Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/26F8A81A36061A97AB03EDE040A738FAA5F4BBF5AC78EAB2AE3980ABFC0EBC4D/0/323830313a31623a373830303a3a2f34382d3438203d3e20323733383733.roa
File:                     323830313a31623a373830303a3a2f34382d3438203d3e20323733383733.roa (raw, json)
Hash identifier:          LR26U2mijr1mzR4qrj+VMTLSwBDNGgQzoB2ZvXtRPoc=
Subject key identifier:   A0:9C:96:DE:C5:D9:84:B8:8F:7E:BC:6E:A6:58:16:B6:CD:9F:50:88
Certificate issuer:       /CN=566E32261432E3E7CC6FB2624E52B6F596E13F56
Certificate serial:       0A0E7C60A5AF9E12FCE95932F4A1E61FC0C4732E
Authority key identifier: 56:6E:32:26:14:32:E3:E7:CC:6F:B2:62:4E:52:B6:F5:96:E1:3F:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/566E32261432E3E7CC6FB2624E52B6F596E13F56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/26F8A81A36061A97AB03EDE040A738FAA5F4BBF5AC78EAB2AE3980ABFC0EBC4D/0/323830313a31623a373830303a3a2f34382d3438203d3e20323733383733.roa
Signing time:             Tue 03 Dec 2024 21:20:00 +0000
ROA not before:           Tue 03 Dec 2024 21:15:00 +0000
ROA not after:            Tue 02 Dec 2025 21:20:00 +0000
asID:                     273873
IP address blocks:        2801:1b:7800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:0e:7c:60:a5:af:9e:12:fc:e9:59:32:f4:a1:e6:1f:c0:c4:73:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566E32261432E3E7CC6FB2624E52B6F596E13F56
        Validity
            Not Before: Dec  3 21:15:00 2024 GMT
            Not After : Dec  2 21:20:00 2025 GMT
        Subject: CN=A09C96DEC5D984B88F7EBC6EA65816B6CD9F5088
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:2b:b4:c4:72:ac:6e:5d:92:20:02:37:93:f7:
                    b8:d4:6a:5b:bd:4d:16:c8:f5:63:6b:56:d5:6b:51:
                    2f:9a:81:57:be:a7:85:bb:f2:d4:0e:4a:11:ee:19:
                    d4:d1:e2:33:db:9d:d4:e4:e4:e2:d4:de:89:45:07:
                    c6:2a:e4:97:de:3c:93:7d:fc:c2:66:c8:de:8e:3d:
                    4a:c0:c7:53:74:20:4c:5e:d1:1b:5e:87:68:f1:5d:
                    fe:e0:2e:18:b7:78:40:27:99:4c:b3:1d:78:e2:05:
                    60:9c:f4:fa:b6:d8:2f:0f:f1:bc:22:60:a4:46:8f:
                    79:10:ca:67:fb:fd:5a:f3:89:49:af:09:32:59:26:
                    ea:0d:f1:f7:73:84:91:95:53:d9:c7:d7:a1:4e:e9:
                    36:a4:1b:03:4e:c9:df:62:e7:99:c9:f7:ab:7c:4f:
                    42:7e:c7:30:f6:c2:b9:fc:d5:c0:49:0e:49:4b:5a:
                    89:d1:d6:40:2e:e5:d4:f4:b6:f8:4c:ed:d5:9d:73:
                    7d:e0:ee:0c:01:69:7d:4d:f4:c0:13:70:be:9c:e6:
                    8a:52:02:54:7c:e4:4a:5a:03:ec:cc:0e:45:0f:dd:
                    05:67:8d:9a:86:21:e0:87:1c:05:31:a2:d3:32:a1:
                    fb:39:dc:b5:12:76:c8:99:f1:04:66:4d:37:0f:36:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9C:96:DE:C5:D9:84:B8:8F:7E:BC:6E:A6:58:16:B6:CD:9F:50:88
            X509v3 Authority Key Identifier:
