Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/323830313a31653a643830303a3a2f34382d3438203d3e20323732393334.roa
File:                     323830313a31653a643830303a3a2f34382d3438203d3e20323732393334.roa (raw, json)
Hash identifier:          hozgyAegiUGWG0XVmkDJTCuoKEI71EhdSpI+PpFUsaQ=
Subject key identifier:   A2:F3:DC:51:7E:D5:E5:9E:B0:C9:22:C7:7C:F4:5F:99:2B:00:C2:1A
Certificate issuer:       /CN=D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA
Certificate serial:       46D019838CE2B718AE7151F53ABA7EC2D71C1495
Authority key identifier: D7:CD:1D:D4:17:D4:98:4B:BA:A3:B2:02:F8:81:5F:2B:8E:6F:9F:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/323830313a31653a643830303a3a2f34382d3438203d3e20323732393334.roa
Signing time:             Tue 05 Mar 2024 17:49:33 +0000
ROA not before:           Tue 05 Mar 2024 17:44:33 +0000
ROA not after:            Tue 04 Mar 2025 17:49:33 +0000
asID:                     272934
IP address blocks:        2801:1e:d800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:d0:19:83:8c:e2:b7:18:ae:71:51:f5:3a:ba:7e:c2:d7:1c:14:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA
        Validity
            Not Before: Mar  5 17:44:33 2024 GMT
            Not After : Mar  4 17:49:33 2025 GMT
        Subject: CN=A2F3DC517ED5E59EB0C922C77CF45F992B00C21A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cd:61:a3:dc:b7:43:2c:5e:d1:b5:75:6e:3d:
                    82:de:5c:98:85:ee:53:0c:26:db:53:2a:61:ae:3b:
                    97:e6:b8:63:0b:f3:f9:e2:01:6f:b8:eb:47:c4:f8:
                    c1:8b:db:37:8f:c6:b1:56:a2:88:07:74:53:70:ed:
                    a3:e1:38:95:9a:98:8d:e6:2e:a4:5d:6f:eb:b2:60:
                    45:b9:9c:5a:97:d6:7b:91:9b:8a:f1:0c:88:7c:f7:
                    a9:d0:cc:e0:90:4d:d9:3a:01:8f:05:68:49:96:34:
                    1a:9c:6c:62:36:c5:60:6f:af:ae:8a:a1:0d:fe:9b:
                    a3:e3:24:6f:84:d0:48:2d:ba:8c:76:45:e6:62:75:
                    87:ed:32:13:38:a9:63:07:7c:15:0a:62:e8:29:88:
                    24:48:69:ab:7d:1f:83:bd:c1:3c:76:eb:95:46:7a:
                    e4:44:3c:7a:e3:c3:0d:c2:0d:24:b5:7d:1e:18:77:
                    0c:ae:8a:9c:87:17:13:63:7a:4c:2b:ba:af:96:76:
                    36:2c:61:0d:7c:9e:9d:4c:f7:51:97:4e:a7:62:da:
                    19:39:3e:16:89:34:2c:6a:65:59:3c:e4:16:6a:be:
                    fd:07:62:4e:ba:4d:ee:78:e2:87:0b:18:fa:36:06:
                    a2:26:fe:7a:0f:88:cd:9a:3e:04:29:cb:e9:49:53:
                    b2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F3:DC:51:7E:D5:E5:9E:B0:C9:22:C7:7C:F4:5F:99:2B:00:C2:1A
            X509v3 Authority Key Identifier:
                keyid:D7:CD:1D:D4:17:D4:98:4B:BA:A3:B2:02:F8:81:5F:2B:8E:6F:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7CD1DD417D4984BBAA3B202F8815F2B8E6F9FFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8488B76BE88430924D65B4F45A4A9CE1DB6B37DB371F3BB62C522C3AB4302CE2/0/323830313a31653a643830303a3a2f34382d3438203d3e20323732393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:41:bc:bd:1a:d9:d1:a9:5f:b5:1c:5a:06:fa:c0:14:11:62:
         c7:03:40:72:16:00:47:b1:d8:c0:2c:b4:61:ed:66:f2:5c:5b:
         79:dc:ce:79:41:f0:45:32:45:b2:bd:a5:57:7e:1a:0d:98:76:
         dd:3f:12:b5:15:34:12:f8:13:32:36:68:57:96:ed:54:b4:03:
         54:fd:91:26:19:1a:2d:61:d9:9c:fb:bf:73:41:07:08:35:aa:
         ce:ed:3e:c5:ef:b4:50:cc:8e:03:9a:23:11:16:29:e0:04:be:
         03:58:15:e0:1f:f6:3b:b2:11:23:93:2e:dc:a9:1d:67:39:3c:
         2b:66:ee:08:b6:3d:a1:bf:ef:75:50:cd:54:84:7a:02:02:a8:
         8c:1f:00:8d:13:4b:25:33:25:9d:0f:0c:f3:86:8b:14:79:fc:
         0a:26:4a:f7:a7:db:53:0b:4a:86:60:63:8a:cb:f8:6b:e1:3a:
         be:df:f0:83:f5:d3:0f:21:28:9a:63:6a:7d:59:d7:eb:d1:d7:
         b4:37:db:ec:21:bf:e6:11:d0:22:7e:16:fe:e6:3f:91:97:41:
         db:71:74:64:42:4f:ca:99:da:01:57:dc:1d:1d:07:a7:f8:72:
         2c:32:8b:b6:d6:40:f3:a4:50:10:6c:2b:4e:a1:d5:ce:27:44:
         93:b4:53:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----