Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203237393437.roa
File:                     323830313a31663a343830303a3a2f34382d3438203d3e203237393437.roa (raw, json)
Hash identifier:          qe9niM+EbMRncDd5qFg2l1EP7YzqBji+Iv/U7aaa72E=
Subject key identifier:   E7:BF:AC:A2:7B:38:08:A5:2E:BD:AF:B6:51:31:05:0D:49:C8:E5:B3
Certificate issuer:       /CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
Certificate serial:       2BBEB775DBA1FC9FAA20ED6A8BCD9E02A946DEB2
Authority key identifier: C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203237393437.roa
Signing time:             Tue 05 Mar 2024 18:01:46 +0000
ROA not before:           Tue 05 Mar 2024 17:56:46 +0000
ROA not after:            Tue 04 Mar 2025 18:01:46 +0000
asID:                     27947
IP address blocks:        2801:1f:4800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:be:b7:75:db:a1:fc:9f:aa:20:ed:6a:8b:cd:9e:02:a9:46:de:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E
        Validity
            Not Before: Mar  5 17:56:46 2024 GMT
            Not After : Mar  4 18:01:46 2025 GMT
        Subject: CN=E7BFACA27B3808A52EBDAFB65131050D49C8E5B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:93:83:08:71:01:43:c9:64:26:67:c5:8e:
                    e7:7c:c3:4a:49:6b:7e:df:c2:41:40:62:86:fc:92:
                    8f:39:9f:35:bc:99:c7:aa:bb:db:6e:48:02:20:64:
                    df:cc:2c:5d:bb:5e:63:32:ff:fe:cc:e0:d4:5c:78:
                    ab:8e:66:82:29:f4:2d:03:c1:f6:f8:a1:3a:95:d5:
                    cf:9b:03:94:ce:5c:53:de:e8:5e:6a:fe:3a:85:21:
                    5a:b1:0d:62:f5:24:97:b7:58:71:25:22:50:50:23:
                    46:f4:63:17:2b:5d:e0:e9:d4:7f:eb:3c:54:d0:b7:
                    37:eb:cc:26:09:87:38:60:cc:b4:d6:a8:4d:2e:5e:
                    8c:6f:83:4b:dc:7e:a3:ba:a3:fc:7f:2e:38:62:74:
                    36:2f:93:91:ab:d6:71:b3:93:4a:23:1d:78:fc:d3:
                    18:ee:0a:33:68:94:21:e8:7e:a4:13:62:8a:54:01:
                    ee:16:2c:e1:b0:8d:f1:4d:78:eb:da:94:38:f9:82:
                    1b:df:ce:1c:8f:35:96:fc:97:fd:dd:22:98:63:ff:
                    4f:8b:17:c1:ae:38:97:35:f4:a8:7b:7c:cc:5b:68:
                    a2:44:d0:25:68:72:9f:f0:14:9d:d1:ca:25:af:83:
                    86:41:a5:93:48:56:e3:cd:f4:63:8a:cc:40:a2:db:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BF:AC:A2:7B:38:08:A5:2E:BD:AF:B6:51:31:05:0D:49:C8:E5:B3
            X509v3 Authority Key Identifier:
                keyid:C5:72:F5:F7:CC:01:4F:3E:CB:4A:B5:0F:D4:F6:C6:F8:7D:3A:93:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C572F5F7CC014F3ECB4AB50FD4F6C6F87D3A939E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6CA92F061B1829C8535816174169816B3D4F0BC4C5DC8823B5F722788074838A/0/323830313a31663a343830303a3a2f34382d3438203d3e203237393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:4800::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:95:35:20:3c:49:d1:f9:74:5f:3e:bd:51:e9:47:92:a2:ee:
         16:db:0a:cd:1a:4a:2c:c4:7e:e4:f4:02:59:0d:3a:8a:da:c2:
         3c:c2:e6:91:29:a7:f4:a5:7d:07:37:d1:fc:de:eb:b1:fc:19:
         37:06:27:f2:0f:d1:2d:52:32:db:22:dc:f0:63:c2:7e:6e:89:
         f7:86:10:7d:54:29:8b:9a:a1:2d:83:67:ee:a1:e9:f4:d4:0f:
         91:0f:6e:c5:ee:e0:e6:67:ec:5e:39:1a:5f:d8:dc:44:32:55:
         23:1f:39:15:65:41:7f:14:8c:44:77:1d:ad:1c:d6:92:1e:f2:
         2a:dd:9f:8a:20:f1:ac:52:3c:a4:d3:19:ef:11:ab:e4:91:5c:
         80:cc:b3:a6:44:e7:5b:b4:de:e4:ad:91:de:6c:ee:af:d9:f2:
         4b:b2:b7:9a:7d:3e:6b:7c:72:49:d2:37:d6:11:3d:da:1c:f3:
         b0:4a:31:b3:25:51:bd:5a:08:ad:76:9f:02:6e:d4:1a:41:00:
         ef:2d:e5:38:62:68:42:eb:1c:da:96:af:55:b2:97:79:bc:89:
         9d:a9:66:23:c9:71:3f:14:41:84:1c:5b:3e:de:52:1a:76:bb:
         66:48:8a:d5:49:af:9e:24:cb:89:d1:52:98:09:73:09:fa:29:
         99:a6:d6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----