Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3430383a3a2f34362d3438203d3e203237383832.roa
File:                     323830303a3332303a3430383a3a2f34362d3438203d3e203237383832.roa (raw, json)
Hash identifier:          0AniBsy/ug3Qr/w3eIfoZw0CnPG9w7f/KPKajTVfDPI=
Subject key identifier:   DC:80:1B:C4:79:37:48:1E:A0:61:B9:B2:AC:9E:87:CA:CF:8F:9A:18
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       45951F180F26A61D90F9816C3C2927FCD0D0B470
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3430383a3a2f34362d3438203d3e203237383832.roa
Signing time:             Tue 05 Mar 2024 18:09:42 +0000
ROA not before:           Tue 05 Mar 2024 18:04:42 +0000
ROA not after:            Tue 04 Mar 2025 18:09:42 +0000
asID:                     27882
IP address blocks:        2800:320:408::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:95:1f:18:0f:26:a6:1d:90:f9:81:6c:3c:29:27:fc:d0:d0:b4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Mar  5 18:04:42 2024 GMT
            Not After : Mar  4 18:09:42 2025 GMT
        Subject: CN=DC801BC47937481EA061B9B2AC9E87CACF8F9A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:01:1a:e3:d9:1d:d5:3f:40:ba:29:0e:3a:44:
                    c2:24:92:5f:f5:30:bc:9e:48:57:26:39:04:de:d9:
                    e2:f5:2a:c0:75:66:88:13:10:97:6c:b9:ca:50:8e:
                    57:58:4c:f5:25:0c:15:a9:5d:9b:b8:81:75:a2:f1:
                    8c:b7:64:75:a2:57:f5:f5:a4:85:7b:63:1b:ca:ba:
                    5e:42:c2:d4:d3:65:9b:fb:05:7f:1a:67:fc:9a:dc:
                    a5:b4:77:23:e3:92:0e:c2:70:80:4d:97:4e:c5:1a:
                    56:b8:54:b6:f6:c5:b1:af:67:0b:70:73:34:e5:73:
                    0e:fd:90:0f:ec:a5:69:cb:a3:8d:8f:a0:b4:01:b8:
                    0b:83:a0:bd:8a:ec:d6:61:10:a5:b5:0f:ce:f7:f0:
                    6a:dd:31:5d:7b:21:f3:44:a5:9b:c7:39:a1:89:9e:
                    d9:81:9f:9f:44:42:c7:54:e3:b4:77:c9:7d:ca:34:
                    77:ea:a5:c5:25:56:95:61:c0:a1:c1:bc:cd:d8:5d:
                    91:96:cd:16:96:2e:68:f3:10:ce:4b:62:68:cc:02:
                    16:5c:99:87:bf:fe:84:d9:d9:47:0c:c8:ac:22:b1:
                    0f:0b:86:6d:a2:81:0e:da:70:55:72:71:ce:e6:c2:
                    1e:ee:a4:09:43:e6:93:99:bb:12:f5:5a:47:3e:1c:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:80:1B:C4:79:37:48:1E:A0:61:B9:B2:AC:9E:87:CA:CF:8F:9A:18
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a3430383a3a2f34362d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:408::/46

    Signature Algorithm: sha256WithRSAEncryption
         70:d6:25:de:bb:d1:26:9e:71:b7:db:29:a1:4b:14:94:35:dd:
         d1:d4:a9:a5:72:b9:a3:d0:96:59:d2:d0:9b:c8:d3:33:96:aa:
         9e:51:7b:70:06:5a:fb:86:3b:ec:b0:e4:78:7f:7d:22:3a:2a:
         e6:ba:aa:90:c2:59:5c:19:79:9e:59:76:1c:d3:eb:8b:8e:97:
         f9:23:2f:33:81:5c:0f:d3:05:50:23:19:42:bb:86:ce:9c:43:
         7f:35:f1:a4:fa:75:13:90:c3:aa:11:5d:4f:b2:e8:7e:44:14:
         e1:e1:7e:a4:98:c1:b9:f7:6b:d5:63:eb:f4:af:76:24:9e:ea:
         6a:1c:bc:db:fa:c0:9a:84:7f:87:d8:92:89:0c:df:a9:da:05:
         28:ef:8c:2c:79:bb:53:81:0c:4e:08:ee:2f:5b:19:ec:81:17:
         a9:cb:40:2f:75:dc:0b:9e:97:be:29:84:bb:bd:ac:08:b7:b9:
         ac:10:d9:75:65:7d:a0:cf:04:af:c2:46:3e:2b:26:40:5a:59:
         cc:e8:73:cd:ff:4d:2f:84:cd:09:5d:71:75:31:e3:b1:73:5a:
         b8:fc:57:4c:b7:ae:5f:08:22:cc:88:77:63:17:6c:8d:d9:99:
         ca:96:35:da:e5:35:3c:5a:b9:bd:62:11:4a:04:69:86:f3:a2:
         f5:55:41:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----