Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa
File:                     323830313a3139353a3a2f34342d3434203d3e20323733313437.roa (raw, json)
Hash identifier:          4dthsXMkITo0Vo7rIVSANELc8haaKrlazfkP+lPaKbc=
Subject key identifier:   4F:5B:58:71:AC:13:EF:BB:F4:AA:A9:92:43:B8:C9:A6:F4:00:E4:6D
Certificate issuer:       /CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2
Certificate serial:       0F9C92EC7EFBD5B2AC3319B2994EA42D0B3DE6B1
Authority key identifier: 8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa
Signing time:             Wed 05 Jun 2024 00:55:00 +0000
ROA not before:           Wed 05 Jun 2024 00:50:00 +0000
ROA not after:            Wed 04 Jun 2025 00:55:00 +0000
asID:                     273147
IP address blocks:        2801:195::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9c:92:ec:7e:fb:d5:b2:ac:33:19:b2:99:4e:a4:2d:0b:3d:e6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2
        Validity
            Not Before: Jun  5 00:50:00 2024 GMT
            Not After : Jun  4 00:55:00 2025 GMT
        Subject: CN=4F5B5871AC13EFBBF4AAA99243B8C9A6F400E46D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d8:8b:c8:0f:32:37:26:13:fc:e9:14:02:f1:
                    3b:e0:53:da:b6:53:b4:4e:24:68:26:93:4e:48:b7:
                    d6:5c:5d:51:87:13:dd:e7:0e:7f:a2:73:e5:e9:e7:
                    f9:a9:74:1f:bb:4a:73:4b:3f:2d:cb:26:a4:b1:a7:
                    b0:79:c0:33:51:30:39:c9:83:1a:cd:cc:dd:77:03:
                    56:d1:32:9d:fe:8c:20:6a:8d:bf:76:c5:e0:75:67:
                    d3:9a:8e:56:40:a7:c1:d8:f9:8f:c9:ac:38:c3:f4:
                    39:7f:61:51:5a:3f:ab:68:18:92:d7:13:f0:d1:fe:
                    81:33:e9:58:1a:7e:62:b1:78:b4:dc:97:3e:87:33:
                    7b:8c:e8:56:8f:27:40:4b:4a:e9:d2:eb:c4:03:8c:
                    a4:fa:6c:ac:a7:b4:5a:bf:04:6c:b4:c3:1c:6d:f5:
                    49:73:c9:24:04:c1:9e:1c:f0:62:25:9a:74:46:f2:
                    ef:f6:5b:f9:9a:6b:de:c8:96:a8:81:f1:c4:df:5c:
                    5b:43:0e:5b:62:37:f2:cf:8e:3f:9c:c1:5a:e7:81:
                    70:ed:46:e8:4f:45:a6:db:0b:98:01:53:40:74:f2:
                    95:32:fb:fa:4c:35:98:14:60:e9:f8:66:97:68:66:
                    af:f8:4a:a9:c0:1a:6a:fc:c1:10:b4:30:d8:90:7f:
                    8d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5B:58:71:AC:13:EF:BB:F4:AA:A9:92:43:B8:C9:A6:F4:00:E4:6D
            X509v3 Authority Key Identifier:
                keyid:8F:ED:75:FF:6D:D0:1F:1C:8F:40:36:97:4C:9A:E7:72:71:E6:AF:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FED75FF6DD01F1C8F4036974C9AE77271E6AFF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D2695C69EBC65C505D4DBF8DF267A90433B2A765CC67B4DACC88AB84F8FC89C0/0/323830313a3139353a3a2f34342d3434203d3e20323733313437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:195::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:5c:a5:d0:6c:97:c3:80:5b:ab:53:1f:90:76:3f:e6:54:55:
