Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26D132F81D797BAB58CB1F0DDE7BD92E971D0CD2696501E0E29BF9C49E5E99B7/0/323830313a31643a653830303a3a2f34382d3438203d3e20323731393138.roa
File:                     323830313a31643a653830303a3a2f34382d3438203d3e20323731393138.roa (raw, json)
Hash identifier:          /2U89x379CS7ewHBa7hM1sieTjLj4CiXEg1R1oE0eaQ=
Subject key identifier:   EA:0D:41:B3:7C:F8:4D:0F:FA:26:B5:82:27:1A:5A:1C:C8:CF:52:84
Certificate issuer:       /CN=ADAE691BA31B4CE6A3DEEF8B32FF46291CC57886
Certificate serial:       7ECF3CBF6F1D9369345F1ADECF9017D25B9142E9
Authority key identifier: AD:AE:69:1B:A3:1B:4C:E6:A3:DE:EF:8B:32:FF:46:29:1C:C5:78:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADAE691BA31B4CE6A3DEEF8B32FF46291CC57886.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26D132F81D797BAB58CB1F0DDE7BD92E971D0CD2696501E0E29BF9C49E5E99B7/0/323830313a31643a653830303a3a2f34382d3438203d3e20323731393138.roa
Signing time:             Tue 05 Mar 2024 18:05:08 +0000
ROA not before:           Tue 05 Mar 2024 18:00:08 +0000
ROA not after:            Tue 04 Mar 2025 18:05:08 +0000
asID:                     271918
IP address blocks:        2801:1d:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:cf:3c:bf:6f:1d:93:69:34:5f:1a:de:cf:90:17:d2:5b:91:42:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADAE691BA31B4CE6A3DEEF8B32FF46291CC57886
        Validity
            Not Before: Mar  5 18:00:08 2024 GMT
            Not After : Mar  4 18:05:08 2025 GMT
        Subject: CN=EA0D41B37CF84D0FFA26B582271A5A1CC8CF5284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:21:86:57:c8:d4:64:0a:2c:de:dd:ad:53:
                    c5:aa:d9:54:25:1f:fe:3f:c5:f1:6c:e1:e6:5c:a3:
                    42:ca:6e:e3:13:86:b3:54:c6:3c:3c:87:e7:d6:6c:
                    12:31:d9:15:19:12:0e:82:47:8a:bf:b3:50:25:38:
                    12:c2:e3:60:48:62:35:ae:08:02:0e:f3:44:ca:53:
                    27:5f:78:dd:d2:b5:46:ed:73:99:bd:84:18:6c:20:
                    58:ea:ed:0e:69:af:f3:80:de:52:9f:ca:af:ce:f1:
                    ba:bc:f7:5e:f2:10:b1:d2:52:96:c6:e3:58:db:b6:
                    7c:55:13:aa:fc:81:33:e5:4b:12:3b:6a:ac:76:da:
                    e1:ec:08:e2:d1:4f:2f:d3:ca:61:eb:98:70:16:0a:
                    dc:16:98:9d:99:02:6f:97:cc:3b:0b:a9:21:e2:e7:
                    13:84:3c:64:3e:4c:d8:10:4c:39:05:78:8b:6a:62:
                    86:d7:e8:20:75:00:f4:a5:86:be:04:48:58:43:c2:
                    6d:ef:1a:e4:c9:89:b9:0e:9b:27:93:13:4d:ed:1d:
                    17:6d:ce:5e:69:d2:e9:b9:9e:02:12:4d:f4:03:53:
                    6d:bb:e9:54:7a:69:7f:79:d0:16:68:d0:df:ce:29:
                    f2:f1:9f:a0:d6:d4:ff:ca:1b:20:81:80:34:9d:bc:
                    18:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:0D:41:B3:7C:F8:4D:0F:FA:26:B5:82:27:1A:5A:1C:C8:CF:52:84
            X509v3 Authority Key Identifier:
                keyid:AD:AE:69:1B:A3:1B:4C:E6:A3:DE:EF:8B:32:FF:46:29:1C:C5:78:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26D132F81D797BAB58CB1F0DDE7BD92E971D0CD2696501E0E29BF9C49E5E99B7/0/ADAE691BA31B4CE6A3DEEF8B32FF46291CC57886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/ADAE691BA31B4CE6A3DEEF8B32FF46291CC57886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26D132F81D797BAB58CB1F0DDE7BD92E971D0CD2696501E0E29BF9C49E5E99B7/0/323830313a31643a653830303a3a2f34382d3438203d3e20323731393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         ce:bf:e2:02:d9:e9:3a:c2:69:c6:09:a0:bd:eb:65:6b:26:ff:
         12:e9:0b:33:2f:a3:1e:49:97:4d:dc:6f:57:f7:36:c9:cf:c9:
         1e:82:f4:2f:09:80:05:ed:05:e9:91:07:b4:b5:d5:d4:60:3b:
         5e:7b:f0:f3:83:24:c7:7e:f7:d2:99:b4:7f:d7:2d:fe:a1:9d:
         2e:a4:63:b1:23:2c:82:da:59:b2:79:37:62:e9:3d:db:f8:78:
         6d:94:d3:38:98:f3:6b:56:3c:3a:aa:03:14:3b:be:d7:8e:5e:
         04:92:42:d5:c7:d9:ed:b9:36:73:78:86:d1:3b:12:d0:3b:c2:
         9f:c0:86:26:f3:93:bf:42:02:26:47:00:81:f8:67:73:87:af:
         a7:f8:46:37:c8:11:ce:f8:e2:83:ae:d8:ac:a7:2e:73:e3:20:
         76:f7:8d:5f:1e:91:64:58:ec:48:1e:6c:0f:e9:33:ac:05:de:
         85:3b:9c:ea:8a:64:4a:18:da:76:05:2c:83:6a:df:f7:70:3c:
         fc:3b:e6:01:84:00:29:bc:db:87:96:75:ff:42:f4:f5:88:09:
         61:d0:92:d4:15:62:74:32:f1:be:72:3a:8f:d3:1e:4b:92:b6:
         ad:6d:ca:0b:f5:6b:e2:75:b0:ba:90:b1:75:f8:d4:31:41:d6:
         0c:d0:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----