Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8B247782BC3D6B1F6969C868892A638B44E0B08EAD4A29161272CDAA06983183/0/323830313a31383a313830303a3a2f34382d3438203d3e20323639383232.roa
File:                     323830313a31383a313830303a3a2f34382d3438203d3e20323639383232.roa (raw, json)
Hash identifier:          tkP7QhcdwFZHWYT1++gXyNbo0Jl2eUivYGroAoX3sxI=
Subject key identifier:   B4:AF:1C:CF:59:44:FC:18:93:E9:64:79:E4:DE:C0:9A:D9:8E:77:07
Certificate issuer:       /CN=9E72ECAD48F886D2A48F18F7E7234FE3D2745890
Certificate serial:       48D5712B75BACF334C5AB836BA64B5C1F6EC26AE
Authority key identifier: 9E:72:EC:AD:48:F8:86:D2:A4:8F:18:F7:E7:23:4F:E3:D2:74:58:90
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E72ECAD48F886D2A48F18F7E7234FE3D2745890.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8B247782BC3D6B1F6969C868892A638B44E0B08EAD4A29161272CDAA06983183/0/323830313a31383a313830303a3a2f34382d3438203d3e20323639383232.roa
Signing time:             Sat 30 Nov 2024 20:45:01 +0000
ROA not before:           Sat 30 Nov 2024 20:40:01 +0000
ROA not after:            Sat 29 Nov 2025 20:45:01 +0000
asID:                     269822
IP address blocks:        2801:18:1800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d5:71:2b:75:ba:cf:33:4c:5a:b8:36:ba:64:b5:c1:f6:ec:26:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E72ECAD48F886D2A48F18F7E7234FE3D2745890
        Validity
            Not Before: Nov 30 20:40:01 2024 GMT
            Not After : Nov 29 20:45:01 2025 GMT
        Subject: CN=B4AF1CCF5944FC1893E96479E4DEC09AD98E7707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f9:66:0f:d0:59:a4:4b:00:28:9a:4f:b1:a1:
                    c0:f7:66:f4:14:a7:dd:b7:40:ad:54:93:a4:70:53:
                    d0:45:6f:65:7d:71:b6:ec:9e:4b:dc:22:ab:bf:1e:
                    9e:0a:b6:d2:0c:c7:6f:d3:2a:8f:4b:de:58:a0:c0:
                    11:0b:23:7b:1f:7e:5a:9b:b0:e9:6a:b1:4a:81:ab:
                    97:74:e0:61:03:4e:1f:2a:f0:7e:b5:20:53:bb:f7:
                    95:5d:7a:9d:1f:fa:7b:7f:f1:cb:97:2c:2f:10:12:
                    b2:d3:71:b6:86:42:cc:d7:68:21:3c:69:49:5d:11:
                    ae:dc:8e:61:9f:30:50:2c:d3:83:97:e8:40:4e:ad:
                    43:80:46:24:52:a2:05:6a:b9:95:97:2c:c4:93:84:
                    bf:9e:4c:9d:2a:b6:a4:d4:14:f6:5a:22:62:9b:b4:
                    69:6f:ba:f1:c3:2f:b1:78:a0:50:67:38:2e:7a:c6:
                    99:4f:fc:cb:3b:fd:89:3b:85:c5:25:da:c3:32:6a:
                    32:77:a0:48:31:c1:9b:09:ee:37:51:79:19:0b:13:
                    cb:89:77:34:e7:93:02:eb:87:04:2d:4e:55:b5:86:
                    58:56:bb:23:8e:33:fc:09:31:1f:5c:91:ff:45:d0:
                    59:e2:fc:10:d7:7a:8d:cd:fd:ac:f8:57:ef:c3:7a:
                    0e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AF:1C:CF:59:44:FC:18:93:E9:64:79:E4:DE:C0:9A:D9:8E:77:07
            X509v3 Authority Key Identifier:
                keyid:9E:72:EC:AD:48:F8:86:D2:A4:8F:18:F7:E7:23:4F:E3:D2:74:58:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8B247782BC3D6B1F6969C868892A638B44E0B08EAD4A29161272CDAA06983183/0/9E72ECAD48F886D2A48F18F7E7234FE3D2745890.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E72ECAD48F886D2A48F18F7E7234FE3D2745890.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8B247782BC3D6B1F6969C868892A638B44E0B08EAD4A29161272CDAA06983183/0/323830313a31383a313830303a3a2f34382d3438203d3e20323639383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:7c:84:0f:d0:af:1c:d9:0e:c4:a8:1c:e7:0b:39:5d:ff:1c:
         e4:db:3d:a9:ba:e3:d9:3a:f8:74:94:5e:58:f7:24:be:e3:9c:
         d8:39:91:c3:78:a6:80:2b:97:66:c9:18:65:70:8c:cf:88:12:
         13:43:e4:c0:76:f6:6b:c4:01:2d:94:ec:c7:66:0c:1c:50:4a:
         e4:e0:9b:d8:da:a2:0c:b9:b5:8f:01:15:09:ea:fc:dd:07:4f:
         c7:4c:9b:ea:a1:3f:b5:36:e0:fb:cc:89:8c:43:f0:dc:82:05:
         fa:23:63:0d:a1:8a:45:44:64:4d:a3:4c:f7:6c:b2:0f:34:33:
         0f:ca:a2:25:de:72:28:82:bc:96:37:df:b4:3b:49:1f:6f:47:
         db:c9:a1:b7:85:db:90:d8:fb:8b:c4:22:31:e6:00:68:44:2e:
         78:99:b7:47:b9:ad:8f:f8:db:ed:07:cf:2f:6e:7d:a0:3a:e2:
         22:0c:a9:dc:69:fa:e2:a6:3a:58:e1:6f:2a:73:d5:11:ca:88:
         b4:57:dc:d8:41:22:ff:af:85:c1:12:0c:2b:be:db:c1:9d:1b:
         69:17:d3:42:53:38:97:7c:0d:69:aa:1f:04:ec:3a:27:04:75:
         89:fa:9e:81:b6:3f:77:26:19:dd:6c:f6:3b:82:c2:95:67:7e:
         56:20:04:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----