Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e20313938393439.roa
File:                     323830313a303a3464303a3a2f34382d3438203d3e20313938393439.roa (raw, json)
Hash identifier:          DQENfG4CsqFnLn/DdZRuijkaNybiayIH86z1IM1Urpg=
Subject key identifier:   46:4F:EF:E5:AC:D6:C6:9D:B5:48:BF:2D:6D:1F:C6:11:0C:07:FA:CC
Certificate issuer:       /CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
Certificate serial:       25EDC67AC1F573CC38734CD585D639318487A46C
Authority key identifier: 63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e20313938393439.roa
Signing time:             Tue 05 Mar 2024 17:44:14 +0000
ROA not before:           Tue 05 Mar 2024 17:39:14 +0000
ROA not after:            Tue 04 Mar 2025 17:44:14 +0000
asID:                     198949
IP address blocks:        2801:0:4d0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ed:c6:7a:c1:f5:73:cc:38:73:4c:d5:85:d6:39:31:84:87:a4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63DAFE7C6D072AD758B2EAA7C654C528C8DD256B
        Validity
            Not Before: Mar  5 17:39:14 2024 GMT
            Not After : Mar  4 17:44:14 2025 GMT
        Subject: CN=464FEFE5ACD6C69DB548BF2D6D1FC6110C07FACC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f2:d9:e3:45:a2:57:c0:f3:e1:c2:38:9a:71:
                    81:00:e4:68:95:9f:38:7e:44:59:f5:bf:6d:ee:15:
                    0d:2c:0b:73:7c:c1:e7:77:11:79:ee:7f:ec:bc:5a:
                    12:92:3f:65:de:63:6e:8a:fb:a4:37:a8:53:e3:1c:
                    6f:22:6a:12:07:bc:a1:59:21:5c:73:72:ca:e6:d6:
                    15:e0:26:95:37:dd:7c:a1:be:8f:17:a2:f0:08:40:
                    54:10:0a:c5:62:f9:a0:9e:37:1e:a0:79:60:d0:87:
                    95:9d:92:84:e1:12:74:1c:d0:86:c6:69:ed:84:0f:
                    1f:cb:d7:6e:73:10:cf:00:ba:d1:48:44:a8:9a:41:
                    6b:2f:a4:fb:09:f9:d0:00:17:10:c1:d5:0d:26:37:
                    c0:f5:e3:3c:f2:af:9b:46:ef:bf:58:18:f2:aa:a6:
                    48:9b:8d:c1:99:9d:c0:3d:1b:ac:e7:be:79:24:e6:
                    0a:09:7a:32:cf:c9:0c:aa:3a:2a:8f:f9:77:c7:a0:
                    5e:74:b0:46:a0:d3:8f:84:11:b5:84:46:a2:c4:e8:
                    d0:9c:71:40:d2:6f:74:8a:93:76:33:87:8c:d5:d8:
                    04:2a:97:ae:69:50:6b:29:a2:92:11:b2:e6:0d:10:
                    f9:5f:af:3b:ae:60:d7:3d:e3:28:f1:08:0a:3c:95:
                    e3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4F:EF:E5:AC:D6:C6:9D:B5:48:BF:2D:6D:1F:C6:11:0C:07:FA:CC
            X509v3 Authority Key Identifier:
                keyid:63:DA:FE:7C:6D:07:2A:D7:58:B2:EA:A7:C6:54:C5:28:C8:DD:25:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/63DAFE7C6D072AD758B2EAA7C654C528C8DD256B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AA65778EA2BA3F645381CFB03A90993513067039B2404F9272E8401B13C62151/0/323830313a303a3464303a3a2f34382d3438203d3e20313938393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:4d0::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:93:8f:0d:fc:4d:ec:33:78:03:0b:d5:8e:e6:ba:5f:29:8b:
         aa:7c:90:84:a6:a0:36:0e:da:80:89:0d:6e:bb:b8:2c:80:1c:
         45:e5:c2:c6:1e:c9:ac:73:a8:5f:79:6f:d2:bb:42:f3:92:f0:
         3c:08:16:05:3a:6f:9e:b9:c0:7e:1e:b8:65:d0:0d:a8:51:a5:
         55:0e:ed:31:91:18:30:8c:7d:f2:20:b9:6d:08:0e:23:6f:26:
         47:9a:14:92:5a:e9:cf:09:2b:a6:7d:58:73:98:2d:91:71:6f:
         68:89:c3:6a:a9:27:de:1c:41:9e:aa:79:49:02:f4:34:44:34:
         38:7e:cc:a1:f8:0d:e4:7c:65:1b:91:cb:19:9d:ca:0b:e6:03:
         ac:ac:9a:27:dc:f0:eb:9b:2d:7e:a5:19:90:0d:8f:c5:7b:81:
         a9:d5:89:04:52:04:48:57:b8:74:7d:91:29:9d:fa:c4:07:b3:
         2d:79:b6:39:09:01:b8:67:58:c0:3b:26:ea:5a:b7:88:ed:50:
         36:e9:6b:89:e0:03:b3:2f:de:f5:16:73:69:87:1f:08:fe:75:
         73:9d:46:b9:dd:73:a2:f4:77:98:67:48:a9:8c:df:f8:93:a0:
         e9:ee:af:76:06:6b:23:5d:b7:1e:24:43:7f:2f:5e:c0:6a:92:
         08:3a:78:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----