Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323032.roa
File:                     323830313a31613a333030303a3a2f34382d3438203d3e20323032.roa (raw, json)
Hash identifier:          lIgixe2PD6fivCReUtjpWFu/VIdvazZyOajrt4f0Rnc=
Subject key identifier:   6C:46:37:7C:5A:CF:47:D7:09:E3:DC:2B:78:F2:BB:E2:1A:0B:E4:69
Certificate issuer:       /CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
Certificate serial:       2610442CE2589284162BF3778AE59165E93CC8D6
Authority key identifier: 12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323032.roa
Signing time:             Tue 05 Mar 2024 17:46:49 +0000
ROA not before:           Tue 05 Mar 2024 17:41:49 +0000
ROA not after:            Tue 04 Mar 2025 17:46:49 +0000
asID:                     202
IP address blocks:        2801:1a:3000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:10:44:2c:e2:58:92:84:16:2b:f3:77:8a:e5:91:65:e9:3c:c8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=120EEB9D1E85BF303E5FAB185F5A397B834333F0
        Validity
            Not Before: Mar  5 17:41:49 2024 GMT
            Not After : Mar  4 17:46:49 2025 GMT
        Subject: CN=6C46377C5ACF47D709E3DC2B78F2BBE21A0BE469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:53:88:67:d6:74:11:f5:b0:36:5e:85:57:
                    07:59:ae:0b:d7:7e:5b:a1:ee:15:2a:ea:00:1c:08:
                    1e:9d:a0:4c:f6:d1:c0:86:b7:d4:c1:9d:0f:06:76:
                    c1:b0:33:90:3f:e7:9a:73:7d:07:0b:d5:a5:97:d5:
                    6a:b7:e1:e1:4c:d3:36:77:b6:b7:1f:10:58:ff:33:
                    26:50:54:3d:e4:e8:b0:48:c4:7a:e9:4f:91:c2:da:
                    07:e7:d2:b3:ee:4f:63:fa:05:b6:da:94:09:13:cd:
                    37:26:66:ff:96:42:32:a9:d7:af:92:67:51:6b:b9:
                    75:28:3e:38:d1:14:bd:a2:30:fc:e3:d2:93:d2:4e:
                    77:ba:dd:7a:41:4d:2d:c2:31:77:c0:03:39:e4:5a:
                    e6:2f:4e:6f:e6:e6:bd:65:91:35:5c:69:fb:68:f7:
                    87:a4:af:98:dc:09:b0:e9:0a:b9:5e:1d:52:78:07:
                    95:1b:4b:94:54:89:0b:e6:3a:63:3e:f4:23:5a:dd:
                    3e:12:b9:ba:d9:f1:ce:e1:8f:4b:dc:11:c6:89:98:
                    0a:48:12:db:5a:30:d4:4b:01:21:c7:af:82:32:74:
                    12:ec:9b:15:9c:59:b5:21:33:d1:14:f1:6c:fd:26:
                    0c:75:31:86:34:50:7d:f8:ee:dc:9f:6e:71:bd:30:
                    fa:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:46:37:7C:5A:CF:47:D7:09:E3:DC:2B:78:F2:BB:E2:1A:0B:E4:69
            X509v3 Authority Key Identifier:
                keyid:12:0E:EB:9D:1E:85:BF:30:3E:5F:AB:18:5F:5A:39:7B:83:43:33:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/120EEB9D1E85BF303E5FAB185F5A397B834333F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D0031AF9140330F49D96A996203C233366AF745032360C72A3E483578589C570/0/323830313a31613a333030303a3a2f34382d3438203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:29:60:96:cc:7d:aa:47:92:b2:b8:3f:a3:c7:8a:7b:d0:cc:
         f2:cc:e3:37:bf:4c:d1:ad:c4:da:3f:5d:ea:75:0c:16:60:cb:
         32:98:cb:67:b0:1e:f2:6c:40:78:c3:f1:99:88:26:1e:9b:33:
         b2:d3:f6:0a:b8:e8:3f:1d:f5:53:4e:70:c2:80:6b:15:c5:62:
         2d:46:b4:f7:52:da:e9:14:27:50:92:c1:01:22:43:50:56:f6:
         e8:bd:6e:6a:55:db:91:53:7b:bc:0b:92:14:29:2a:35:77:06:
         0a:5c:4d:3b:3f:91:88:8b:64:96:1a:47:9b:83:5e:fc:58:7e:
         66:eb:7a:c0:66:84:dc:ad:5e:d1:3d:eb:b8:34:3b:58:14:d2:
         a2:14:f4:a6:f0:2b:f2:c4:5c:11:43:06:0a:32:7f:c3:ec:73:
         a3:d7:6d:4b:f8:22:6f:6b:36:6f:a2:4a:2d:08:58:3c:3d:83:
         b0:2d:49:c3:73:d1:7a:94:74:c7:93:11:94:d8:9f:2b:03:db:
         82:06:13:75:fd:03:84:9b:b3:91:b1:e4:1c:6c:90:d0:97:0b:
         7a:77:bc:6f:4c:7a:d7:59:97:30:0a:ec:3f:a1:3d:e5:42:29:
         00:38:00:09:e5:c2:05:ca:d1:57:c6:df:86:e9:3f:84:2b:87:
         1c:99:23:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----