Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030353a3a2f34382d3438203d3e20323636373139.roa
File:                     323830313a31643a613030353a3a2f34382d3438203d3e20323636373139.roa (raw, json)
Hash identifier:          v+3CKHqVzKxfUmdiNCabvwq1ee6rIP0c8Dz39uukpco=
Subject key identifier:   92:70:D4:16:0E:79:90:9D:D6:D5:29:44:18:A8:82:90:46:1B:F0:BA
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       6597CCCB402928FBED1071E32A996DD0E44BCEF5
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030353a3a2f34382d3438203d3e20323636373139.roa
Signing time:             Tue 05 Mar 2024 17:41:16 +0000
ROA not before:           Tue 05 Mar 2024 17:36:16 +0000
ROA not after:            Tue 04 Mar 2025 17:41:16 +0000
asID:                     266719
IP address blocks:        2801:1d:a005::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:97:cc:cb:40:29:28:fb:ed:10:71:e3:2a:99:6d:d0:e4:4b:ce:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: Mar  5 17:36:16 2024 GMT
            Not After : Mar  4 17:41:16 2025 GMT
        Subject: CN=9270D4160E79909DD6D5294418A88290461BF0BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6e:e3:23:fe:cd:6d:ce:6b:53:f7:8f:89:cc:
                    18:d5:7e:4a:08:3b:22:6b:cb:d6:d4:ba:d8:71:70:
                    46:41:f2:96:f2:36:b4:75:50:df:ab:f2:60:f4:2e:
                    36:24:cf:28:dc:d0:e2:55:40:3e:a7:8e:27:2b:93:
                    4d:4b:57:f1:dc:43:cb:30:64:4c:e7:ba:4e:86:f2:
                    9b:ec:f5:57:94:8d:36:de:97:24:bf:5d:19:23:b9:
                    49:68:75:20:2a:7d:76:01:55:fd:01:99:81:44:cc:
                    05:ee:5c:54:ca:9f:f2:88:f0:88:3a:4f:77:4f:76:
                    cb:79:97:f0:37:13:e3:2a:11:15:26:c6:87:38:97:
                    e5:fc:e3:f0:e1:e9:d8:a6:39:87:25:d1:46:00:49:
                    d7:64:eb:0f:aa:a5:e7:fc:71:a2:be:ee:fd:1d:99:
                    10:fc:74:dc:43:d6:c7:1e:77:70:f9:29:56:a4:ba:
                    24:f2:5a:c2:96:d8:1f:0c:b2:8b:4c:f9:c7:d7:2d:
                    8d:8b:92:e7:74:af:56:58:0e:97:8a:f8:0b:70:fc:
                    a2:c7:ce:3c:49:65:ad:62:f1:61:67:82:27:e4:bf:
                    07:e3:c3:97:34:92:a9:88:1c:aa:74:1e:35:87:a1:
                    a7:9a:13:66:c5:f9:2e:a2:49:95:43:0c:84:5e:8d:
                    45:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:70:D4:16:0E:79:90:9D:D6:D5:29:44:18:A8:82:90:46:1B:F0:BA
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030353a3a2f34382d3438203d3e20323636373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:a005::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:60:c9:ff:5f:9d:70:9c:85:33:4a:2e:2f:e9:bc:5d:aa:
         94:14:75:9b:95:95:78:30:1d:d0:3a:35:35:9d:4e:81:87:1c:
         4f:c8:cd:c1:40:0b:46:bc:32:ea:b4:e6:03:2c:cc:ef:e7:5c:
         f8:58:74:4c:c7:07:41:68:2e:91:01:56:80:99:9e:c8:d0:6e:
         d2:59:02:08:b4:e3:5d:26:86:57:83:d0:f4:af:ea:e4:48:e8:
         e2:d3:a4:bc:3a:7d:ea:8c:0d:c2:d0:2f:d1:01:46:82:86:e2:
         20:96:b6:f6:ef:b1:52:67:75:67:91:ce:82:44:1f:a7:ab:b2:
         42:39:a5:c4:b6:cd:39:18:e5:de:34:2b:01:e1:ab:70:62:48:
         9c:bd:42:ba:c3:e3:3f:da:3f:d3:24:a9:66:ce:20:e3:40:f8:
         73:8b:95:62:80:5d:b8:32:ac:03:55:7d:f4:e4:33:5d:d9:9f:
         d3:b8:a7:dd:c5:de:e2:95:69:b9:5b:40:04:24:e4:e2:31:ca:
         7f:bb:ab:9d:2e:5a:74:a3:ef:fa:b9:70:5d:4f:b2:aa:cc:68:
         af:ef:09:64:24:25:34:ee:2c:a9:4e:25:45:bb:09:53:c6:b6:
         49:d8:72:33:c4:2c:24:4e:5c:49:59:8f:71:da:68:88:61:fd:
         e3:a8:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----