Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/027FE80ED50C341F8EEEB5AC53925DA8FC2CEE36A1453B5C5E026C18594D528A/0/323830313a303a3431303a3a2f34382d3438203d3e203532343137.roa
File:                     323830313a303a3431303a3a2f34382d3438203d3e203532343137.roa (raw, json)
Hash identifier:          tGe457/R/QpSgD2eBaLHXiqftP0PjmuekylR1O+NYIg=
Subject key identifier:   0A:49:22:9D:65:B5:04:11:C7:8F:6E:64:30:03:18:F0:33:95:EA:84
Certificate issuer:       /CN=CEE07DBD2BF8ABE8C6C28D845474A884D847AC93
Certificate serial:       3D24A0A6CB29B6FE18A4510EFC4DCE4CBC83617E
Authority key identifier: CE:E0:7D:BD:2B:F8:AB:E8:C6:C2:8D:84:54:74:A8:84:D8:47:AC:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEE07DBD2BF8ABE8C6C28D845474A884D847AC93.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/027FE80ED50C341F8EEEB5AC53925DA8FC2CEE36A1453B5C5E026C18594D528A/0/323830313a303a3431303a3a2f34382d3438203d3e203532343137.roa
Signing time:             Tue 04 Feb 2025 18:33:51 +0000
ROA not before:           Tue 04 Feb 2025 18:28:51 +0000
ROA not after:            Tue 03 Feb 2026 18:33:51 +0000
asID:                     52417
IP address blocks:        2801:0:410::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:24:a0:a6:cb:29:b6:fe:18:a4:51:0e:fc:4d:ce:4c:bc:83:61:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEE07DBD2BF8ABE8C6C28D845474A884D847AC93
        Validity
            Not Before: Feb  4 18:28:51 2025 GMT
            Not After : Feb  3 18:33:51 2026 GMT
        Subject: CN=0A49229D65B50411C78F6E64300318F03395EA84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:ff:58:94:8e:0e:67:5d:af:4c:5e:ae:a4:
                    35:0d:c5:5d:a0:0f:15:e6:ca:ac:10:47:2b:43:11:
                    40:a3:b7:0e:40:78:28:8c:9f:b1:8d:b0:9d:fc:2f:
                    76:c4:8b:2e:33:aa:4f:8c:f9:9b:f6:e5:65:4b:91:
                    26:5e:6d:90:da:23:cd:2b:61:4c:b2:3c:48:e9:da:
                    57:48:0d:b0:f9:97:5d:9f:7d:66:94:c5:65:85:ef:
                    21:b3:6c:b1:5d:e4:ce:0a:5e:ca:26:5e:f8:64:49:
                    92:98:65:f6:02:b3:93:07:e4:42:a2:ac:d9:f1:42:
                    c5:c4:be:bc:a7:7e:64:ba:3e:e3:62:2d:aa:a3:9a:
                    59:9e:16:fc:4a:f9:c7:60:1d:54:a0:15:9e:e0:d7:
                    7a:a7:9e:40:68:90:2d:bc:d7:d9:c9:36:2a:0d:6b:
                    e1:d6:93:86:7c:72:92:0a:51:13:26:23:65:6b:6d:
                    b7:9d:86:c6:bd:fa:b9:a8:d6:ab:4f:b8:d9:1d:33:
                    47:77:46:89:e6:a1:53:3a:4f:de:3c:7a:f6:49:f3:
                    52:e7:e2:f9:7b:fe:a4:81:42:f5:10:57:d5:fe:80:
                    15:43:14:b6:3e:e2:5c:e9:1d:c6:b3:b8:03:c3:4d:
                    79:60:9e:c7:47:0c:7c:e0:42:95:d2:06:f3:c3:74:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:49:22:9D:65:B5:04:11:C7:8F:6E:64:30:03:18:F0:33:95:EA:84
            X509v3 Authority Key Identifier:
                keyid:CE:E0:7D:BD:2B:F8:AB:E8:C6:C2:8D:84:54:74:A8:84:D8:47:AC:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/027FE80ED50C341F8EEEB5AC53925DA8FC2CEE36A1453B5C5E026C18594D528A/0/CEE07DBD2BF8ABE8C6C28D845474A884D847AC93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CEE07DBD2BF8ABE8C6C28D845474A884D847AC93.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/027FE80ED50C341F8EEEB5AC53925DA8FC2CEE36A1453B5C5E026C18594D528A/0/323830313a303a3431303a3a2f34382d3438203d3e203532343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:410::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:f0:1e:d2:5a:50:a9:11:2b:85:0e:4d:72:33:a8:cd:62:7b:
         00:45:df:78:5b:74:6e:73:b3:ac:2f:5d:31:43:01:c3:43:91:
         90:16:ac:ff:25:b9:e0:c8:c5:30:a8:9c:36:56:70:f5:69:f2:
         51:13:b7:76:75:4e:47:1e:0e:89:0c:a0:b3:f4:6e:55:76:84:
         41:3a:56:61:68:88:19:2a:36:6c:51:0c:1b:b4:e5:35:3e:9e:
         ec:ab:5c:ce:20:52:6d:44:60:88:53:65:86:25:2b:dd:20:a2:
         51:6e:90:7d:14:ab:da:7d:c6:18:f4:b5:d0:2c:bd:d8:a9:c2:
         e8:c8:6b:ed:6f:e3:72:f8:20:89:f7:d8:44:05:ed:6e:f6:57:
         d1:8f:23:78:e3:8b:ec:f1:4e:c9:dc:a9:a6:72:4f:25:e8:d2:
         dc:b3:68:44:4e:79:95:fe:57:58:95:29:78:d8:55:e6:6e:ab:
         58:71:48:e1:05:49:cb:a7:95:28:96:d9:49:5c:73:39:85:c7:
         b6:ec:f2:0c:46:a3:87:84:81:da:71:e3:e0:18:95:1d:f6:4b:
         15:97:ea:73:5b:43:e6:94:e4:e3:e2:c0:06:4f:3f:a3:08:6f:
         ee:18:1a:1e:18:1f:49:af:1d:ea:aa:47:33:1c:c8:3e:f6:30:
         08:c5:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----