Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A0A99BC59160F7B3250870F78667E4FB29209FF63D709572A3A9D8FCE3741CC3/0/323830313a31623a623830303a3a2f34382d3438203d3e20323733313139.roa
File:                     323830313a31623a623830303a3a2f34382d3438203d3e20323733313139.roa (raw, json)
Hash identifier:          M31qGgGpNa7QevbNGTWXvcRusAPO/a0NkL2uiXxa+oI=
Subject key identifier:   C0:8A:C7:88:99:FF:39:0F:16:1F:F1:50:2B:09:20:99:B3:1B:86:59
Certificate issuer:       /CN=64A9B58D9CA1F4B52522EFDE758B7420B9D36373
Certificate serial:       0A341DE7878B0F781DAFCCFC0160916C3C0EEBBD
Authority key identifier: 64:A9:B5:8D:9C:A1:F4:B5:25:22:EF:DE:75:8B:74:20:B9:D3:63:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A9B58D9CA1F4B52522EFDE758B7420B9D36373.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A0A99BC59160F7B3250870F78667E4FB29209FF63D709572A3A9D8FCE3741CC3/0/323830313a31623a623830303a3a2f34382d3438203d3e20323733313139.roa
Signing time:             Fri 04 Oct 2024 13:30:00 +0000
ROA not before:           Fri 04 Oct 2024 13:25:00 +0000
ROA not after:            Fri 03 Oct 2025 13:30:00 +0000
asID:                     273119
IP address blocks:        2801:1b:b800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:34:1d:e7:87:8b:0f:78:1d:af:cc:fc:01:60:91:6c:3c:0e:eb:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64A9B58D9CA1F4B52522EFDE758B7420B9D36373
        Validity
            Not Before: Oct  4 13:25:00 2024 GMT
            Not After : Oct  3 13:30:00 2025 GMT
        Subject: CN=C08AC78899FF390F161FF1502B092099B31B8659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:de:10:ce:17:68:d9:80:ed:22:98:06:ff:ad:
                    25:95:2c:f0:37:2a:f1:23:47:6a:e5:d3:60:78:56:
                    d5:43:a7:48:22:3d:2e:bb:bd:ed:52:2d:83:bf:43:
                    89:2a:1b:e4:49:0e:d0:7d:f4:69:85:df:eb:bc:f4:
                    b4:ac:fa:88:37:38:51:99:e1:72:d9:c0:c4:63:88:
                    ae:87:54:b6:d8:f1:fb:97:21:7b:f4:cf:0f:8d:a6:
                    14:dd:c1:e9:c6:ca:97:9a:e3:82:f5:12:a5:db:3f:
                    63:3b:ac:c7:7c:2e:c9:ff:d2:59:cf:cf:2b:59:a0:
                    4c:a3:10:63:c0:82:71:bc:51:38:a4:f9:7f:5f:4d:
                    53:7c:42:f4:31:90:82:ad:60:f3:15:d3:de:16:f8:
                    b8:e5:39:d8:9c:fb:22:d0:4c:a8:69:c1:4b:d3:de:
                    53:79:7b:d5:97:c6:c6:11:4d:42:13:45:cf:d0:13:
                    5c:3e:8e:66:99:05:d5:49:cc:a3:7e:ee:15:b6:e9:
                    75:f6:07:57:17:d3:07:ec:b2:f6:f1:38:f5:00:9f:
                    51:5f:1b:f8:b8:e0:bb:d3:49:3d:9c:64:51:28:54:
                    2e:a5:00:3c:47:86:7d:f2:a9:47:8c:bf:4b:0d:62:
                    35:ce:e5:2e:7c:34:2d:6d:07:08:d1:49:4a:ed:d7:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:8A:C7:88:99:FF:39:0F:16:1F:F1:50:2B:09:20:99:B3:1B:86:59
            X509v3 Authority Key Identifier:
                keyid:64:A9:B5:8D:9C:A1:F4:B5:25:22:EF:DE:75:8B:74:20:B9:D3:63:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A0A99BC59160F7B3250870F78667E4FB29209FF63D709572A3A9D8FCE3741CC3/0/64A9B58D9CA1F4B52522EFDE758B7420B9D36373.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A9B58D9CA1F4B52522EFDE758B7420B9D36373.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A0A99BC59160F7B3250870F78667E4FB29209FF63D709572A3A9D8FCE3741CC3/0/323830313a31623a623830303a3a2f34382d3438203d3e20323733313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:72:d1:a4:1f:46:28:24:1f:67:d5:2b:dd:4f:c8:66:ba:0a:
         09:66:8d:f6:8d:54:68:ba:e3:00:94:cf:b8:e4:26:80:81:3a:
         13:6f:12:2f:18:01:d1:b5:20:56:df:e8:7d:d5:0f:db:f9:ed:
         74:98:10:9c:92:2d:fb:4d:36:33:20:e7:1d:db:24:41:57:ae:
         ca:15:ec:2c:b3:f5:d2:00:86:18:1c:bb:d7:a4:5c:4e:76:25:
         a0:9d:39:e3:0d:f2:33:d2:bb:5a:79:0a:80:59:79:8d:07:b0:
         8c:3f:87:05:a9:fa:07:e6:81:8e:4d:66:ec:3d:cf:9c:b6:fd:
         f1:7f:40:d7:68:34:71:29:be:f1:88:8c:2c:b3:89:f0:16:df:
         ef:3f:7b:72:4a:a1:ab:99:1f:7a:bc:cf:41:d1:db:3e:2e:73:
         4e:8e:6c:4e:10:66:2a:a6:24:0d:a9:78:43:72:db:21:71:0b:
         0b:1e:1e:51:cc:29:04:a6:b7:3f:84:0c:f2:21:4d:5a:2a:49:
         29:05:6f:22:c0:cc:c8:24:a0:a8:8a:3e:88:c8:27:9a:52:93:
         8f:63:18:ed:5c:d6:65:80:23:30:e8:77:6b:b7:e6:d7:16:32:
         df:d5:fc:6b:a0:74:4e:de:70:98:62:ab:a0:f0:ff:57:a0:fd:
         d2:01:52:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----