Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/323830313a63353a653030303a3a2f34382d3438203d3e20323732333535.roa
File:                     323830313a63353a653030303a3a2f34382d3438203d3e20323732333535.roa (raw, json)
Hash identifier:          yWVYa7yQQ7EB8Y64F9TV44pwmosZBp9fbr+xU+U+H3U=
Subject key identifier:   84:05:B6:64:5D:3C:07:26:8C:12:0E:EE:4C:16:B8:DE:90:17:5F:CB
Certificate issuer:       /CN=7F987726AC571A418EC2B028452F4201605F6575
Certificate serial:       62518A674CC7BC36AC76407581C1AC082886D02A
Authority key identifier: 7F:98:77:26:AC:57:1A:41:8E:C2:B0:28:45:2F:42:01:60:5F:65:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F987726AC571A418EC2B028452F4201605F6575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/323830313a63353a653030303a3a2f34382d3438203d3e20323732333535.roa
Signing time:             Tue 11 Jun 2024 14:40:00 +0000
ROA not before:           Tue 11 Jun 2024 14:35:00 +0000
ROA not after:            Tue 10 Jun 2025 14:40:00 +0000
asID:                     272355
IP address blocks:        2801:c5:e000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:51:8a:67:4c:c7:bc:36:ac:76:40:75:81:c1:ac:08:28:86:d0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F987726AC571A418EC2B028452F4201605F6575
        Validity
            Not Before: Jun 11 14:35:00 2024 GMT
            Not After : Jun 10 14:40:00 2025 GMT
        Subject: CN=8405B6645D3C07268C120EEE4C16B8DE90175FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:82:f1:46:65:6c:2b:89:bd:78:f0:bc:b6:f0:
                    58:2a:1c:18:b5:44:2c:1c:37:e9:ca:e0:c1:55:26:
                    32:01:d3:48:05:67:df:cd:c0:42:c7:30:5e:fa:c9:
                    b7:b5:fa:50:c5:e4:25:2c:fc:77:2b:87:44:35:29:
                    12:ca:e1:f9:bb:00:52:6d:a1:2a:16:f9:94:6e:84:
                    26:31:1e:e1:ee:42:14:f7:5f:e6:64:81:db:d7:06:
                    62:b9:8d:79:9b:a4:eb:55:45:b0:6c:b7:35:36:b7:
                    7c:2d:93:be:cb:47:20:2d:54:4e:5f:55:c2:97:54:
                    d5:0e:e3:c2:a1:ef:66:e7:c4:33:a7:c2:8d:d0:ad:
                    24:c4:46:c0:f5:24:d8:d3:62:6b:3b:17:a2:1c:bd:
                    35:34:2d:69:3b:61:5f:15:16:41:b3:3e:0a:53:6e:
                    d5:79:59:8a:dc:f5:a4:d7:7a:e1:6a:72:22:88:e4:
                    72:ea:20:9e:0d:92:78:6f:17:9d:17:77:68:fa:a3:
                    0b:11:4e:42:fa:4a:c2:ce:17:33:3c:28:94:af:80:
                    75:6e:a7:57:ae:14:8a:67:38:e8:25:2d:19:42:b9:
                    84:6c:e6:43:c6:f2:fb:4d:f1:2e:c4:a0:84:e1:b7:
                    b4:5c:1c:63:82:fd:4d:6b:46:62:ea:1b:01:23:e4:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:05:B6:64:5D:3C:07:26:8C:12:0E:EE:4C:16:B8:DE:90:17:5F:CB
            X509v3 Authority Key Identifier:
                keyid:7F:98:77:26:AC:57:1A:41:8E:C2:B0:28:45:2F:42:01:60:5F:65:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/7F987726AC571A418EC2B028452F4201605F6575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7F987726AC571A418EC2B028452F4201605F6575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E76358162F08D26EFAA13B9C97CA2B85BA7B52AF28A544277B8137A112F4D1A7/0/323830313a63353a653030303a3a2f34382d3438203d3e20323732333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c5:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:af:e5:a8:3d:40:fb:6b:6c:d0:94:9b:94:f5:3b:86:f4:09:
         ff:52:92:03:5f:49:00:cc:30:ed:ff:a6:21:fa:11:45:d2:df:
         6d:9e:6d:43:a9:6e:ca:f4:b0:8c:92:e5:d4:c8:26:cb:45:2d:
         08:57:cf:17:b7:17:b2:c1:d7:2d:f7:8d:57:0c:e7:9e:1e:31:
         65:16:d3:24:a1:70:e8:20:05:ff:39:96:c4:71:93:c3:6f:25:
         19:1b:34:f7:b6:7d:b5:88:b6:70:a9:1e:8f:55:8c:5a:76:d2:
         b2:60:ee:a3:48:db:1a:9b:99:2e:e8:2b:1d:16:62:78:df:f0:
         8e:49:96:fb:6c:70:c7:c7:1f:fa:6d:0c:60:b2:ed:e4:ca:ae:
         88:4b:f9:12:11:08:88:9d:1c:aa:d4:75:fe:c6:f5:c5:66:70:
         3a:46:c3:96:13:f0:5a:89:02:1c:33:b7:43:d0:5b:a6:fd:f9:
         d8:00:93:5c:d4:0f:2b:e9:46:93:f9:24:b5:97:e4:ef:73:d2:
         e8:fe:36:e8:06:48:8e:14:bc:fd:52:88:c7:6d:ac:a9:cc:81:
         a2:16:fb:2a:d6:0d:ac:79:e2:e9:e1:d2:6f:86:45:e2:4b:28:
         d2:98:d5:40:43:d7:51:11:4f:ac:95:5a:6c:04:f7:3b:dc:d9:
         ab:b0:49:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----