Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/323830303a6430303a3a2f33322d3438203d3e20323633373636.roa
File:                     323830303a6430303a3a2f33322d3438203d3e20323633373636.roa (raw, json)
Hash identifier:          lB7Fcq67Ri+N3fhAyI+/5trN+CguhoejdnvqiOUTsXU=
Subject key identifier:   C7:8D:ED:87:D2:31:62:CA:BE:3B:B0:5E:7D:F5:98:B0:F8:70:86:03
Certificate issuer:       /CN=B9E6C43D762E93FD87830A253F11922C7BC63907
Certificate serial:       3EB8DD8847F7A2E0A329EEE7CF83A685E6246D01
Authority key identifier: B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/323830303a6430303a3a2f33322d3438203d3e20323633373636.roa
Signing time:             Fri 24 Jan 2025 15:45:00 +0000
ROA not before:           Fri 24 Jan 2025 15:40:00 +0000
ROA not after:            Fri 23 Jan 2026 15:45:00 +0000
asID:                     263766
IP address blocks:        2800:d00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:b8:dd:88:47:f7:a2:e0:a3:29:ee:e7:cf:83:a6:85:e6:24:6d:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9E6C43D762E93FD87830A253F11922C7BC63907
        Validity
            Not Before: Jan 24 15:40:00 2025 GMT
            Not After : Jan 23 15:45:00 2026 GMT
        Subject: CN=C78DED87D23162CABE3BB05E7DF598B0F8708603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5e:21:92:b3:59:31:e6:93:74:94:dd:a5:97:
                    19:79:c1:04:cc:61:57:27:3e:66:d7:18:fc:af:0a:
                    b9:5a:be:32:65:8e:29:41:0e:56:6f:94:12:6a:84:
                    c8:d6:d7:71:fc:30:0e:f5:7d:59:79:17:18:12:d0:
                    d9:fa:d1:c5:84:30:5b:23:94:aa:3f:30:68:44:fb:
                    12:87:b5:92:af:b9:cc:aa:bd:38:d4:0b:05:9e:ef:
                    89:ee:9a:6e:18:07:27:0d:9c:08:03:26:20:ce:1d:
                    ce:58:7d:1c:8a:2d:31:c0:46:e2:ab:49:9b:62:d1:
                    6c:12:8c:c7:4f:ec:94:d1:dc:ff:50:e4:48:52:89:
                    97:d1:91:f7:84:ef:c9:36:3d:78:4e:ab:6e:84:89:
                    ec:71:65:9f:6a:7d:45:e0:91:87:f9:42:aa:93:b1:
                    71:08:87:5e:7f:67:68:8a:a3:38:6d:b7:60:63:5c:
                    b4:9f:76:f8:14:27:1c:91:f2:41:a1:c7:a2:8f:9f:
                    1b:7d:da:ef:a9:b2:5e:d4:af:95:8a:23:a2:a5:ab:
                    07:d0:89:53:c0:8d:0d:1d:02:97:2d:ad:26:13:0c:
                    fb:ea:b5:21:1a:76:0e:10:32:75:04:4e:cb:07:c9:
                    5f:38:f3:da:7a:63:28:4b:3d:95:92:91:98:3f:a5:
                    2e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8D:ED:87:D2:31:62:CA:BE:3B:B0:5E:7D:F5:98:B0:F8:70:86:03
            X509v3 Authority Key Identifier:
                keyid:B9:E6:C4:3D:76:2E:93:FD:87:83:0A:25:3F:11:92:2C:7B:C6:39:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/B9E6C43D762E93FD87830A253F11922C7BC63907.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9E6C43D762E93FD87830A253F11922C7BC63907.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0FEB2D15EF7A21A4882978847D7133DEF84945DE1ABA96FA43EB91A0AF773EC5/0/323830303a6430303a3a2f33322d3438203d3e20323633373636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:2d:85:76:a5:5a:87:3a:3a:9d:9b:2a:24:47:03:8b:c3:65:
         1c:05:2d:88:9e:13:22:8c:4b:5e:d5:a7:85:c9:47:ec:66:ee:
         cc:70:f3:41:fa:04:c5:3d:f5:1b:2d:96:18:79:85:79:43:df:
         23:12:84:85:7f:4d:bb:a2:d1:7a:2b:1a:4e:b1:51:c8:2a:cb:
         f2:d8:3b:c4:09:f1:dc:53:ba:58:03:af:ea:a5:e9:bd:54:a0:
         26:c0:0f:ca:9a:7f:5f:8f:45:66:69:ea:d3:29:df:82:97:08:
         9d:10:1d:49:b1:a6:58:17:d7:9b:ea:66:0b:ed:8e:67:6d:7a:
         16:bd:34:6b:54:5d:78:4d:ec:4f:97:30:23:2b:99:6b:4c:88:
         ab:81:2c:ba:1e:c8:3b:2d:21:23:d9:59:25:41:4f:9c:88:c8:
         b5:86:54:77:82:31:c7:a2:b8:6d:52:7b:69:c0:1b:11:3c:b3:
         38:06:25:7b:f4:98:13:fe:24:d8:93:3d:5a:76:8e:c3:24:78:
         bf:7d:cc:44:54:76:5d:52:5c:92:58:0b:f9:43:14:09:f9:cc:
         c2:54:85:67:99:66:6b:6f:84:2d:77:92:f0:81:04:2b:32:57:
         76:cb:6a:ff:08:e5:53:73:e3:2f:44:07:ab:3f:58:50:c3:cb:
         3f:68:c9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----