Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/323830313a31653a313030303a3a2f34382d3438203d3e20323634363233.roa
File:                     323830313a31653a313030303a3a2f34382d3438203d3e20323634363233.roa (raw, json)
Hash identifier:          NnbisK2Ech6XuzosKTGeCgeify50R761LDTLr+BtDWk=
Subject key identifier:   7B:A4:F9:D8:34:9C:53:7D:3B:43:6B:E3:AE:3E:F1:97:83:79:5C:55
Certificate issuer:       /CN=FBE54D0AE44D53393B0E5370CA6211CB067D2481
Certificate serial:       3BC156BF31A6BB3A68D7C36F1A7B816BEBBB4326
Authority key identifier: FB:E5:4D:0A:E4:4D:53:39:3B:0E:53:70:CA:62:11:CB:06:7D:24:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/323830313a31653a313030303a3a2f34382d3438203d3e20323634363233.roa
Signing time:             Tue 05 Mar 2024 17:53:42 +0000
ROA not before:           Tue 05 Mar 2024 17:48:42 +0000
ROA not after:            Tue 04 Mar 2025 17:53:42 +0000
asID:                     264623
IP address blocks:        2801:1e:1000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c1:56:bf:31:a6:bb:3a:68:d7:c3:6f:1a:7b:81:6b:eb:bb:43:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBE54D0AE44D53393B0E5370CA6211CB067D2481
        Validity
            Not Before: Mar  5 17:48:42 2024 GMT
            Not After : Mar  4 17:53:42 2025 GMT
        Subject: CN=7BA4F9D8349C537D3B436BE3AE3EF19783795C55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4d:3c:14:63:be:72:5c:be:e4:91:9a:0a:f1:
                    6a:30:eb:ab:98:3a:29:a8:90:a0:5c:8b:d9:c4:21:
                    8b:ba:44:e6:b9:04:1d:0d:9c:6e:e9:f9:eb:a1:a7:
                    d7:d7:e1:ed:d3:17:55:fe:76:94:d3:0d:70:82:f6:
                    5b:9c:a6:c7:11:72:bb:14:35:af:eb:6f:32:6f:b8:
                    cd:1b:cd:8e:43:d8:0a:eb:0e:37:f7:bc:4b:77:d4:
                    14:8f:8b:de:d1:19:83:ef:cf:52:ca:e6:86:b3:e9:
                    4a:4a:e8:92:26:01:fc:25:6a:1e:c3:0c:4d:2b:59:
                    82:32:21:06:77:2a:d9:ca:cf:3f:4d:dd:d6:dc:0b:
                    e5:96:4e:82:90:7f:7e:77:dd:9b:71:35:bb:0c:76:
                    d5:65:62:9d:c7:23:f7:8d:f3:e7:3d:2d:1c:01:8e:
                    7e:fa:d6:45:b7:51:c0:8d:d0:af:ec:30:85:0c:6d:
                    3c:dc:eb:ed:c3:94:b7:1a:56:cf:0e:af:6c:c4:33:
                    1b:06:db:5f:b7:4d:48:9f:38:1b:b8:c9:2b:aa:cb:
                    c9:f6:6f:00:e5:18:55:01:d5:98:d4:66:7b:49:49:
                    cc:fb:18:44:71:19:92:24:32:60:80:09:44:66:50:
                    a9:12:07:01:0c:f1:69:31:91:57:50:ad:b5:fe:b7:
                    59:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A4:F9:D8:34:9C:53:7D:3B:43:6B:E3:AE:3E:F1:97:83:79:5C:55
            X509v3 Authority Key Identifier:
                keyid:FB:E5:4D:0A:E4:4D:53:39:3B:0E:53:70:CA:62:11:CB:06:7D:24:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FBE54D0AE44D53393B0E5370CA6211CB067D2481.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/92C4C56DD43BCEE0D1C60FC8809E00FFE30B61E7C2D4EB0C900D5B6D878378CB/0/323830313a31653a313030303a3a2f34382d3438203d3e20323634363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:6e:de:61:dc:d0:24:25:e7:3d:02:45:92:7d:5f:e4:66:01:
         c7:1b:40:ce:db:58:d5:85:ca:6e:fe:46:e5:04:18:cb:51:a8:
         85:b9:57:8d:a6:a7:ab:53:af:75:2b:de:17:46:1a:76:d4:83:
         5e:3d:80:e3:77:0d:f5:ac:20:7f:2f:84:ad:b6:ff:32:8a:74:
         f4:2e:a3:46:18:dc:75:cc:ae:e8:fb:57:14:e8:37:8d:12:6b:
         26:af:28:93:bb:44:f2:4d:96:23:e9:8c:da:64:8b:2e:b7:5e:
         19:45:f4:62:0b:13:8b:42:6f:6e:c7:14:b4:46:27:e5:28:91:
         fc:1b:cb:01:4c:7b:61:0e:8a:ac:e4:34:33:01:eb:39:94:6b:
         97:d9:11:29:df:af:07:17:f5:13:d8:02:2b:92:8b:3a:da:e0:
         6c:fc:4e:02:41:aa:31:a5:e9:87:e7:89:2d:c9:ef:4b:0e:7b:
         eb:d3:33:24:95:4a:db:cf:42:02:fd:0a:66:6e:e8:91:9a:f1:
         0a:cd:7b:47:5d:cf:84:75:4f:c5:78:ba:3b:5b:c8:fa:a9:53:
         41:51:34:13:f1:e9:01:e6:28:e5:bd:a8:f9:02:9a:d2:ef:63:
         16:03:e8:56:43:65:f8:bc:a0:14:4f:55:d0:93:ff:29:ca:30:
         30:eb:f6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----