Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a323a3a2f34382d3438203d3e203138363738.roa
File:                     323830303a3331303a323a3a2f34382d3438203d3e203138363738.roa (raw, json)
Hash identifier:          CY6BkTnBjeGWIguK7XzzHDX9KfaV5yNGGs1KDi7xTqs=
Subject key identifier:   9E:C5:DF:E8:1E:BF:D1:8A:4D:F1:46:1A:E5:71:6B:AE:4B:25:BB:CC
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       0E92B701D05F2E69FAD3CE8EBF67FF5A96602DB2
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a323a3a2f34382d3438203d3e203138363738.roa
Signing time:             Thu 27 Feb 2025 16:15:00 +0000
ROA not before:           Thu 27 Feb 2025 16:10:00 +0000
ROA not after:            Thu 26 Feb 2026 16:15:00 +0000
asID:                     18678
IP address blocks:        2800:310:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:92:b7:01:d0:5f:2e:69:fa:d3:ce:8e:bf:67:ff:5a:96:60:2d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 27 16:10:00 2025 GMT
            Not After : Feb 26 16:15:00 2026 GMT
        Subject: CN=9EC5DFE81EBFD18A4DF1461AE5716BAE4B25BBCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d5:12:7f:5b:81:c8:18:d7:84:48:0c:df:86:
                    3e:21:58:ba:ce:a5:d9:ea:83:25:36:06:1d:a2:6c:
                    dd:a3:64:d0:a7:04:26:d5:49:87:59:fa:34:50:be:
                    fa:0d:1e:e9:c8:44:0a:28:4f:3e:49:3e:8b:25:4d:
                    83:9d:38:63:98:12:49:b6:23:01:14:0c:d2:0b:e7:
                    c5:59:d0:3e:42:eb:a8:61:bb:fd:29:da:82:85:3d:
                    39:b2:5d:0a:0d:de:71:84:67:83:be:2c:65:f6:79:
                    16:8c:52:e1:3a:be:2a:2b:a1:65:dd:92:cd:40:3a:
                    0f:ed:50:53:fa:6c:2f:7b:98:b6:90:06:54:23:04:
                    11:17:21:cd:2c:82:14:86:f8:53:a7:33:84:0c:f1:
                    70:2f:ab:cc:e0:7e:68:0c:5e:5e:91:a4:bc:15:5c:
                    1f:45:8a:de:43:74:8c:95:25:10:6f:b7:c4:c7:d7:
                    3c:21:a8:c9:c6:ad:b6:07:35:68:90:60:65:2b:34:
                    ee:9c:b4:4b:c2:3a:ff:6b:31:f8:26:8f:82:63:c4:
                    b8:a4:cf:a4:59:a3:64:52:b2:f9:39:77:10:81:3d:
                    f2:c1:c1:c2:76:50:ea:98:b9:3e:d0:43:e5:21:45:
                    bd:ea:07:42:87:68:d0:91:d9:c5:36:95:a9:43:a9:
                    a7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:DF:E8:1E:BF:D1:8A:4D:F1:46:1A:E5:71:6B:AE:4B:25:BB:CC
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a323a3a2f34382d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:0f:b3:60:25:ba:6a:a3:0c:8c:bf:dd:b6:8d:c9:b3:b8:b4:
         22:f6:b9:fe:68:74:d0:b3:11:7c:b6:82:cb:65:96:70:8d:bd:
         50:fb:f8:41:d5:47:9a:45:70:3a:ef:44:b9:29:6f:83:ea:cb:
         3e:46:18:6d:1a:40:6e:01:8c:e5:47:02:52:8d:24:63:76:fa:
         ea:58:12:c0:63:63:28:28:86:a1:25:e2:67:6c:8c:f9:f8:47:
         f5:eb:17:a0:a3:8f:ff:a5:ca:2e:4f:24:52:93:80:d4:e8:be:
         f8:4b:0d:a0:83:39:86:0d:90:ca:16:7c:c0:22:97:7a:93:4f:
         f1:85:3c:d7:4b:58:f1:85:30:fd:27:78:b3:03:e5:69:ee:86:
         87:60:f3:b8:03:31:b7:a6:19:f2:c2:28:ec:a4:3d:d5:a4:11:
         7a:1d:f1:9b:55:7f:fa:ca:42:31:c9:c0:cb:57:31:21:94:1a:
         b5:10:77:87:6f:98:f2:3f:65:a3:6f:d2:09:53:8a:32:e6:59:
         ce:f7:fc:24:f9:81:e9:73:92:ee:d6:96:b2:3e:d2:b4:37:dc:
         41:17:c5:2c:fd:11:a1:be:49:2d:f0:1b:76:41:8f:7f:cc:86:
         93:bb:20:f2:3f:5a:70:d6:21:9d:f9:48:5c:b9:a7:5e:33:c3:
         95:18:2b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----