Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/323830313a31623a323830303a3a2f34382d3438203d3e20323730303734.roa
File:                     323830313a31623a323830303a3a2f34382d3438203d3e20323730303734.roa (raw, json)
Hash identifier:          d6P1MBvDE4wlYCRfh244+1D66Zry9cyVnIQDH6j+AG8=
Subject key identifier:   EC:DB:45:D4:67:6C:04:C7:F4:26:75:BF:54:46:A8:38:74:9D:88:42
Certificate issuer:       /CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
Certificate serial:       064E0D5F7DCDF673CD37AE56D44F69D692D8A0B6
Authority key identifier: FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/323830313a31623a323830303a3a2f34382d3438203d3e20323730303734.roa
Signing time:             Tue 05 Mar 2024 18:14:09 +0000
ROA not before:           Tue 05 Mar 2024 18:09:09 +0000
ROA not after:            Tue 04 Mar 2025 18:14:09 +0000
asID:                     270074
IP address blocks:        2801:1b:2800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4e:0d:5f:7d:cd:f6:73:cd:37:ae:56:d4:4f:69:d6:92:d8:a0:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC9DD0E87EF2F26EE3177696A25789D0A68599EF
        Validity
            Not Before: Mar  5 18:09:09 2024 GMT
            Not After : Mar  4 18:14:09 2025 GMT
        Subject: CN=ECDB45D4676C04C7F42675BF5446A838749D8842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:06:dc:ea:53:d6:e6:0b:4f:54:41:32:74:c6:
                    e0:cb:cf:85:a6:c0:4b:05:58:c9:c1:cf:d5:30:c8:
                    82:21:b6:5a:14:86:f9:d0:4c:0e:a4:a0:03:80:af:
                    ac:ea:4d:14:c2:b2:f4:74:b4:de:32:41:d5:41:e7:
                    61:32:9d:2b:5e:e2:01:82:89:f1:9e:78:77:04:ff:
                    2e:0f:7f:fc:3c:2f:13:ca:d3:da:e6:51:25:21:d9:
                    18:1a:e9:dc:d8:8f:f1:4a:c7:1d:d7:36:10:a4:58:
                    83:fc:cc:30:fa:9d:f3:cf:cc:20:2a:53:b1:75:a8:
                    dc:e6:8e:73:14:4e:b9:f3:be:e7:ca:b9:8c:bb:2a:
                    ab:e4:ea:05:5e:9f:9c:3a:d6:cf:e7:1b:b8:b8:9a:
                    ac:ab:02:c2:7e:07:57:86:a3:a4:fc:1a:2e:23:c6:
                    52:8e:7e:da:41:95:eb:0c:b8:25:f4:ea:b8:17:f4:
                    77:5a:0b:e7:84:e8:ce:98:c7:af:a8:ee:63:e6:8a:
                    11:90:ab:7c:a4:a7:9e:f2:b4:f9:b4:99:9b:48:d0:
                    b0:ba:88:2a:0b:54:44:ec:f2:e3:b5:23:3e:6c:cb:
                    fc:91:34:b8:0e:b9:72:74:d4:7c:47:60:c7:bd:02:
                    67:5c:08:f3:47:ee:9b:6b:9e:a3:dc:b5:12:e1:c7:
                    81:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DB:45:D4:67:6C:04:C7:F4:26:75:BF:54:46:A8:38:74:9D:88:42
            X509v3 Authority Key Identifier:
                keyid:FC:9D:D0:E8:7E:F2:F2:6E:E3:17:76:96:A2:57:89:D0:A6:85:99:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FC9DD0E87EF2F26EE3177696A25789D0A68599EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A1CFB9CC05A650683E2547043E71965E85C3582FDBE6051B283EA7F356F68F92/0/323830313a31623a323830303a3a2f34382d3438203d3e20323730303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:fb:6c:2b:b1:e6:28:20:45:76:8f:73:60:3e:b7:68:7f:ab:
         e7:22:5d:3e:ca:a4:31:34:bc:2d:b3:f1:09:c7:41:2a:ab:98:
         16:de:17:25:00:f4:0b:3a:da:f7:e8:d8:63:5a:19:3b:53:86:
         c7:a7:4f:ad:ae:30:ec:76:a7:4c:b2:95:d5:6b:12:85:29:37:
         11:03:0d:fb:5f:55:31:58:40:be:d6:e0:7f:fd:1b:cc:92:bb:
         5a:ae:3e:d3:b4:a7:1e:c4:9b:b3:d8:95:67:53:6e:88:c1:23:
         b0:76:24:66:59:9f:6b:a2:ea:42:89:82:1d:ec:56:4e:f2:ea:
         54:e4:c7:0d:50:14:83:bc:a4:1d:1a:ca:ec:93:92:6e:9c:cb:
         da:df:97:d7:62:fe:2b:f5:9e:22:ed:ea:25:87:85:36:ad:9d:
         be:d9:01:24:0a:74:cc:24:2b:82:d0:c1:55:68:82:15:ee:68:
         38:4a:93:0a:01:07:f6:85:f7:44:01:d1:b1:bb:8c:43:4a:df:
         5d:9e:59:b7:82:2d:77:ab:bf:d5:5f:82:d7:80:ae:34:16:a6:
         ea:80:ad:38:3d:de:20:43:b9:3a:40:2a:6d:8d:8c:3f:0c:58:
         59:f7:af:de:a8:d8:eb:40:6e:cf:15:07:d6:d9:39:33:8d:44:
         d0:b3:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----