Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE80CF5FACB88D4040508BF9EA0E15F07807825C6A76AF6C36B66DC5617C3C85/0/323830313a31313a653830303a3a2f34382d3438203d3e20323731393032.roa
File:                     323830313a31313a653830303a3a2f34382d3438203d3e20323731393032.roa (raw, json)
Hash identifier:          0Zz8GLE4WA2qRtqFedqvX5m9cPbpnswjt2hqh6aGPys=
Subject key identifier:   DA:90:2B:05:BF:87:D8:22:59:81:59:DA:A7:D1:55:96:1C:9C:8B:06
Certificate issuer:       /CN=87AC62AE265709E076C293C39997BE5CEA35A360
Certificate serial:       0F7FF843B56184D51762E4442552446798E25801
Authority key identifier: 87:AC:62:AE:26:57:09:E0:76:C2:93:C3:99:97:BE:5C:EA:35:A3:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87AC62AE265709E076C293C39997BE5CEA35A360.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE80CF5FACB88D4040508BF9EA0E15F07807825C6A76AF6C36B66DC5617C3C85/0/323830313a31313a653830303a3a2f34382d3438203d3e20323731393032.roa
Signing time:             Tue 05 Mar 2024 18:19:32 +0000
ROA not before:           Tue 05 Mar 2024 18:14:32 +0000
ROA not after:            Tue 04 Mar 2025 18:19:32 +0000
asID:                     271902
IP address blocks:        2801:11:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:7f:f8:43:b5:61:84:d5:17:62:e4:44:25:52:44:67:98:e2:58:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AC62AE265709E076C293C39997BE5CEA35A360
        Validity
            Not Before: Mar  5 18:14:32 2024 GMT
            Not After : Mar  4 18:19:32 2025 GMT
        Subject: CN=DA902B05BF87D822598159DAA7D155961C9C8B06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b5:4f:4e:a2:7c:e7:5b:d4:86:3f:f2:83:87:
                    be:d7:95:c8:92:d7:69:1c:fa:75:a3:39:c4:b6:a7:
                    b4:be:6f:66:72:68:67:f1:67:e7:89:fb:33:8c:49:
                    95:22:0f:ef:c7:65:78:28:98:c9:11:d2:ad:0c:3d:
                    8b:fc:50:8d:c6:f9:c0:9c:66:71:0d:fd:95:b6:96:
                    fa:28:0f:37:0b:d4:7e:a1:74:3c:1a:65:e5:d5:9e:
                    70:a8:89:8c:ce:32:c2:61:d5:13:e1:52:10:38:27:
                    28:38:64:76:c4:f9:41:a6:bf:19:de:4e:2b:6a:ea:
                    3c:53:74:0a:03:32:c6:fa:d1:66:bd:05:a4:0c:d3:
                    7c:26:54:e9:25:f4:05:d5:2a:6e:c7:22:35:43:5c:
                    88:e3:ee:d5:ae:0c:c8:52:d9:4f:58:93:0b:69:c4:
                    6f:bc:9e:8a:dc:e7:46:bc:c0:b5:78:85:02:d5:e3:
                    cf:f5:50:e1:46:7b:3c:ef:b2:c9:c3:9e:cd:68:05:
                    fd:13:0c:07:17:0a:87:6c:a3:a3:d1:02:7f:bf:ae:
                    c4:4e:2e:47:36:1d:43:55:56:cc:34:03:2b:ae:f8:
                    0c:1b:c4:db:94:ce:39:15:d7:97:c7:fc:1c:c0:e4:
                    57:0a:4f:37:c4:d8:49:06:2e:4b:05:2f:26:0c:8d:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:90:2B:05:BF:87:D8:22:59:81:59:DA:A7:D1:55:96:1C:9C:8B:06
            X509v3 Authority Key Identifier:
                keyid:87:AC:62:AE:26:57:09:E0:76:C2:93:C3:99:97:BE:5C:EA:35:A3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE80CF5FACB88D4040508BF9EA0E15F07807825C6A76AF6C36B66DC5617C3C85/0/87AC62AE265709E076C293C39997BE5CEA35A360.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/87AC62AE265709E076C293C39997BE5CEA35A360.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE80CF5FACB88D4040508BF9EA0E15F07807825C6A76AF6C36B66DC5617C3C85/0/323830313a31313a653830303a3a2f34382d3438203d3e20323731393032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:86:89:bd:05:72:69:5c:c8:b5:10:d1:14:c5:8e:88:e1:44:
         41:56:85:7d:5b:9e:c7:f3:d2:a1:9d:b7:15:ab:b9:58:19:f0:
         e5:da:d5:e5:9b:d0:6b:8f:05:b5:5c:3e:99:50:1c:0f:03:4e:
         b8:4a:a5:22:02:75:04:68:03:2e:2d:0a:5c:23:ac:df:af:49:
         cd:ef:1e:00:a4:03:5e:5c:6f:87:de:99:1f:69:58:1e:06:87:
         dd:de:e6:0c:2e:4b:06:0a:cb:a4:32:a4:35:24:c2:20:e4:3b:
         4b:ef:cf:af:5b:0b:25:c8:28:b5:09:b0:64:ad:36:6d:81:61:
         92:9e:c0:94:be:a0:95:7c:f4:0f:f3:18:7b:d0:27:f5:73:f5:
         b5:5b:7e:d3:9f:b3:86:f0:a2:f2:f7:0c:21:2a:d7:02:9c:76:
         e4:49:37:83:13:21:8f:74:34:ab:af:47:1c:b5:2e:1f:ba:91:
         89:29:6e:c0:2c:75:b6:de:15:b4:80:fe:4b:34:f2:b6:9b:67:
         81:d2:1a:f7:8b:c5:ba:11:3d:61:f0:b1:3d:d4:29:b7:a5:31:
         18:dc:6e:ef:7e:e9:48:8e:bc:91:e2:aa:5d:13:99:03:50:04:
         b1:af:04:b6:c7:1e:4d:7d:34:db:0e:2a:09:28:8d:ed:ea:84:
         3d:f9:3a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----