Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa
File:                     323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa (raw, json)
Hash identifier:          dZbUvxWvd6eQdoWfOfzK8v9TuD25dhmpL/YAov8nZ/k=
Subject key identifier:   62:71:DD:5C:42:05:0F:C5:12:58:D0:C2:23:F1:F0:81:EC:CE:06:B7
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       54728008B143E75627568A82D794C21C1DA20BAC
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa
Signing time:             Fri 31 May 2024 15:10:00 +0000
ROA not before:           Fri 31 May 2024 15:05:00 +0000
ROA not after:            Fri 30 May 2025 15:10:00 +0000
asID:                     3573
IP address blocks:        2801:1f0:406b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:72:80:08:b1:43:e7:56:27:56:8a:82:d7:94:c2:1c:1d:a2:0b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: May 31 15:05:00 2024 GMT
            Not After : May 30 15:10:00 2025 GMT
        Subject: CN=6271DD5C42050FC51258D0C223F1F081ECCE06B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2e:47:17:fc:0e:e1:6a:70:c6:0e:da:53:50:
                    d5:44:99:eb:8a:b2:09:9c:19:e6:64:bb:51:be:de:
                    d8:c1:f0:7b:73:c3:a7:f3:f2:56:ce:9f:e8:7f:31:
                    6f:ad:c0:36:8d:d7:6f:db:0a:a1:31:2d:2f:bd:cd:
                    fc:c4:a0:a4:8b:e4:27:67:c7:bb:26:e0:8c:e6:e3:
                    c2:a1:53:97:54:9d:8d:a6:82:58:4f:dc:48:1e:4d:
                    36:18:dd:0e:e8:42:62:ce:1a:8d:4f:83:d6:27:8a:
                    4f:74:75:93:de:8d:db:7a:8f:df:03:cc:82:2f:dd:
                    d9:ea:d4:12:02:99:e2:cd:76:da:e0:e7:56:1b:7e:
                    7c:ce:1f:8d:de:75:c6:77:c8:9b:a5:92:56:7b:d7:
                    a5:db:d4:6d:50:bf:26:ed:d3:d0:db:28:a5:74:dc:
                    9e:0f:35:3e:a5:a3:3a:4d:0a:85:7a:22:d7:e0:83:
                    22:f8:8b:8c:82:ae:b0:0d:c6:5b:16:81:07:9b:03:
                    7f:cb:5c:78:6c:96:72:d0:f6:9f:2c:05:f6:e7:33:
                    8b:c0:4d:68:1f:8b:eb:25:74:53:d4:d9:e9:b8:56:
                    09:37:9b:0b:0f:80:6c:b3:7c:5c:ec:47:8f:1e:f6:
                    e3:9f:48:89:28:83:1f:1b:27:19:ae:b0:53:13:44:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:71:DD:5C:42:05:0F:C5:12:58:D0:C2:23:F1:F0:81:EC:CE:06:B7
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036623a3a2f34382d3438203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:406b::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:d9:eb:be:79:6f:b4:80:ea:d0:cc:87:e4:37:9c:37:20:74:
         28:a1:bc:e4:ca:ed:97:64:82:78:1f:1b:f8:7a:fe:4d:cf:c0:
         e0:60:49:5a:59:28:8f:76:dd:98:e0:28:b9:2d:36:0f:53:4b:
         5d:ff:12:6d:ea:79:65:84:0d:0c:24:13:d8:52:44:c6:90:6d:
         e5:84:8d:61:c3:4c:94:f4:49:15:55:61:55:cb:20:2b:3d:47:
         7c:e6:af:97:a1:7b:8f:99:35:30:94:96:73:33:b5:fe:40:cf:
         44:83:f3:98:1b:4d:b5:26:e2:54:6e:60:2a:bc:77:4b:f0:91:
         2d:61:17:19:cd:84:3b:50:0a:9a:80:56:6b:13:cf:af:80:65:
         ba:b3:c0:aa:46:a6:9f:df:c8:f2:a4:ea:33:fd:eb:59:7e:69:
         af:d6:9e:fa:45:43:b5:a9:be:f0:b4:c9:15:03:c3:d4:13:32:
         44:6b:38:dd:77:61:22:e3:4a:88:67:60:34:8c:a5:76:0b:60:
         c7:57:4b:58:3a:91:a0:f5:6b:a2:8d:14:94:62:07:91:6c:d6:
         f8:d4:b8:7a:7a:46:fb:a2:84:68:83:d2:32:39:36:4c:81:c8:
         3c:a4:51:c8:4a:d2:ee:5f:a8:11:4a:b9:28:4e:d0:65:dc:51:
         29:74:9d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----