Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/323830313a31333a653030303a3a2f34382d3438203d3e20323633383034.roa
File:                     323830313a31333a653030303a3a2f34382d3438203d3e20323633383034.roa (raw, json)
Hash identifier:          f/FfQYrtl0gtvYtJHvAccna3dfOoqchu+/SqeyPBNyI=
Subject key identifier:   3F:0F:B0:07:7E:E3:07:DC:FE:BA:2E:84:34:1E:87:A6:8F:C8:F9:A9
Certificate issuer:       /CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
Certificate serial:       4C82740E06B2458E1A64E313107AF282C19C24A1
Authority key identifier: BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/323830313a31333a653030303a3a2f34382d3438203d3e20323633383034.roa
Signing time:             Tue 05 Mar 2024 17:50:32 +0000
ROA not before:           Tue 05 Mar 2024 17:45:32 +0000
ROA not after:            Tue 04 Mar 2025 17:50:32 +0000
asID:                     263804
IP address blocks:        2801:13:e000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:82:74:0e:06:b2:45:8e:1a:64:e3:13:10:7a:f2:82:c1:9c:24:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8
        Validity
            Not Before: Mar  5 17:45:32 2024 GMT
            Not After : Mar  4 17:50:32 2025 GMT
        Subject: CN=3F0FB0077EE307DCFEBA2E84341E87A68FC8F9A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c8:eb:bf:e0:11:03:0f:af:9e:7f:bd:d5:f7:
                    b7:64:53:c8:dc:14:41:7b:7c:f8:46:11:21:a9:24:
                    fc:8d:f6:d4:7f:f0:f2:9b:6b:74:b8:59:63:25:bf:
                    d6:94:04:ef:f0:57:82:93:7d:6c:f5:a3:9f:4c:74:
                    a2:6d:35:70:4e:b6:1b:6f:45:f5:b4:6c:89:c7:ef:
                    f5:db:e7:75:49:65:c7:0f:f6:ae:65:a4:16:10:1c:
                    49:fd:40:4d:b5:20:88:cb:30:85:b9:5b:ea:cc:30:
                    90:46:0d:41:a5:4d:0b:3f:ef:6c:6c:5e:49:45:f7:
                    0c:a2:2f:ac:c3:17:7d:f2:24:2c:60:24:b1:b3:e1:
                    96:82:e5:2c:49:cf:8f:60:e5:76:12:43:92:e3:29:
                    6f:b8:c7:35:a0:50:e2:d3:a9:a6:5e:85:28:57:24:
                    9c:0b:c5:99:e2:40:d4:29:18:ed:c4:5e:55:22:02:
                    37:fe:b8:94:fc:84:3e:cb:f6:bd:bf:83:29:52:7e:
                    be:18:ee:a2:92:92:4c:09:ef:4b:da:e8:be:e6:b1:
                    83:50:d7:b7:f1:f3:d7:b3:cc:de:2a:6d:83:ca:f2:
                    b0:81:9e:c2:e1:8b:8e:ce:0b:f2:bb:3a:cb:e0:24:
                    6d:dd:f8:69:dd:08:cd:23:53:ef:e2:d0:c5:3f:b7:
                    55:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0F:B0:07:7E:E3:07:DC:FE:BA:2E:84:34:1E:87:A6:8F:C8:F9:A9
            X509v3 Authority Key Identifier:
                keyid:BC:C9:44:9C:E0:FB:26:78:5C:BE:4A:60:D9:D5:51:4E:9E:17:7A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC9449CE0FB26785CBE4A60D9D5514E9E177AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CBDB24010B86A3FE880591945C772EAD110B2197A8B77548052388D83A679ED6/0/323830313a31333a653030303a3a2f34382d3438203d3e20323633383034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:b0:0e:5c:9c:e8:44:22:43:db:26:2f:23:db:d1:a9:de:9a:
         df:12:be:e9:8a:df:21:68:b1:bb:5e:fe:26:91:17:18:57:27:
         5c:de:53:1d:e2:d1:b5:f1:0e:e8:42:97:19:06:92:8d:52:77:
         d4:55:67:22:d5:a7:ed:4d:6d:40:90:d2:40:8a:45:33:ab:5b:
         b3:c7:7a:32:d3:ad:79:78:e3:96:79:1c:ea:f3:30:58:67:43:
         77:3d:25:70:9b:d4:7c:6b:33:62:4f:cc:13:cd:e0:a6:d9:67:
         78:21:45:ff:82:01:3e:45:9d:45:94:6c:ae:b7:ea:71:45:3e:
         5e:ff:dc:1c:75:bb:d2:f5:c5:4e:7b:6d:55:48:be:43:6a:05:
         a5:94:9b:fa:74:77:cf:4f:95:ad:5e:7a:d8:38:d0:0c:8a:42:
         66:e9:1f:88:b3:43:c0:51:48:7b:e5:74:1e:8d:b1:0f:f2:95:
         e6:c2:12:0c:92:61:c6:07:1c:7c:1b:95:ab:24:c3:04:81:8c:
         87:3f:55:83:2e:ac:94:f6:27:0b:d2:e7:62:f2:ae:e3:bf:d3:
         31:ec:87:36:f9:04:88:85:a5:9b:78:c7:75:9a:c7:d2:4e:f1:
         fb:03:23:62:99:bc:52:52:1a:f8:d1:d4:39:14:b6:5c:5a:39:
         4c:e3:54:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----