Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BD1C9DCC7BDFB129167CD207344A32E825DE29ED4AC396B96022508B43A815A0/0/323830313a3132313a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3132313a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          zWCkYdHnZSgXDclfx3wWXhhPmHhf+WsvZA+c1YMm0sw=
Subject key identifier:   36:3A:8C:50:96:0D:B5:13:D3:6C:6E:90:0E:19:89:38:F2:20:07:B5
Certificate issuer:       /CN=84CDD5D33C4FC6FCDF890BD51C58053E2C8FF40F
Certificate serial:       490E4895534064991D004DACB9013F52C6373FC5
Authority key identifier: 84:CD:D5:D3:3C:4F:C6:FC:DF:89:0B:D5:1C:58:05:3E:2C:8F:F4:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84CDD5D33C4FC6FCDF890BD51C58053E2C8FF40F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BD1C9DCC7BDFB129167CD207344A32E825DE29ED4AC396B96022508B43A815A0/0/323830313a3132313a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 17:55:33 +0000
ROA not before:           Tue 05 Mar 2024 17:50:33 +0000
ROA not after:            Tue 04 Mar 2025 17:55:33 +0000
asID:                     19429
IP address blocks:        2801:121::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0e:48:95:53:40:64:99:1d:00:4d:ac:b9:01:3f:52:c6:37:3f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84CDD5D33C4FC6FCDF890BD51C58053E2C8FF40F
        Validity
            Not Before: Mar  5 17:50:33 2024 GMT
            Not After : Mar  4 17:55:33 2025 GMT
        Subject: CN=363A8C50960DB513D36C6E900E198938F22007B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:a7:b9:20:ee:85:e6:18:ca:36:c6:0d:ee:
                    6f:86:72:d6:d1:59:6b:b5:15:51:40:7a:f6:25:1c:
                    bd:40:02:59:30:d8:4d:50:c5:24:42:f0:bf:6a:0b:
                    77:f7:de:c4:e4:30:ed:0f:23:9f:d1:e6:d2:29:5d:
                    b1:9a:42:03:aa:cc:b4:94:a5:d6:b2:54:63:7e:b0:
                    05:73:27:36:54:f5:b5:3f:19:91:df:42:6b:08:0d:
                    ae:15:8e:28:40:61:d6:8b:4d:5d:51:b1:11:9c:00:
                    12:1d:f3:44:8f:f8:eb:7e:cb:0a:70:57:37:25:a2:
                    7a:6a:bd:8a:7e:5e:fe:f0:01:1e:43:fd:62:88:20:
                    c7:68:fc:51:65:21:cf:1f:2f:38:ba:c2:a8:70:8d:
                    a6:d1:cb:0c:88:63:8b:2b:d8:20:5b:a6:0f:6e:99:
                    71:1e:e8:57:24:3f:4c:fb:16:db:39:d7:64:8c:16:
                    48:ca:12:3f:e5:00:61:62:c5:77:5d:4f:43:a5:86:
                    b1:9a:61:ff:5b:d6:e5:b2:22:fa:d5:75:1d:b4:2b:
                    ae:9c:bb:66:69:68:25:13:72:98:5e:c4:21:5f:c2:
                    95:af:2c:5f:66:23:fb:b2:ca:a3:d1:81:e7:2a:b1:
                    94:98:2f:62:35:bc:b2:18:a9:ac:a7:6e:bb:91:e0:
                    ec:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3A:8C:50:96:0D:B5:13:D3:6C:6E:90:0E:19:89:38:F2:20:07:B5
            X509v3 Authority Key Identifier:
                keyid:84:CD:D5:D3:3C:4F:C6:FC:DF:89:0B:D5:1C:58:05:3E:2C:8F:F4:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BD1C9DCC7BDFB129167CD207344A32E825DE29ED4AC396B96022508B43A815A0/0/84CDD5D33C4FC6FCDF890BD51C58053E2C8FF40F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/84CDD5D33C4FC6FCDF890BD51C58053E2C8FF40F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BD1C9DCC7BDFB129167CD207344A32E825DE29ED4AC396B96022508B43A815A0/0/323830313a3132313a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:121::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:35:d7:53:db:5e:bc:8a:6a:f7:46:8f:6e:89:39:78:ac:4c:
         d9:81:9e:3d:c6:04:65:53:63:0a:1b:7e:5a:ab:02:54:32:74:
         f0:8f:f3:64:cc:57:5f:50:2b:b0:e3:fd:5d:4a:56:43:42:9b:
         33:67:3c:00:d4:32:d2:fc:bd:46:f7:a4:ea:9c:29:14:7c:3c:
         9e:66:ef:6d:69:12:e5:d9:50:74:7b:bd:26:a8:11:2b:54:c3:
         e5:02:c7:3c:cd:a9:75:47:13:01:ab:e8:08:6d:d1:78:ab:23:
         d5:80:0a:76:53:58:ff:8d:6f:f1:3b:3e:97:9f:56:a0:e1:c9:
         40:a7:a0:6f:cc:61:c8:2e:34:8d:cd:5b:01:bc:3e:fe:cc:0f:
         8b:d9:10:8c:c3:07:9c:c9:30:db:a0:66:ec:9f:a0:03:5b:4f:
         75:68:27:b1:22:3d:bf:05:39:21:a5:bf:08:b1:1a:21:70:e4:
         f9:24:57:1b:f0:ab:92:11:d8:2e:32:59:38:5d:19:6e:52:d3:
         ce:34:98:22:b5:ec:06:ff:cd:c3:60:b9:d7:71:f7:c2:a4:50:
         f8:40:dc:6e:89:83:9f:a0:d4:b6:36:b6:22:54:60:e5:19:b4:
         49:3b:96:e9:08:49:d2:73:fc:c4:0f:fd:f8:0f:06:1f:4c:26:
         e0:19:f0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----