Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82E44512EC1F9698F6A2CC0DB50D5F116636FC4CBC15EAFFD1D3390FF5D9319F/0/323830313a3165653a3a2f34382d3438203d3e203139343239.roa
File:                     323830313a3165653a3a2f34382d3438203d3e203139343239.roa (raw, json)
Hash identifier:          qw7RBD8F2ANHrjE7HGDWSUW9HkxmLDY4Jf23tJUT8x4=
Subject key identifier:   BE:16:3E:55:B1:6D:79:CD:F6:F2:51:42:FC:49:10:9E:50:96:48:DB
Certificate issuer:       /CN=65D6D70675237A7EDF88BCF08E745B81EC2105CA
Certificate serial:       451336DA05BEB1704E95435CF65EA843315F530B
Authority key identifier: 65:D6:D7:06:75:23:7A:7E:DF:88:BC:F0:8E:74:5B:81:EC:21:05:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D6D70675237A7EDF88BCF08E745B81EC2105CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82E44512EC1F9698F6A2CC0DB50D5F116636FC4CBC15EAFFD1D3390FF5D9319F/0/323830313a3165653a3a2f34382d3438203d3e203139343239.roa
Signing time:             Tue 05 Mar 2024 18:15:36 +0000
ROA not before:           Tue 05 Mar 2024 18:10:36 +0000
ROA not after:            Tue 04 Mar 2025 18:15:36 +0000
asID:                     19429
IP address blocks:        2801:1ee::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:13:36:da:05:be:b1:70:4e:95:43:5c:f6:5e:a8:43:31:5f:53:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65D6D70675237A7EDF88BCF08E745B81EC2105CA
        Validity
            Not Before: Mar  5 18:10:36 2024 GMT
            Not After : Mar  4 18:15:36 2025 GMT
        Subject: CN=BE163E55B16D79CDF6F25142FC49109E509648DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f9:5d:b5:18:05:8b:a0:75:9c:89:ba:a6:fd:
                    c1:96:10:ae:6a:58:1a:ce:d7:e4:dd:04:76:a5:20:
                    fb:e3:d2:aa:d7:3a:27:a7:c6:bf:0e:39:da:de:0f:
                    71:5c:59:15:48:a1:32:91:e8:20:76:88:21:6d:23:
                    ad:24:6f:bf:b5:aa:c4:8f:8a:2f:ce:d2:0d:1f:fb:
                    91:f5:31:b0:9b:47:f7:b1:98:49:b8:17:b9:64:e9:
                    c8:92:1b:3c:00:18:21:3b:80:40:0b:77:75:64:64:
                    59:a3:5d:b8:c6:14:5a:b4:f1:3b:f2:54:6f:c2:82:
                    22:ff:0d:00:1a:bf:5d:db:2d:3a:b4:a2:04:8f:5b:
                    d0:00:42:43:f7:1e:49:ba:95:3a:be:5a:b0:39:b5:
                    90:12:67:5e:03:f9:75:42:9e:35:ce:d5:41:86:fe:
                    25:9d:ee:6f:8e:00:c6:f4:1d:26:71:e9:6a:16:29:
                    4a:22:74:0c:90:4d:ff:2e:64:d5:29:49:18:83:1a:
                    e2:f5:1d:6b:ad:e9:44:34:3f:85:ba:21:70:c3:14:
                    6d:42:42:94:f3:b1:13:d9:78:4b:04:b7:0a:01:f5:
                    5a:e6:b3:6d:5f:1d:b1:e0:81:a9:44:7b:ca:27:6e:
                    0a:0b:c7:f5:43:73:22:bf:f8:e6:00:b1:fc:9a:d8:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:16:3E:55:B1:6D:79:CD:F6:F2:51:42:FC:49:10:9E:50:96:48:DB
            X509v3 Authority Key Identifier:
                keyid:65:D6:D7:06:75:23:7A:7E:DF:88:BC:F0:8E:74:5B:81:EC:21:05:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82E44512EC1F9698F6A2CC0DB50D5F116636FC4CBC15EAFFD1D3390FF5D9319F/0/65D6D70675237A7EDF88BCF08E745B81EC2105CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/65D6D70675237A7EDF88BCF08E745B81EC2105CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82E44512EC1F9698F6A2CC0DB50D5F116636FC4CBC15EAFFD1D3390FF5D9319F/0/323830313a3165653a3a2f34382d3438203d3e203139343239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ee::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:aa:f2:96:f8:df:07:37:f6:10:34:61:0f:f9:db:8f:6b:16:
         94:44:64:26:a1:ef:14:bf:2f:1b:aa:69:a2:4c:b1:4d:7b:d5:
         cc:55:65:ac:45:9d:bc:83:07:92:87:58:4b:b1:2a:80:4c:3a:
         d2:cc:84:f4:ad:84:42:62:45:36:45:ae:8c:94:f6:d8:8e:e3:
         91:78:66:45:08:b2:f8:fb:82:7c:c5:bc:ef:ff:35:21:3d:d4:
         61:a6:d7:09:45:b9:91:ab:a7:ca:33:90:45:bf:13:9c:3a:86:
         17:a7:52:7f:f0:2a:6e:21:b9:39:6f:d1:9c:d7:f1:19:29:2c:
         c2:49:11:75:e1:29:04:dd:7e:28:aa:c9:2d:ac:ae:53:1e:76:
         5c:9a:18:90:f1:48:d1:8c:7c:39:74:ab:8a:7d:53:f4:8e:d5:
         37:3e:40:01:7e:31:d3:35:d6:05:1c:7f:9a:ef:c8:d4:03:c4:
         a8:76:af:49:a7:f4:27:04:2d:e9:1c:94:c3:a7:76:85:fe:b8:
         fd:c0:45:92:14:a6:9a:f7:8a:fb:f2:71:09:df:3b:da:dd:9c:
         67:13:3f:bf:57:74:19:89:e4:55:c3:0d:28:b4:95:81:4e:24:
         74:39:bc:a3:8b:cd:d2:07:38:b3:01:f5:f3:95:b5:a7:bb:63:
         56:b4:8e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----