Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/898276802C14B282B554709EBDDF534A09D21F320B5FD9A10C38F6938D72692B/0/323830313a31323a333830303a3a2f34382d3438203d3e203133343839.roa
File:                     323830313a31323a333830303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          9dt0QVfQ13wqnlz2l1Anh+jkj/KUDSkhkJp8ozySqsA=
Subject key identifier:   DB:E7:96:78:1C:7E:71:52:44:7A:97:77:7E:7B:DF:0A:25:A7:C5:6A
Certificate issuer:       /CN=4BB93FA8750F0B8E09230B086A9A6B07CF265C53
Certificate serial:       44228AF6F34E65A7B87BD1A9EC921F17B371D992
Authority key identifier: 4B:B9:3F:A8:75:0F:0B:8E:09:23:0B:08:6A:9A:6B:07:CF:26:5C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BB93FA8750F0B8E09230B086A9A6B07CF265C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/898276802C14B282B554709EBDDF534A09D21F320B5FD9A10C38F6938D72692B/0/323830313a31323a333830303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Tue 05 Mar 2024 17:54:40 +0000
ROA not before:           Tue 05 Mar 2024 17:49:40 +0000
ROA not after:            Tue 04 Mar 2025 17:54:40 +0000
asID:                     13489
IP address blocks:        2801:12:3800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:22:8a:f6:f3:4e:65:a7:b8:7b:d1:a9:ec:92:1f:17:b3:71:d9:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BB93FA8750F0B8E09230B086A9A6B07CF265C53
        Validity
            Not Before: Mar  5 17:49:40 2024 GMT
            Not After : Mar  4 17:54:40 2025 GMT
        Subject: CN=DBE796781C7E7152447A97777E7BDF0A25A7C56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6e:ee:d9:f5:76:d5:7e:36:82:e7:84:5b:75:
                    3f:f8:e8:00:ce:ac:90:56:7f:d6:0a:1d:58:12:e6:
                    4a:d1:2c:06:18:5b:04:eb:3d:b9:da:b6:04:a2:ec:
                    ec:63:d0:13:c2:90:50:62:b9:18:d8:76:e2:ff:ff:
                    bb:28:0b:30:d8:10:06:ad:c2:ad:5d:0d:f6:0b:68:
                    41:49:17:a2:bd:bd:ab:51:7b:f0:9e:4b:eb:da:1e:
                    88:03:3b:1e:4e:1a:8d:eb:97:eb:c3:23:c2:93:cd:
                    68:d4:4e:5e:46:b5:35:5d:4f:ab:df:83:ba:60:3b:
                    0a:c4:ab:33:eb:4b:16:59:4d:ff:48:eb:d8:fe:6c:
                    19:40:1b:a1:53:0b:e7:8c:2b:ef:07:d0:6e:49:e5:
                    b6:6b:8f:a4:46:c8:c8:81:6a:b0:8f:5b:fb:47:33:
                    86:a0:96:8c:07:b2:7a:01:7b:d7:ea:b5:d5:d7:d8:
                    df:34:7f:18:31:0a:32:61:55:f0:1f:ee:2d:d5:74:
                    3d:82:87:55:bb:d7:99:00:a2:0a:aa:f7:af:1e:9a:
                    cf:6b:1d:8c:b8:b3:62:8c:05:52:39:91:fb:a8:52:
                    d6:29:a8:ff:26:2b:51:6a:75:fc:0a:f9:12:32:59:
                    75:a8:ff:ae:38:17:6e:66:30:d8:27:6c:84:4c:cd:
                    5d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E7:96:78:1C:7E:71:52:44:7A:97:77:7E:7B:DF:0A:25:A7:C5:6A
            X509v3 Authority Key Identifier:
                keyid:4B:B9:3F:A8:75:0F:0B:8E:09:23:0B:08:6A:9A:6B:07:CF:26:5C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/898276802C14B282B554709EBDDF534A09D21F320B5FD9A10C38F6938D72692B/0/4BB93FA8750F0B8E09230B086A9A6B07CF265C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4BB93FA8750F0B8E09230B086A9A6B07CF265C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/898276802C14B282B554709EBDDF534A09D21F320B5FD9A10C38F6938D72692B/0/323830313a31323a333830303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:13:4e:c9:ee:0a:50:99:17:91:0c:d8:57:f4:14:82:bc:85:
         0f:72:93:80:df:00:b4:04:0a:76:59:c0:22:42:3a:8f:37:44:
         df:00:2c:de:b6:c5:a1:d1:3e:db:01:64:9a:9f:5a:8e:e9:c6:
         e1:39:cd:ff:76:46:23:2d:1c:29:98:41:69:26:b4:f1:84:a5:
         d5:69:7d:bc:52:e7:f6:70:7b:97:5f:38:1d:80:7c:88:59:5d:
         e7:61:ae:a8:a8:cb:37:f2:fb:c3:50:5b:9e:55:9e:00:ee:6a:
         48:2b:8b:25:c4:0f:7c:14:42:0c:2c:4f:9d:42:48:26:1a:8e:
         c6:7c:3e:f2:67:73:e1:ba:9e:b3:e9:97:94:79:b0:ac:1e:11:
         06:0a:1a:1a:78:04:de:d9:79:bf:fa:08:c4:ef:4b:d5:f0:cc:
         d0:50:da:b6:cf:69:84:0b:16:19:b2:37:49:b1:a1:4a:d7:6f:
         34:3d:e8:82:2b:78:87:55:c7:13:89:d8:79:f2:32:30:8d:0a:
         78:a8:d2:86:31:ab:80:19:a1:47:46:5b:a7:70:5e:5b:70:1b:
         3a:17:59:5b:e7:51:48:13:82:b0:1b:d7:05:96:89:f8:9a:90:
         46:45:78:02:9c:c3:4e:3b:f0:5c:90:3d:6f:7b:46:e7:68:d7:
         86:42:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----