Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a323a3a2f34382d3438203d3e20323733313437.roa
File:                     323830313a3139353a323a3a2f34382d3438203d3e20323733313437.roa (raw, json)
Hash identifier:          nh8i9R+lMbhkPmBr0E3qPsn7sMx9RHDcD7SlfcX1NrY=
Subject key identifier:   61:9B:39:2E:6E:28:CA:14:E7:D7:65:EA:A0:A9:BE:0C:3C:7E:18:DB
Certificate issuer:       /CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2
Certificate serial:       60E0A40945D82CE0497A052BA7C261917DD0D53E
Authority key identifier: 8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a323a3a2f34382d3438203d3e20323733313437.roa
Signing time:             Wed 05 Jun 2024 00:55:00 +0000
ROA not before:           Wed 05 Jun 2024 00:50:00 +0000
ROA not after:            Wed 04 Jun 2025 00:55:00 +0000
asID:                     273147
IP address blocks:        2801:195:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e0:a4:09:45:d8:2c:e0:49:7a:05:2b:a7:c2:61:91:7d:d0:d5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2
        Validity
            Not Before: Jun  5 00:50:00 2024 GMT
            Not After : Jun  4 00:55:00 2025 GMT
        Subject: CN=619B392E6E28CA14E7D765EAA0A9BE0C3C7E18DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:38:82:48:3b:eb:1b:83:b9:ee:fd:07:6c:02:
                    5c:0b:92:3f:0c:01:cc:cf:e8:f6:e8:8c:35:97:75:
                    8b:a8:e5:d3:4b:1d:ff:cc:32:7f:01:3b:ab:62:26:
                    f9:de:56:51:c2:80:a5:81:34:57:f0:a5:24:27:6e:
                    26:4c:4f:81:b4:eb:3c:c0:21:ee:c7:94:d9:ef:32:
                    ac:f2:2b:38:18:7a:6c:e7:7f:9d:97:8a:b7:35:a4:
                    dd:8a:c9:c5:29:e9:58:0a:6d:09:05:2e:4d:71:a2:
                    c2:5a:fb:49:c2:1c:06:7e:e0:15:4c:01:51:cb:6a:
                    67:c4:11:19:4c:17:72:10:6b:f2:e7:43:6d:93:12:
                    1e:62:0c:1e:0c:fd:ce:58:08:b5:07:b2:d7:6f:ea:
                    4e:7e:2f:60:f6:bb:12:71:9f:fd:62:9c:cd:18:31:
                    dc:0d:10:9f:85:e0:24:04:1a:31:16:ef:db:95:0b:
                    50:2c:1b:6d:a3:cc:ca:54:a6:2f:41:8f:9d:2e:06:
                    c9:87:70:a2:ad:62:74:6f:46:a4:c5:6f:8f:ba:7c:
                    d2:f9:58:9d:0f:9d:bf:39:61:6b:bf:fa:6a:64:af:
                    f7:fa:f7:9d:76:b0:46:8d:89:00:4e:d0:62:14:4d:
                    4a:de:24:71:22:af:af:87:ec:eb:05:78:ef:2a:f9:
                    2d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:9B:39:2E:6E:28:CA:14:E7:D7:65:EA:A0:A9:BE:0C:3C:7E:18:DB
            X509v3 Authority Key Identifier:
                keyid:8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a323a3a2f34382d3438203d3e20323733313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:195:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:11:41:50:5b:31:70:9c:88:8e:26:3c:cd:2e:24:76:8e:ca:
         de:78:d0:83:3d:ca:92:83:af:25:39:b7:22:84:5e:4a:44:d6:
         df:fe:52:2b:90:98:b4:bb:7b:f4:22:58:b8:99:64:f6:c0:b4:
         d8:11:f4:ab:f9:87:80:3a:b5:a5:4f:9d:c7:d1:d2:f0:43:81:
         cb:74:09:69:d8:25:b9:25:f4:7f:22:05:cd:74:2f:79:48:11:
         97:dd:4b:44:57:a2:21:33:01:70:51:2d:aa:5b:81:c7:5f:4f:
         00:96:a5:e7:68:b5:f6:47:92:21:c8:26:c5:dd:db:ca:26:54:
         16:3b:0c:b0:f3:66:bf:2f:ca:5f:aa:7c:16:bf:74:ca:1e:a7:
         bd:0e:38:e4:73:e4:13:7a:bf:c4:2a:fa:ef:25:19:5d:98:4e:
         71:a9:7a:6c:da:5d:c0:cf:e6:6d:72:d3:cc:96:b2:f7:bf:c8:
         b7:0c:e6:8b:86:93:66:0c:70:50:9c:53:64:e1:9a:f0:60:c2:
         7d:fb:d3:1c:d7:70:2a:b7:3d:16:84:7f:57:84:00:b0:a3:08:
         7d:30:88:a7:de:3f:0e:cd:e5:ef:08:d3:bf:62:92:b6:92:59:
         4d:09:19:bb:f7:24:17:db:26:9f:37:66:69:88:08:92:4b:44:
         6f:cd:02:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----