Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a633a3a2f34382d3438203d3e20323632313931.roa
File:                     323830303a6237303a633a3a2f34382d3438203d3e20323632313931.roa (raw, json)
Hash identifier:          H+MHF210v2JLnt4H7QmKJdEZW9gN4/6dELU6K0s6q74=
Subject key identifier:   84:EA:E2:B9:04:EA:8C:85:4B:7B:83:64:FC:63:41:2F:A1:3B:B5:9C
Certificate issuer:       /CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
Certificate serial:       0F5ADD3BA0AB9F523A013F13E8C95C20C95FB42F
Authority key identifier: 85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a633a3a2f34382d3438203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 20:04:39 +0000
ROA not before:           Tue 04 Feb 2025 19:59:39 +0000
ROA not after:            Tue 03 Feb 2026 20:04:39 +0000
asID:                     262191
IP address blocks:        2800:b70:c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5a:dd:3b:a0:ab:9f:52:3a:01:3f:13:e8:c9:5c:20:c9:5f:b4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD
        Validity
            Not Before: Feb  4 19:59:39 2025 GMT
            Not After : Feb  3 20:04:39 2026 GMT
        Subject: CN=84EAE2B904EA8C854B7B8364FC63412FA13BB59C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9f:37:9c:4e:e7:93:39:e5:a3:9c:28:ab:2e:
                    3f:2d:0c:36:05:00:2e:39:21:a4:4a:b8:17:67:65:
                    c0:23:20:ad:cb:c5:5b:1a:a8:63:4a:2b:cc:a3:e8:
                    b9:21:63:93:46:28:3b:92:c3:66:84:3b:79:32:35:
                    ce:5f:1f:e2:7d:11:2f:39:4e:9f:52:e0:eb:c8:9e:
                    c1:80:7f:ea:7e:13:8a:1d:76:1f:8d:8a:3e:6c:12:
                    d0:34:77:e4:5d:37:02:ec:b5:61:e6:77:a2:ae:c2:
                    96:5d:db:7f:c7:38:2f:ea:18:b8:9a:fe:09:43:24:
                    e6:bc:96:d5:a3:93:2e:f9:78:19:f6:a7:eb:3c:15:
                    55:bc:b2:66:e3:b8:a6:94:0e:5c:01:8d:a7:65:1c:
                    28:9c:78:1e:0b:c4:77:ae:77:36:39:4f:7f:9d:c3:
                    55:77:4f:12:53:79:f5:d9:11:d0:4b:25:78:d6:38:
                    19:c5:9a:a2:40:b3:2f:a3:23:e5:6a:60:ea:5d:77:
                    3f:53:33:6a:91:0b:10:49:de:21:aa:5c:9d:13:6e:
                    89:db:e3:d6:6d:4a:61:13:83:14:23:01:fc:93:52:
                    62:4b:4c:dd:2b:02:73:86:eb:86:74:67:9e:12:ad:
                    b4:87:ab:ef:aa:87:0c:a9:fd:9f:1f:4c:d9:bf:e8:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EA:E2:B9:04:EA:8C:85:4B:7B:83:64:FC:63:41:2F:A1:3B:B5:9C
            X509v3 Authority Key Identifier:
                keyid:85:D9:E7:D9:BE:EF:ED:0B:9E:18:8D:B7:E8:CC:3B:64:89:06:6D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/85D9E7D9BEEFED0B9E188DB7E8CC3B6489066DCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1AD7261C7FD1E4EFECEBE6F362FCD0C75697E06B41474BEA8CABC706F79ECF3D/0/323830303a6237303a633a3a2f34382d3438203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:65:c6:29:52:ac:06:35:f4:e5:61:a5:43:f3:f4:9f:c8:a6:
         f6:3d:be:46:19:78:89:41:b0:f3:61:49:a4:5a:25:ea:e2:81:
         67:d3:4f:0d:b5:35:9c:6d:20:b2:9c:92:c7:f7:18:c9:57:d8:
         73:c0:77:44:02:75:83:2f:00:6f:04:6e:9f:1e:2f:6c:99:33:
         af:c8:91:8b:93:a9:7e:cc:2a:58:5a:49:b8:b0:ca:25:c1:cf:
         6d:12:0a:c6:47:a6:8f:76:8b:97:35:8f:bb:fa:64:ae:eb:22:
         8c:98:6b:94:d4:f6:a7:21:bf:3e:1b:ab:0d:63:55:c1:26:26:
         76:a5:76:b6:30:45:43:5c:70:d2:52:bb:bb:a3:8a:13:c5:5c:
         8e:d3:bf:6c:80:f6:9a:d0:47:f4:b4:fa:82:d7:30:fd:2a:f8:
         a3:cb:af:92:a0:08:a8:4d:1f:e3:7b:56:5a:16:e0:bb:23:9c:
         e2:ff:61:40:77:0e:9a:fe:e9:74:c6:f0:fa:7f:33:13:50:7a:
         5a:d4:a0:a1:6a:e3:fc:cd:1e:02:9e:63:99:3c:09:bb:14:77:
         e8:29:21:9a:91:ac:35:23:7c:a2:1c:6e:9a:6d:7b:89:14:8a:
         2c:6f:65:67:10:4a:d0:e8:de:3a:27:c0:0d:76:40:e2:1b:d1:
         83:d9:01:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----