Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/323830313a3139303a3a2f34302d3434203d3e203532343838.roa
File:                     323830313a3139303a3a2f34302d3434203d3e203532343838.roa (raw, json)
Hash identifier:          fCd85mrI+0dgCo3xvhBpMascjndm/sQz99orqvgwXLM=
Subject key identifier:   88:08:23:C0:F3:84:83:9C:C7:4B:FA:54:28:3B:76:E0:F9:0E:17:A8
Certificate issuer:       /CN=701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC
Certificate serial:       736D33CC357828D51E03F621D54CD3CB6D45FB5B
Authority key identifier: 70:1E:1F:D0:4F:15:49:BD:B6:2D:5F:31:FE:C6:DE:58:97:0D:CF:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/323830313a3139303a3a2f34302d3434203d3e203532343838.roa
Signing time:             Tue 05 Mar 2024 18:14:35 +0000
ROA not before:           Tue 05 Mar 2024 18:09:35 +0000
ROA not after:            Tue 04 Mar 2025 18:14:35 +0000
asID:                     52488
IP address blocks:        2801:190::/40 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:6d:33:cc:35:78:28:d5:1e:03:f6:21:d5:4c:d3:cb:6d:45:fb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC
        Validity
            Not Before: Mar  5 18:09:35 2024 GMT
            Not After : Mar  4 18:14:35 2025 GMT
        Subject: CN=880823C0F384839CC74BFA54283B76E0F90E17A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:01:c6:10:4f:8a:50:f4:0f:63:7e:cf:1d:32:
                    c7:80:c3:91:9c:28:cd:41:01:6b:17:45:59:7f:6e:
                    1e:07:10:ad:75:59:b7:b4:8f:80:10:b6:07:50:56:
                    9d:27:fe:e2:0f:49:a3:a6:62:22:f2:84:4b:3c:a1:
                    62:db:3a:28:26:6f:fa:b6:0a:69:c4:33:99:85:dd:
                    56:d7:73:55:03:ae:72:b3:5f:05:95:7e:0d:9b:8b:
                    27:46:18:d2:62:37:45:61:e8:9f:a8:9e:23:7b:23:
                    8b:04:cd:f4:22:a0:a2:0f:84:61:b8:b7:d7:4c:db:
                    12:5a:7f:fc:e3:da:d3:14:7b:08:0d:7d:f5:7a:66:
                    d1:55:8d:7f:b0:cf:93:5f:35:52:3f:33:38:e4:71:
                    c3:d0:8a:cc:71:65:0c:e6:58:0a:51:f7:24:99:87:
                    11:67:b3:54:29:94:36:97:5c:b3:cb:2a:88:b4:5b:
                    d9:71:31:26:76:0f:d1:0c:bd:3e:b3:bf:25:3c:68:
                    12:a3:92:50:e8:0a:92:3b:ff:1a:dc:f9:20:81:21:
                    4c:d8:db:ef:69:20:b4:f4:d6:55:b9:b5:3d:6c:af:
                    b6:71:79:53:10:30:d4:d0:6b:3d:3c:12:e7:77:6f:
                    ff:43:41:a2:ba:98:7c:5d:ea:a9:af:13:ca:3f:07:
                    d3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:08:23:C0:F3:84:83:9C:C7:4B:FA:54:28:3B:76:E0:F9:0E:17:A8
            X509v3 Authority Key Identifier:
                keyid:70:1E:1F:D0:4F:15:49:BD:B6:2D:5F:31:FE:C6:DE:58:97:0D:CF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/701E1FD04F1549BDB62D5F31FEC6DE58970DCFCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7BC4B2F7986968C12D5BB70FF862D98C21252312266E0418E6E39E8D3256009/0/323830313a3139303a3a2f34302d3434203d3e203532343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:190::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:a4:37:7b:93:b0:51:9e:9e:86:50:bc:c2:b9:65:70:65:c4:
         ef:b6:cc:70:60:23:04:f8:69:a3:2e:b3:5c:75:c6:f8:9e:cb:
         72:3b:27:a4:0b:21:c7:a0:7e:93:cd:74:a6:0e:de:7c:41:d5:
         65:96:39:df:b5:cc:7d:2b:83:ca:4f:7d:3e:54:07:e8:a9:f6:
         39:22:32:39:45:4d:20:d8:e2:d1:70:94:22:cc:76:42:9b:0f:
         57:5c:1c:a2:1c:b2:0d:24:8e:96:82:e9:76:54:08:42:2c:73:
         de:91:ae:ac:81:1a:7b:a1:87:51:7d:db:3c:f8:e3:0e:25:1d:
         8d:ae:b7:9f:5c:26:2b:85:cd:a6:33:35:9a:3e:19:98:a3:96:
         68:8e:18:7e:05:43:7f:5a:d2:b1:45:12:f9:d0:cb:e2:97:f7:
         94:43:92:a4:bd:4c:22:8a:df:7e:d2:9a:52:4c:85:b9:0e:17:
         16:79:6e:e9:08:17:9c:66:11:b1:d6:a2:fc:0d:02:44:27:40:
         7c:1b:08:77:f1:ec:44:f4:2b:a2:05:1e:56:ac:88:7c:0b:ef:
         92:19:a5:44:b3:d4:f3:29:62:23:20:cd:a5:71:cd:35:db:ba:
         46:81:3e:34:8f:11:ff:c6:50:f9:6f:ca:df:b1:d0:fe:fc:8b:
         2b:c8:1e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----