Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8F9E12AD9D4BB1559B90B8383572AEDF9D614F063A2BD6B8EDA92B297ED100E0/0/323830313a3138633a353a313034363a3a2f36342d3634203d3e20313831383138.roa
File:                     323830313a3138633a353a313034363a3a2f36342d3634203d3e20313831383138.roa (raw, json)
Hash identifier:          DzANcShvbjnD8nmxy0NXY+72GUo5uRZOIz0iZsIs1Y8=
Subject key identifier:   79:E2:99:82:B2:0F:4C:57:C0:2C:45:2C:37:AA:29:FA:DD:DC:FC:CB
Certificate issuer:       /CN=5C3619D30B34AEF3C8BB24B8B681B3114C37F36F
Certificate serial:       3CAE286160B90185C16A29BE840B40F8927B6F58
Authority key identifier: 5C:36:19:D3:0B:34:AE:F3:C8:BB:24:B8:B6:81:B3:11:4C:37:F3:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C3619D30B34AEF3C8BB24B8B681B3114C37F36F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8F9E12AD9D4BB1559B90B8383572AEDF9D614F063A2BD6B8EDA92B297ED100E0/0/323830313a3138633a353a313034363a3a2f36342d3634203d3e20313831383138.roa
Signing time:             Wed 30 Oct 2024 02:00:00 +0000
ROA not before:           Wed 30 Oct 2024 01:55:00 +0000
ROA not after:            Wed 29 Oct 2025 02:00:00 +0000
asID:                     181818
IP address blocks:        2801:18c:5:1046::/64 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ae:28:61:60:b9:01:85:c1:6a:29:be:84:0b:40:f8:92:7b:6f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C3619D30B34AEF3C8BB24B8B681B3114C37F36F
        Validity
            Not Before: Oct 30 01:55:00 2024 GMT
            Not After : Oct 29 02:00:00 2025 GMT
        Subject: CN=79E29982B20F4C57C02C452C37AA29FADDDCFCCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4f:ff:24:cb:9b:fc:81:99:42:59:fe:c0:1f:
                    12:8d:ec:f7:6e:ba:05:7c:93:e7:b1:ff:7b:52:9f:
                    4d:12:2e:33:96:67:6e:2c:2b:45:31:fd:b8:94:a8:
                    6e:c4:14:22:0d:a5:0d:ea:8c:04:ee:13:66:28:32:
                    c3:aa:16:a2:a4:77:f2:73:52:53:0e:b8:85:36:e9:
                    90:4f:37:fb:fe:e9:7b:d8:76:6d:dd:da:08:95:38:
                    7e:29:8f:0b:58:88:06:ff:90:34:d3:4c:74:a1:d4:
                    69:90:74:00:4f:b6:5f:e7:8c:e9:d6:e8:b1:b5:c6:
                    44:9b:21:30:80:98:f4:ca:32:6f:16:9f:31:58:bf:
                    ee:18:b3:5c:15:82:8c:0d:1b:9c:35:1d:44:66:a4:
                    2c:83:c8:c3:5c:99:38:d4:fb:0a:07:26:29:98:75:
                    45:4a:cd:ab:b3:b4:27:01:60:10:13:b3:25:07:bc:
                    d2:fa:c9:fb:c9:9f:fe:d0:3b:6d:ec:43:30:dd:a3:
                    a8:4e:83:dc:fa:ce:b3:66:c5:a1:56:a8:ef:fb:46:
                    b2:fa:a3:c2:f2:49:f1:62:28:2d:ac:fb:ef:57:85:
                    7c:80:83:a0:2c:64:8d:77:a0:f2:d2:1e:36:92:fe:
                    83:ec:73:5a:3e:0a:b7:eb:7c:25:87:b8:05:e3:1f:
                    ca:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:E2:99:82:B2:0F:4C:57:C0:2C:45:2C:37:AA:29:FA:DD:DC:FC:CB
            X509v3 Authority Key Identifier:
                keyid:5C:36:19:D3:0B:34:AE:F3:C8:BB:24:B8:B6:81:B3:11:4C:37:F3:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8F9E12AD9D4BB1559B90B8383572AEDF9D614F063A2BD6B8EDA92B297ED100E0/0/5C3619D30B34AEF3C8BB24B8B681B3114C37F36F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5C3619D30B34AEF3C8BB24B8B681B3114C37F36F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8F9E12AD9D4BB1559B90B8383572AEDF9D614F063A2BD6B8EDA92B297ED100E0/0/323830313a3138633a353a313034363a3a2f36342d3634203d3e20313831383138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18c:5:1046::/64

    Signature Algorithm: sha256WithRSAEncryption
         5e:37:c1:99:7b:c3:92:ac:81:85:a9:46:b0:64:40:a5:84:ff:
         79:77:cf:26:5b:ca:9a:a5:cd:af:94:d4:7f:3d:a8:9c:3a:21:
         04:d2:a6:1b:e8:a0:de:0d:75:1c:50:b5:10:44:32:b1:d1:4b:
         e3:30:3b:1f:c0:fa:20:db:79:38:f7:63:99:a8:cb:b6:09:a5:
         03:f9:62:cc:f3:53:90:15:f2:02:97:cd:b1:72:0c:9b:dc:ab:
         23:07:a0:5d:6f:17:52:b8:7a:92:01:26:37:ea:1f:c3:d5:40:
         86:59:81:31:03:11:54:f6:3c:99:31:46:03:fc:80:cb:9f:16:
         c5:38:9f:97:c7:15:a9:32:76:b8:66:b3:67:4e:48:e5:7b:90:
         d9:b2:d5:c8:9f:89:4f:ad:1b:a1:b6:35:ec:1e:68:fb:9c:92:
         d0:c3:df:5c:5c:48:38:09:ff:d6:41:d6:91:6b:a9:6f:ea:2b:
         bc:57:b8:ba:96:74:a2:73:b2:d5:6a:e7:ff:b1:5d:46:f7:0d:
         20:c2:cc:e8:7a:8a:65:1c:b3:75:7a:1e:77:fd:16:48:25:88:
         4b:37:5a:95:54:73:6d:18:b7:1f:c0:ca:92:d8:3f:47:30:15:
         5a:22:c1:08:6b:4d:94:d5:b0:ad:8e:a2:7f:a3:8f:23:39:90:
         5f:42:4c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----