         fe:17:49:4c:6b:9e:c2:1b:de:97:40:05:69:81:5e:22:8b:f0:
         87:5c:5a:90:5c:58:d7:ef:f4:84:d6:41:63:33:d8:2f:b8:bb:
         77:9c:5d:23:94:7d:ee:fe:f9:80:e5:ad:4e:85:3a:30:9f:b3:
         4d:6e:66:b4:8c:1f:73:3a:0e:e4:e6:fa:f1:4c:1b:54:cb:5e:
         5a:c7:0f:84:f8:49:1f:08:a5:21:ad:d6:9e:d8:fb:74:61:74:
         c3:09:bd:9b:1a:96:03:84:b6:16:26:1b:b3:63:16:e8:e1:8c:
         38:d5:97:51:e4:a0:c9:26:ca:c5:d7:29:c6:3c:69:d2:82:e0:
         94:c8:82:69:ef:64:78:43:eb:de:05:1d:d8:cc:43:90:ca:ef:
         24:68:0d:3b:43:38:5c:9f:c1:46:46:5f:2c:17:63:4d:e3:cc:
         39:79:05:e7:8d:84:d8:ec:2e:a8:ca:b7:0a:c3:ed:b7:c1:58:
         62:23:c4:3f:2d:33:fa:23:7f:45:75:5f:c8:35:a4:47:f5:53:
         54:54:e2:5f:1f:43:94:cf:c5:ed:02:03:e9:48:f5:6a:01:9c:
         f3:9c:2f:3f:8d:a9:ee:53:fe:a3:da:49:cf:5f:af:e1:86:6e:
         4d:f1:bd:86
-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUD5yS7H771bKsMxmymU6kLQs95rEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEZFRDc1RkY2REQwMUYxQzhGNDAzNjk3NEM5QUU3NzI3
MUU2QUZGMjAeFw0yNDA2MDUwMDUwMDBaFw0yNTA2MDQwMDU1MDBaMDMxMTAvBgNV
BAMTKDRGNUI1ODcxQUMxM0VGQkJGNEFBQTk5MjQzQjhDOUE2RjQwMEU0NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT2IvIDzI3JhP86RQC8TvgU9q2
U7ROJGgmk05It9ZcXVGHE93nDn+ic+Xp5/mpdB+7SnNLPy3LJqSxp7B5wDNRMDnJ
gxrNzN13A1bRMp3+jCBqjb92xeB1Z9OajlZAp8HY+Y/JrDjD9Dl/YVFaP6toGJLX
E/DR/oEz6VgafmKxeLTclz6HM3uM6FaPJ0BLSunS68QDjKT6bKyntFq/BGy0wxxt
9UlzySQEwZ4c8GIlmnRG8u/2W/maa97IlqiB8cTfXFtDDltiN/LPjj+cwVrngXDt
RuhPRabbC5gBU0B08pUy+/pMNZgUYOn4ZpdoZq/4SqnAGmr8wRC0MNiQf40pAgMB
AAGjggLJMIICxTAdBgNVHQ4EFgQUT1tYcawT77v0qqmSQ7jJpvQA5G0wHwYDVR0j
BBgwFoAUj+11/23QHxyPQDaXTJrncnHmr/IwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9EMjY5NUM2OUVCQzY1QzUwNUQ0REJGOERGMjY3QTkwNDMz
QjJBNzY1Q0M2N0I0REFDQzg4QUI4NEY4RkM4OUMwLzAvOEZFRDc1RkY2REQwMUYx
QzhGNDAzNjk3NEM5QUU3NzI3MUU2QUZGMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC84RkVENzVGRjZERDAxRjFDOEY0
MDM2OTc0QzlBRTc3MjcxRTZBRkYyLmNlcjCBxQYIKwYBBQUHAQsEgbgwgbUwgbIG
CCsGAQUFBzALhoGlcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDI2OTVDNjlFQkM2NUM1MDVENERCRjhERjI2N0E5MDQzM0IyQTc2NUND
NjdCNERBQ0M4OEFCODRGOEZDODlDMC8wLzMyMzgzMDMxM2EzMTM5MzUzYTNhMmYz
NDM0MmQzNDM0MjAzZDNlMjAzMjM3MzMzMTM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQoAQGVAAAw
DQYJKoZIhvcNAQELBQADggEBAI1cpdBsl8OAW6tTH5B2P+ZUVf4XSUxrnsIb3pdA
BWmBXiKL8IdcWpBcWNfv9ITWQWMz2C+4u3ecXSOUfe7++YDlrU6FOjCfs01uZrSM
H3M6DuTm+vFMG1TLXlrHD4T4SR8IpSGt1p7Y+3RhdMMJvZsalgOEthYmG7NjFujh
jDjVl1HkoMkmysXXKcY8adKC4JTIgmnvZHhD694FHdjMQ5DK7yRoDTtDOFyfwUZG
XywXY03jzDl5BeeNhNjsLqjKtwrD7bfBWGIjxD8tM/ojf0V1X8g1pEf1U1RU4l8f
Q5TPxe0CA+lI9WoBnPOcLz+Nqe5T/qPaSc9fr+GGbk3xvYY=
-----END CERTIFICATE-----