                keyid:56:6E:32:26:14:32:E3:E7:CC:6F:B2:62:4E:52:B6:F5:96:E1:3F:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/26F8A81A36061A97AB03EDE040A738FAA5F4BBF5AC78EAB2AE3980ABFC0EBC4D/0/566E32261432E3E7CC6FB2624E52B6F596E13F56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/566E32261432E3E7CC6FB2624E52B6F596E13F56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/26F8A81A36061A97AB03EDE040A738FAA5F4BBF5AC78EAB2AE3980ABFC0EBC4D/0/323830313a31623a373830303a3a2f34382d3438203d3e20323733383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:ae:97:3e:cf:ab:26:0e:34:09:24:a0:2b:6e:14:40:66:e8:
         c0:67:79:a2:74:a4:d0:64:21:13:de:a8:fa:d4:38:90:8c:80:
         f8:06:cf:50:c0:a6:8d:e2:aa:9b:e4:8d:32:19:d7:59:86:1d:
         0c:bd:d9:ff:9b:82:d2:9d:47:f4:6e:67:aa:cd:79:f3:19:3c:
         e7:b3:72:86:b2:5e:04:85:f6:01:2b:7c:de:0b:03:cd:ab:9c:
         7b:ad:c2:7b:bc:e5:f2:64:e4:6d:f7:9e:5d:a4:e4:6b:7b:ac:
         ae:ff:e5:db:a3:11:5a:04:1c:53:69:f9:06:3b:88:f4:21:2d:
         3b:d5:8a:56:6a:1f:32:96:af:96:05:2e:3c:ac:1a:9c:f4:d9:
         a5:1c:84:36:40:13:e1:3f:91:0c:45:5f:da:d9:41:0e:1b:02:
         0d:71:6d:a0:06:86:50:b7:6c:1e:e0:ea:e1:80:35:f7:2a:a9:
         82:70:d3:00:6a:09:c7:1e:b8:1a:b2:ae:55:44:87:95:58:9f:
         d5:69:30:95:83:e4:d1:56:bc:d5:82:ff:c3:79:c6:50:ab:3b:
         41:e5:95:96:f6:d5:72:fc:45:91:92:c9:98:4b:8e:e6:4d:42:
         97:d3:52:6c:1d:00:43:86:76:d9:52:00:4c:c6:a6:10:c2:33:
         b1:e4:98:1b
-----BEGIN CERTIFICATE-----
MIIFxzCCBK+gAwIBAgIUCg58YKWvnhL86Vky9KHmH8DEcy4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTY2RTMyMjYxNDMyRTNFN0NDNkZCMjYyNEU1MkI2RjU5
NkUxM0Y1NjAeFw0yNDEyMDMyMTE1MDBaFw0yNTEyMDIyMTIwMDBaMDMxMTAvBgNV
BAMTKEEwOUM5NkRFQzVEOTg0Qjg4RjdFQkM2RUE2NTgxNkI2Q0Q5RjUwODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZK7TEcqxuXZIgAjeT97jUalu9
TRbI9WNrVtVrUS+agVe+p4W78tQOShHuGdTR4jPbndTk5OLU3olFB8Yq5JfePJN9
/MJmyN6OPUrAx1N0IExe0Rteh2jxXf7gLhi3eEAnmUyzHXjiBWCc9Pq22C8P8bwi
YKRGj3kQymf7/VrziUmvCTJZJuoN8fdzhJGVU9nH16FO6TakGwNOyd9i55nJ96t8
T0J+xzD2wrn81cBJDklLWonR1kAu5dT0tvhM7dWdc33g7gwBaX1N9MATcL6c5opS
AlR85EpaA+zMDkUP3QVnjZqGIeCHHAUxotMyofs53LUSdsiZ8QRmTTcPNkWVAgMB
AAGjggLRMIICzTAdBgNVHQ4EFgQUoJyW3sXZhLiPfrxuplgWts2fUIgwHwYDVR0j
BBgwFoAUVm4yJhQy4+fMb7JiTlK29ZbhP1YwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy8yNkY4QTgxQTM2MDYxQTk3QUIwM0VERTA0MEE3MzhGQUE1
RjRCQkY1QUM3OEVBQjJBRTM5ODBBQkZDMEVCQzRELzAvNTY2RTMyMjYxNDMyRTNF
N0NDNkZCMjYyNEU1MkI2RjU5NkUxM0Y1Ni5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81NjZFMzIyNjE0MzJFM0U3Q0M2
RkIyNjI0RTUyQjZGNTk2RTEzRjU2LmNlcjCBzQYIKwYBBQUHAQsEgcAwgb0wgboG
CCsGAQUFBzALhoGtcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvMjZGOEE4MUEzNjA2MUE5N0FCMDNFREUwNDBBNzM4RkFBNUY0QkJGNUFD
NzhFQUIyQUUzOTgwQUJGQzBFQkM0RC8wLzMyMzgzMDMxM2EzMTYyM2EzNzM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzczMzM4MzczMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
ACgBABt4ADANBgkqhkiG9w0BAQsFAAOCAQEArq6XPs+rJg40CSSgK24UQGbowGd5
onSk0GQhE96o+tQ4kIyA+AbPUMCmjeKqm+SNMhnXWYYdDL3Z/5uC0p1H9G5nqs15
8xk857NyhrJeBIX2ASt83gsDzauce63Ce7zl8mTkbfeeXaTka3usrv/l26MRWgQc
U2n5BjuI9CEtO9WKVmofMpavlgUuPKwanPTZpRyENkAT4T+RDEVf2tlBDhsCDXFt
oAaGULdsHuDq4YA19yqpgnDTAGoJxx64GrKuVUSHlVif1WkwlYPk0Va81YL/w3nG
UKs7QeWVlvbVcvxFkZLJmEuO5k1Cl9NSbB0AQ4Z22VIATMamEMIzseSYGw==
-----END CERTIFICATE-----