Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/323830313a3130613a313a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3130613a313a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          NfqwVCmMFtdaweBrv8/QP43CdX8dBBcdJD1AJsNc0QQ=
Subject key identifier:   D2:05:5A:64:8C:99:6B:80:93:BB:6F:4B:75:34:C4:DA:4A:D7:6B:92
Certificate issuer:       /CN=511D240C04FA2233FA6D8D0DDB140BDADA90FFB7
Certificate serial:       2304A3D5D4A1E8656474FBE34A502EDA5537A7DB
Authority key identifier: 51:1D:24:0C:04:FA:22:33:FA:6D:8D:0D:DB:14:0B:DA:DA:90:FF:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/323830313a3130613a313a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:20:32 +0000
ROA not before:           Tue 05 Mar 2024 18:15:32 +0000
ROA not after:            Tue 04 Mar 2025 18:20:32 +0000
asID:                     19429
IP address blocks:        2801:10a:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:04:a3:d5:d4:a1:e8:65:64:74:fb:e3:4a:50:2e:da:55:37:a7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511D240C04FA2233FA6D8D0DDB140BDADA90FFB7
        Validity
            Not Before: Mar  5 18:15:32 2024 GMT
            Not After : Mar  4 18:20:32 2025 GMT
        Subject: CN=D2055A648C996B8093BB6F4B7534C4DA4AD76B92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:ba:8e:99:c6:da:77:49:08:0b:9c:61:8a:
                    7d:12:84:fc:ce:ef:95:b1:ce:a8:de:f8:eb:a1:cb:
                    75:05:9e:4c:cf:10:4f:26:2f:b0:b0:a4:a6:18:0e:
                    4b:93:8b:40:fe:40:ee:e7:d8:c2:21:46:b7:5b:c5:
                    3e:84:c4:56:07:a1:93:3e:e2:08:d0:c7:4f:dd:2a:
                    f7:d4:3d:5d:24:17:3b:7a:c4:a3:2c:f0:a6:44:75:
                    d6:55:9d:9a:44:bd:99:1f:70:f2:32:84:7c:2f:ab:
                    a6:a0:98:4f:6f:97:8e:87:1b:72:fa:f1:2b:2a:66:
                    32:f7:69:98:d7:e8:56:55:4b:40:7d:52:0c:16:44:
                    99:98:c7:ee:c3:74:c7:42:2f:1a:0e:c1:c1:b0:88:
                    2a:f4:8c:c1:8b:3f:9b:de:c0:f7:68:72:91:be:19:
                    57:d8:27:aa:ac:1a:24:1d:a7:fc:40:d0:de:33:1a:
                    a2:15:13:07:83:c8:b6:20:0f:dd:cd:e9:20:33:30:
                    e8:99:d1:e1:99:e8:7e:c2:d7:fb:c1:3b:d9:5a:df:
                    2e:cb:af:86:94:ea:7c:04:01:b2:b8:08:46:f6:87:
                    ab:9b:28:c9:e7:3e:73:3d:72:06:79:70:f2:ed:1e:
                    26:b8:a6:1a:ef:61:b8:d3:f3:70:bf:4c:64:0c:86:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:05:5A:64:8C:99:6B:80:93:BB:6F:4B:75:34:C4:DA:4A:D7:6B:92
            X509v3 Authority Key Identifier:
                keyid:51:1D:24:0C:04:FA:22:33:FA:6D:8D:0D:DB:14:0B:DA:DA:90:FF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/323830313a3130613a313a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10a:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:17:cf:a1:4e:fc:de:7b:cb:c8:31:3f:df:be:bc:c4:3b:
         fa:8e:07:d0:17:a9:91:df:02:95:c0:e9:e8:b1:5d:b6:30:60:
         65:bd:f4:fe:4d:94:6b:ef:dd:d1:50:93:ed:1a:12:33:19:19:
         f3:0c:04:d6:6d:8e:80:0a:70:b9:7b:b4:27:94:58:f7:05:92:
         b0:cc:93:1b:4a:54:9e:69:45:4d:2e:8d:9a:d2:10:ea:89:29:
         2a:cb:ce:c2:13:06:fc:4a:11:54:d0:7c:ee:51:aa:4c:1b:0a:
         d2:9f:e9:20:66:18:39:2c:b5:64:d6:72:ad:af:c4:c6:73:9e:
         28:8e:6f:a7:ac:62:b0:fe:9d:01:55:9c:7c:25:78:c2:e0:14:
         33:92:ca:ed:45:ac:47:c1:48:43:51:c6:5d:30:7a:de:ee:43:
         d9:7e:95:97:a6:76:e6:c2:9b:0b:bb:a6:db:6d:d6:5e:f9:1e:
         69:ed:11:84:7a:da:1e:e5:77:76:cd:a7:53:ba:83:d4:e9:85:
         2e:69:0e:36:ea:6a:13:a0:06:50:38:7d:14:8e:9f:c5:c9:53:
         4a:96:ae:35:29:77:ad:3c:04:e0:3b:03:81:eb:66:47:48:74:
         cc:de:91:a4:b3:3c:c6:17:17:eb:c5:f6:e9:0c:16:5f:0d:1b:
         15:ef:81:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----