Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/323830313a3130613a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3130613a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          5iao6ld0HQZThHfj0Gk9OWg61HSIOZ/i5T8WheqToFk=
Subject key identifier:   EA:AD:6E:1E:30:08:5F:37:37:88:D0:AC:5C:DD:A3:39:F2:C1:54:B8
Certificate issuer:       /CN=511D240C04FA2233FA6D8D0DDB140BDADA90FFB7
Certificate serial:       7A7B8DB6266E8D01FEF59C7FD8E52546B70DEFA2
Authority key identifier: 51:1D:24:0C:04:FA:22:33:FA:6D:8D:0D:DB:14:0B:DA:DA:90:FF:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/323830313a3130613a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:20:33 +0000
ROA not before:           Tue 05 Mar 2024 18:15:33 +0000
ROA not after:            Tue 04 Mar 2025 18:20:33 +0000
asID:                     19429
IP address blocks:        2801:10a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7b:8d:b6:26:6e:8d:01:fe:f5:9c:7f:d8:e5:25:46:b7:0d:ef:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511D240C04FA2233FA6D8D0DDB140BDADA90FFB7
        Validity
            Not Before: Mar  5 18:15:33 2024 GMT
            Not After : Mar  4 18:20:33 2025 GMT
        Subject: CN=EAAD6E1E30085F373788D0AC5CDDA339F2C154B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e8:8d:96:b4:5c:7c:df:c3:cf:01:21:35:c3:
                    a5:51:11:3a:09:f5:e2:a1:44:21:bd:82:da:28:08:
                    c3:ac:a3:24:95:40:1a:15:17:f1:ed:d3:5a:bf:1d:
                    54:b0:d7:a7:15:26:13:e6:b2:3d:88:2d:5d:71:1a:
                    07:28:09:49:c0:4d:79:ef:2a:74:b9:08:e6:cf:a9:
                    cc:a3:ae:4a:95:19:ab:5c:96:a4:5d:49:98:ae:cf:
                    fd:20:fb:f2:7d:0e:55:40:4b:f0:8e:3c:17:61:33:
                    33:b7:54:bd:af:a2:b5:4a:fb:a5:53:04:a6:c9:e4:
                    2a:8e:cf:ea:a0:1f:7c:32:09:cc:01:e3:36:ed:86:
                    4b:44:23:70:6b:ea:f4:4a:27:59:ac:27:7c:94:c3:
                    3e:c2:df:40:39:c0:94:0a:6f:22:df:bf:6e:ce:31:
                    74:0a:3f:00:50:ac:da:b2:51:5c:82:dd:02:c6:19:
                    3a:31:d6:64:2f:c3:17:3a:6a:20:c5:d8:37:6a:3a:
                    07:ed:d1:5b:0e:23:2b:8e:8e:58:f5:c8:34:38:e9:
                    3d:d6:f9:61:26:ec:60:7e:0b:54:6c:93:09:11:3f:
                    79:2f:31:22:c6:ae:8e:6e:83:1c:1a:30:54:95:ef:
                    96:fa:b6:c3:04:69:62:4f:6a:48:37:e5:0d:da:51:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AD:6E:1E:30:08:5F:37:37:88:D0:AC:5C:DD:A3:39:F2:C1:54:B8
            X509v3 Authority Key Identifier:
                keyid:51:1D:24:0C:04:FA:22:33:FA:6D:8D:0D:DB:14:0B:DA:DA:90:FF:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/511D240C04FA2233FA6D8D0DDB140BDADA90FFB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21551748C6AA2E580AE522515C2D6072A0D2C1719A02FE370799555C7650A594/0/323830313a3130613a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10a::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:f5:18:15:92:2b:30:0b:1d:10:44:83:87:2d:d6:1e:b1:28:
         51:b4:5c:87:22:03:b3:fb:bc:ca:47:0a:7b:ed:14:87:98:39:
         15:f5:24:7f:88:6c:2d:ea:86:66:dd:c9:35:6a:f4:09:0c:b4:
         0f:f5:0e:b2:6b:77:c2:f4:c3:5c:62:06:c4:9a:61:d6:b2:a4:
         f9:d7:bf:30:f5:cb:aa:7f:ec:79:b0:18:70:06:7b:a6:00:5d:
         da:00:17:82:94:68:e7:34:ae:7e:52:1b:5a:5b:c6:72:84:32:
         88:82:42:34:b6:bd:08:5b:15:a6:84:37:26:02:cc:84:2e:36:
         23:41:6b:b0:ac:69:67:f5:46:1b:61:fd:fc:94:f8:e5:7a:16:
         db:ca:a2:93:f1:f8:47:d5:07:2f:65:84:c5:94:1e:06:d8:cc:
         1a:36:8b:8a:dc:75:13:2f:af:08:68:ac:fc:e8:d5:12:05:87:
         96:5e:e3:96:54:6c:3f:c1:28:42:53:7f:db:14:5d:74:70:ce:
         75:2f:5b:56:15:8f:1a:45:f5:a5:8b:ce:66:da:a9:fe:38:ed:
         f3:c3:88:11:35:ba:3e:82:10:02:f2:23:65:77:b4:7f:35:93:
         58:7f:c1:a6:50:55:55:5d:bb:4a:76:19:46:e7:4e:74:78:92:
         55:58:b4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----