:2d:e3:95:96:9c:f1:1e:1b:d0:81:dc:ba:
                    9e:4d:38:ca:a5:c9:02:e5:7c:30:0c:0e:7d:63:8f:
                    4d:53:05:b7:f8:83:bd:e8:1c:51:97:93:71:0f:90:
                    21:ed:2c:01:a5:20:6d:d6:c9:41:cc:31:e6:27:15:
                    aa:96:66:cb:99:20:8b:09:f3:c0:57:9e:4f:62:01:
                    0a:26:0d:02:94:2c:55:fa:37:37:79:25:d7:2e:ba:
                    b1:10:fd:d6:11:8d:50:05:d5:08:7b:89:d8:cc:6b:
                    9f:22:57:ce:73:5a:d5:02:d2:b9:77:1e:dc:77:94:
                    94:b6:da:24:33:0f:99:1d:20:20:f3:1d:c7:e4:8a:
                    aa:89:ec:25:ac:6b:0d:43:a0:2c:f9:38:de:e5:95:
                    72:aa:21:86:c2:f1:b3:95:58:73:48:38:be:28:ee:
                    72:e8:14:98:7e:91:b1:17:35:b3:a1:7d:fc:ac:93:
                    83:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:6B:55:86:36:3F:FC:E3:54:85:FC:A9:62:69:82:30:8A:8F:39:B8
            X509v3 Authority Key Identifier:
                keyid:7B:99:00:64:AA:53:A1:5F:F6:FE:CC:8E:19:5D:28:C5:C4:A2:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7B990064AA53A15FF6FECC8E195D28C5C4A2A6D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6C6229393DBAF1037A51C8E0CDCD880D06F2C9AAFA0200CB40DC6771964A5479/0/323830313a31343a353830303a3a2f34382d3438203d3e20323732313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:c7:0a:85:e2:41:c5:89:7d:5c:a4:2b:af:b1:98:48:06:61:
         23:cc:63:aa:b1:c7:e2:17:7b:d2:26:76:8f:03:cf:c9:0e:bb:
         4a:3c:0b:e2:6a:18:ff:f5:ba:ca:56:32:32:47:4c:c7:3e:89:
         f7:5a:53:99:9d:53:c5:21:b0:e5:7e:64:fa:7d:d0:87:f4:8c:
         f5:0d:e6:a3:8a:3a:fe:0a:19:cc:c1:96:e5:5a:46:fb:c1:b9:
         f8:a3:df:db:68:bd:72:46:41:53:82:1b:bc:8e:1d:d6:83:38:
         0a:67:ec:66:98:09:73:10:2a:c9:ad:7a:0c:04:26:47:4d:27:
         f7:2b:e8:0a:b4:d9:9b:f6:a6:36:d9:a4:c1:a1:fd:09:af:d6:
         a2:dd:a2:8c:0c:4a:47:00:3b:a8:68:ff:05:c7:c9:9e:5c:5a:
         84:9e:6e:c9:91:0d:8b:19:1c:aa:88:59:ae:c8:3f:f5:bd:93:
         48:93:d4:90:37:37:23:da:9a:3b:01:65:fc:f0:88:79:f7:15:
         b1:1c:a6:44:4c:9c:75:c1:4c:71:c5:3b:f9:f2:4a:98:20:79:
         e2:95:ab:3f:91:9b:ce:dd:95:46:2e:b4:16:20:22:6d:96:a4:
         2a:4f:49:a3:a1:99:20:71:90:67:4a:8d:2e:29:8b:0b:a0:c8:
         29:ec:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----