Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a3a2f34382d3438203d3e203138373437.roa
File:                     323830313a3131353a3a2f34382d3438203d3e203138373437.roa (raw, json)
Hash identifier:          7dbIl+j/JFYr/ZRWqBUaT+DiPBdnbXy6iFNpaGMLq2c=
Subject key identifier:   E2:8D:90:E1:EB:97:AC:73:6F:26:3B:E9:50:D6:A5:9D:FF:7E:BB:CB
Certificate issuer:       /CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
Certificate serial:       09DB4CCDEC1BCDDBF7818B3C12471533CC2F233F
Authority key identifier: 05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a3a2f34382d3438203d3e203138373437.roa
Signing time:             Tue 05 Mar 2024 18:08:01 +0000
ROA not before:           Tue 05 Mar 2024 18:03:01 +0000
ROA not after:            Tue 04 Mar 2025 18:08:01 +0000
asID:                     18747
IP address blocks:        2801:115::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:db:4c:cd:ec:1b:cd:db:f7:81:8b:3c:12:47:15:33:cc:2f:23:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF
        Validity
            Not Before: Mar  5 18:03:01 2024 GMT
            Not After : Mar  4 18:08:01 2025 GMT
        Subject: CN=E28D90E1EB97AC736F263BE950D6A59DFF7EBBCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:11:c3:67:cd:85:ce:f7:55:ac:03:3f:b7:
                    ab:58:29:51:e8:4b:14:ba:f0:a8:66:df:50:7c:c9:
                    81:c5:1c:53:83:73:97:6d:ba:3d:fe:0a:c7:5f:ff:
                    52:72:d8:a7:6a:be:65:1d:ab:ca:f6:0d:30:55:60:
                    46:8d:ce:81:7a:7f:33:87:d7:76:af:74:87:2d:b0:
                    a7:86:0e:b9:65:b2:7a:be:e5:69:88:1b:1c:05:a2:
                    dc:eb:d0:b1:44:0b:16:8e:f7:f6:6f:74:1e:a0:a9:
                    dd:9e:24:85:00:b9:0f:3a:9e:c6:b7:5a:79:6f:5d:
                    ec:f2:ef:f6:21:0c:28:ff:e2:5e:7e:fd:66:45:80:
                    2e:05:ae:8c:4d:7a:3d:1f:27:d0:e0:1a:7d:44:7e:
                    6d:7a:39:87:96:53:d1:37:4b:cf:8a:7c:95:76:83:
                    ff:9f:b0:6b:b8:51:e3:a9:8d:4e:00:b2:06:93:b7:
                    10:86:56:0a:98:0b:2b:91:9d:6c:93:68:ac:ff:78:
                    5d:48:ba:33:e1:e3:de:0b:da:f9:30:5a:eb:1d:b4:
                    64:19:4b:6f:c0:68:02:36:18:2b:f1:ec:13:f8:3d:
                    a3:a6:b9:5d:75:f8:22:fe:ac:45:83:8f:99:c4:8e:
                    63:de:03:3d:c5:1a:c5:50:66:cd:7f:15:1f:15:52:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:8D:90:E1:EB:97:AC:73:6F:26:3B:E9:50:D6:A5:9D:FF:7E:BB:CB
            X509v3 Authority Key Identifier:
                keyid:05:8E:D2:B8:DD:99:95:2E:31:AF:DA:21:64:E1:A2:3A:82:FB:8F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/058ED2B8DD99952E31AFDA2164E1A23A82FB8FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CC7B8B67FC9035FBFD716483FDF51A00A3313488054A4C87D78E1FC52D083B9F/0/323830313a3131353a3a2f34382d3438203d3e203138373437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:115::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:c9:74:2d:b7:99:8f:8c:71:49:96:02:f8:98:cb:1d:93:54:
         7a:ef:98:24:e7:e6:45:54:c3:4b:04:dc:b5:66:7d:e6:e3:0a:
         01:1d:07:c4:a1:14:6d:27:f6:dd:39:37:50:86:f1:27:c4:2e:
         66:b1:8d:91:39:41:a4:04:20:88:f0:59:21:0a:01:46:4a:d8:
         2a:31:95:65:03:80:3b:b2:56:e8:b2:c5:e7:91:88:4d:cf:4d:
         4c:ca:0f:7b:d8:98:e6:a6:8b:35:f3:39:0a:4f:ab:e8:3c:0e:
         ee:de:22:ff:26:a5:01:c3:04:54:26:4f:dc:28:82:66:20:3b:
         8f:c0:58:01:4c:ba:fc:70:4b:cb:21:44:15:b2:df:86:ba:b4:
         2d:c6:10:c6:85:1f:71:0e:d3:c0:88:3a:01:36:28:02:73:6f:
         b9:a5:52:11:8e:9b:b7:46:01:64:0a:59:db:ef:97:3f:e3:19:
         08:79:dc:99:80:23:66:03:03:a5:88:50:52:85:4d:e3:2e:38:
         d5:5c:dc:38:dc:48:b6:96:92:a3:50:4f:47:3f:6c:98:f9:41:
         e0:bc:e0:a5:15:a2:16:b5:46:97:b3:05:29:ec:50:1d:f9:15:
         a1:6a:f2:06:eb:99:4f:3d:20:1c:83:58:b0:e9:75:17:b1:90:
         7e:7e:99:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----