Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/323830313a303a3134303a3a2f34382d3634203d3e203532333134.roa
File:                     323830313a303a3134303a3a2f34382d3634203d3e203532333134.roa (raw, json)
Hash identifier:          5R4n6I5pae/Loc8zLNLbawicR/wa5QFZNPgJzEevkg8=
Subject key identifier:   DF:50:A0:E7:08:90:9E:59:AF:AC:F5:CF:D2:F2:AB:83:0A:BD:92:B0
Certificate issuer:       /CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
Certificate serial:       33993C0050B9CF7BF4E6468003CEB3FEF8EE1A41
Authority key identifier: 99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/323830313a303a3134303a3a2f34382d3634203d3e203532333134.roa
Signing time:             Tue 05 Mar 2024 18:23:34 +0000
ROA not before:           Tue 05 Mar 2024 18:18:34 +0000
ROA not after:            Tue 04 Mar 2025 18:23:34 +0000
asID:                     52314
IP address blocks:        2801:0:140::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:99:3c:00:50:b9:cf:7b:f4:e6:46:80:03:ce:b3:fe:f8:ee:1a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99A4B645BCE1A6FA746C89A3F6E22889F8F2088C
        Validity
            Not Before: Mar  5 18:18:34 2024 GMT
            Not After : Mar  4 18:23:34 2025 GMT
        Subject: CN=DF50A0E708909E59AFACF5CFD2F2AB830ABD92B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:32:98:d8:50:5e:14:a1:a6:f0:a4:95:57:
                    5c:8b:0d:34:48:de:0f:c0:dc:86:0e:03:ec:49:47:
                    7c:d0:9f:8a:ac:39:08:e8:ba:1e:95:b0:ad:f7:85:
                    fc:95:4f:ae:6d:b4:68:e5:09:0e:35:65:c1:7a:df:
                    a9:21:ab:49:44:ac:e7:87:76:7d:c2:59:be:50:79:
                    07:61:08:63:12:61:75:52:79:e5:b2:49:eb:14:28:
                    97:84:6e:f0:5e:bf:ca:ac:89:3b:f7:4b:d0:8e:5b:
                    e5:de:f1:4d:e4:ee:59:ee:59:56:69:a3:7e:7a:2b:
                    0a:57:2b:47:37:ed:b7:48:cd:fa:e5:2c:d1:2b:e4:
                    31:13:61:17:40:89:f6:72:93:08:d9:20:9f:53:d4:
                    27:3c:7b:68:77:52:e7:b6:58:5b:9c:e4:c9:16:03:
                    cd:74:46:26:3c:63:f6:2c:ec:45:54:e8:0f:da:a3:
                    e3:00:b0:db:79:0e:e7:82:fd:06:e1:8a:a9:bb:14:
                    b1:18:ea:bb:9d:67:cf:06:01:e5:f9:cb:53:b3:9e:
                    c9:bd:a1:75:cd:74:76:18:c8:6d:00:77:ae:e5:7d:
                    bc:9d:3d:c4:b3:a4:d9:9d:4f:3c:98:10:88:23:60:
                    ce:87:d5:a0:d5:90:0c:ce:ad:64:b2:75:20:75:eb:
                    7f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:50:A0:E7:08:90:9E:59:AF:AC:F5:CF:D2:F2:AB:83:0A:BD:92:B0
            X509v3 Authority Key Identifier:
                keyid:99:A4:B6:45:BC:E1:A6:FA:74:6C:89:A3:F6:E2:28:89:F8:F2:08:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/99A4B645BCE1A6FA746C89A3F6E22889F8F2088C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA4E20598674DC9DA80E176D835AD27168C6CB80289E64E21C1615B35E57A1C0/0/323830313a303a3134303a3a2f34382d3634203d3e203532333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:140::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:46:d3:d6:17:f3:38:30:85:82:c3:de:b4:48:17:26:54:f5:
         76:5a:c5:4f:6a:29:b0:f2:93:ba:45:b4:7b:48:57:75:e9:8e:
         9a:c8:ce:a9:be:3c:4f:50:21:cd:45:e1:12:1a:40:ed:ad:5e:
         ce:f1:e8:40:4f:50:43:f0:92:b7:b1:be:f4:a9:44:42:f3:48:
         f3:b9:27:f0:c3:d3:44:3b:1c:2b:26:64:b0:10:08:9f:b8:0f:
         98:c5:de:a1:86:fa:4a:3d:7b:d3:c9:4c:e7:77:b8:8c:77:11:
         d9:df:d6:5f:a3:28:fc:19:27:72:5c:b1:58:47:5b:33:46:62:
         31:7c:5a:e8:92:27:db:ba:a2:1b:ff:8d:9d:02:97:ec:98:98:
         b0:0e:a8:2b:9a:d9:c4:7d:d9:e8:a5:d5:f1:90:18:98:ba:74:
         8e:cb:e0:c3:b9:61:cc:ac:ec:ee:47:76:05:c8:48:3b:d4:65:
         95:77:9b:ce:45:15:d9:cc:24:32:26:97:55:3a:dd:8d:9b:5e:
         68:2d:14:b9:fb:c1:67:8b:4e:ba:52:a3:2d:88:f3:56:a4:e3:
         c6:6f:37:c6:a5:dc:e9:56:4a:6c:52:db:36:87:8b:3d:4e:8f:
         c0:07:d9:57:e8:b1:3a:c8:1f:63:d8:6d:8e:95:29:f6:8d:33:
         c7:6f:9f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----