Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a343a3a2f34362d3438203d3e20323632313931.roa
File:                     323830303a6237303a343a3a2f34362d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          KZ+JhVVbVn47Fe768XAXKFPPXpYTtJafRIV71cryEkk=
Subject key identifier:   3B:A5:4B:90:2E:65:F7:88:48:E3:C3:C9:14:FF:AC:4F:C4:64:83:6B
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       1A2677BE931743DB6C15A3C13614A2572EE97C73
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a343a3a2f34362d3438203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:35 +0000
ROA not before:           Tue 04 Feb 2025 19:59:35 +0000
ROA not after:            Tue 03 Feb 2026 20:04:35 +0000
asID:                     262191
IP address blocks:        2800:b70:4::/46 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:26:77:be:93:17:43:db:6c:15:a3:c1:36:14:a2:57:2e:e9:7c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:35 2025 GMT
            Not After : Feb  3 20:04:35 2026 GMT
        Subject: CN=3BA54B902E65F78848E3C3C914FFAC4FC464836B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0a:57:60:51:9c:3a:15:e1:27:6d:ca:66:f7:
                    4e:4e:bb:ea:36:73:26:be:4f:be:e5:aa:24:8f:f4:
                    6b:5c:98:7a:13:1c:a4:ff:c0:9f:c6:69:86:40:32:
                    f0:e3:ba:dd:6e:a9:63:a6:89:4d:de:2f:fa:e7:89:
                    3f:3e:dc:3e:ca:80:a4:ba:2d:c4:34:f5:21:3a:aa:
                    e9:46:48:99:d4:a2:b2:79:8d:0f:c8:2e:ed:4b:ce:
                    26:0b:9a:d7:4a:81:48:da:20:13:8c:a2:49:68:f4:
                    b8:36:e9:82:10:d9:94:86:95:13:d9:01:69:34:10:
                    4a:c3:a5:fd:61:59:ce:34:ac:49:66:1d:c9:5e:f5:
                    91:39:92:24:28:56:93:52:fe:6c:1d:58:e8:03:06:
                    a4:1c:1b:0c:41:27:d7:15:4b:ee:2c:e5:c2:5e:ba:
                    27:33:5b:af:08:85:a3:1d:1e:25:a6:ea:f7:68:a3:
                    1f:43:95:1b:ed:11:71:f4:93:e6:32:90:58:48:13:
                    60:4d:04:61:fa:8e:ee:8c:11:4d:ce:d9:63:46:74:
                    bb:e7:85:7b:f2:ea:a4:62:45:33:f3:83:bb:87:f1:
                    5a:65:1d:a0:a7:d4:30:5a:2b:b5:52:e9:91:76:58:
                    2a:34:be:0d:9c:d3:0d:a5:14:00:76:43:a5:34:18:
                    23:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A5:4B:90:2E:65:F7:88:48:E3:C3:C9:14:FF:AC:4F:C4:64:83:6B
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a343a3a2f34362d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         b7:0a:1b:6e:66:19:3c:a2:f6:1e:90:de:18:b0:e9:89:c6:b6:
         f7:71:29:90:48:f3:0f:6a:d4:42:b2:89:af:3e:9b:52:d7:b5:
         ad:6f:94:df:f9:0f:34:e4:78:bd:cf:c8:99:bd:36:4c:27:04:
         3a:60:cd:52:e9:c1:cf:d3:35:6c:c4:db:ed:2b:92:ed:c1:43:
         08:3d:89:59:7d:45:a9:47:68:45:7d:2c:15:22:f9:fc:18:85:
         bb:c2:d5:54:49:70:0c:25:7c:76:99:98:08:98:c7:be:8e:d8:
         35:b4:f6:f7:77:95:ea:b0:14:06:ff:af:f3:33:46:33:af:83:
         cb:2a:07:54:1f:f6:0d:e9:21:41:56:fa:70:cd:71:ac:09:8c:
         bb:97:c2:aa:2c:a4:30:5b:e5:9f:ae:8e:3a:56:80:fc:97:3e:
         c3:71:1c:0d:fe:20:31:5c:7c:22:e3:ec:8c:fb:7b:52:37:ac:
         fa:ec:6c:4d:d1:cb:7b:f8:4a:f0:98:ec:75:37:b2:8d:33:e6:
         36:8d:9a:b2:4e:98:7c:ea:81:94:b5:4c:44:80:5b:b2:cd:a8:
         c4:b8:03:d4:49:99:57:d9:6a:29:84:35:49:c4:ee:4f:a9:68:
         7e:8a:d2:38:d4:fc:6a:30:5b:83:a7:6b:82:5b:8c:0d:00:a4:
         03:26:1a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----