Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/323830313a31353a343030303a3a2f34382d3438203d3e203237393839.roa
File:                     323830313a31353a343030303a3a2f34382d3438203d3e203237393839.roa (raw, json)
Hash identifier:          x0gPLJ0xLTbedKPdQnlI8aJBE9X7NupqFxIX6wqIoRk=
Subject key identifier:   CE:16:6A:CD:62:F6:A1:97:7E:2C:A5:7A:91:2D:E3:9F:25:06:3B:EC
Certificate issuer:       /CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
Certificate serial:       485A68E4915CB5B3B5BCC91E1B96B1A04021D562
Authority key identifier: 14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/323830313a31353a343030303a3a2f34382d3438203d3e203237393839.roa
Signing time:             Tue 04 Feb 2025 18:07:15 +0000
ROA not before:           Tue 04 Feb 2025 18:02:15 +0000
ROA not after:            Tue 03 Feb 2026 18:07:15 +0000
asID:                     27989
IP address blocks:        2801:15:4000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:5a:68:e4:91:5c:b5:b3:b5:bc:c9:1e:1b:96:b1:a0:40:21:d5:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14330EF1B751531E7A503086E1572BCE2E37D0CC
        Validity
            Not Before: Feb  4 18:02:15 2025 GMT
            Not After : Feb  3 18:07:15 2026 GMT
        Subject: CN=CE166ACD62F6A1977E2CA57A912DE39F25063BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:68:60:63:eb:38:af:31:66:8a:86:dd:46:
                    3b:41:9b:11:be:5d:d9:5b:5e:74:aa:6d:a4:75:c4:
                    aa:83:99:00:f2:84:91:cb:30:37:81:92:1d:7d:98:
                    67:52:06:6c:16:1c:85:04:f9:44:05:c4:89:74:82:
                    f1:71:08:ee:cb:5f:65:d9:b6:95:18:c6:88:14:e3:
                    08:9d:b3:15:06:e3:6c:f6:3a:73:dc:9c:65:65:27:
                    11:16:f5:eb:ee:f7:ab:7c:9b:7f:c9:57:2b:27:ec:
                    83:10:b2:4f:bc:54:a5:c8:88:79:a4:01:03:66:f4:
                    96:7c:82:6f:12:5c:03:6c:5d:14:de:4e:ae:52:f2:
                    3b:68:e4:e1:af:5a:fa:6d:c0:90:16:eb:8f:ab:a5:
                    9a:49:d6:ed:90:8e:5b:f3:83:93:44:67:d9:48:60:
                    13:37:f1:d0:b9:e9:bf:08:d5:8e:89:39:91:fb:ce:
                    2f:7e:af:d9:37:8a:a3:7e:cd:fb:da:b0:16:f8:a7:
                    35:04:af:35:bc:d5:b4:2b:ad:8c:ad:83:35:80:7a:
                    c3:30:3b:f2:f9:77:21:af:17:ab:c3:f2:04:0e:89:
                    d5:17:68:61:a4:48:05:8a:b8:b0:fd:67:dd:f1:35:
                    5e:b9:ca:5c:a9:94:02:4b:2e:dd:fd:45:99:0a:88:
                    4b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:16:6A:CD:62:F6:A1:97:7E:2C:A5:7A:91:2D:E3:9F:25:06:3B:EC
            X509v3 Authority Key Identifier:
                keyid:14:33:0E:F1:B7:51:53:1E:7A:50:30:86:E1:57:2B:CE:2E:37:D0:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/14330EF1B751531E7A503086E1572BCE2E37D0CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/197755D50927C6B2F7F5C79484CFBA9D38D2650D628BED80526C685DEB1DEB94/0/323830313a31353a343030303a3a2f34382d3438203d3e203237393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:fd:eb:14:d9:22:a1:b3:2d:51:d6:27:ca:a8:10:72:47:71:
         f7:42:b3:6e:a0:5b:36:ed:f1:78:79:e3:4d:c9:36:20:61:d9:
         bc:b4:d8:38:31:31:8d:40:9c:9c:28:6c:f9:93:f3:69:f9:ca:
         2e:d0:90:4d:45:81:aa:06:5a:f3:6b:2a:16:5a:f9:14:5f:af:
         07:7c:bf:51:e0:72:da:ec:e4:3c:14:48:2f:8b:a5:e5:0e:5a:
         a9:ed:b1:ea:d6:7e:cf:41:a4:2f:5f:6f:54:32:24:42:86:1b:
         14:8f:6a:58:40:24:dd:1e:45:0c:81:bb:12:f8:b7:35:4c:b2:
         a5:ac:78:67:15:60:a7:f2:fb:ee:7d:97:37:b0:b4:6f:92:44:
         10:cb:04:01:88:a2:9c:56:2d:75:9f:aa:8d:de:09:3a:cd:77:
         d9:ec:79:66:87:be:7b:ee:fe:00:ea:52:4c:92:7d:1d:4a:4a:
         0c:49:c6:22:cf:6a:b3:6f:79:2d:1d:0a:da:09:28:17:86:2b:
         4f:d5:df:84:46:7f:ea:1e:85:80:3e:a5:31:ea:c4:70:23:a6:
         6a:ff:9b:19:5e:67:6a:ab:d1:ec:48:33:74:9f:1b:c4:69:d9:
         ee:4f:f2:af:47:4a:0f:0a:a2:86:10:94:bb:3c:fc:cd:2e:0c:
         b8:d6:fc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----