Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a383030303a3a2f33332d3438203d3e203138363738.roa
File:                     323830303a3331303a383030303a3a2f33332d3438203d3e203138363738.roa (raw, json)
Hash identifier:          Pht7TzaKW4ZfW6KIy/iGy/HnkGq8Fm3Hnh+eOQXrPEA=
Subject key identifier:   C9:A0:50:F0:3F:D9:79:32:6C:5D:A5:C8:33:94:CB:51:18:16:C8:14
Certificate issuer:       /CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
Certificate serial:       7C4A8E3C0ED6BCF9E6A596546216EB48FED2F877
Authority key identifier: CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a383030303a3a2f33332d3438203d3e203138363738.roa
Signing time:             Thu 27 Feb 2025 15:50:00 +0000
ROA not before:           Thu 27 Feb 2025 15:45:00 +0000
ROA not after:            Thu 26 Feb 2026 15:50:00 +0000
asID:                     18678
IP address blocks:        2800:310:8000::/33 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:4a:8e:3c:0e:d6:bc:f9:e6:a5:96:54:62:16:eb:48:fe:d2:f8:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CBDE88C65320D3EBD8ED2F568D896F3935E87CC5
        Validity
            Not Before: Feb 27 15:45:00 2025 GMT
            Not After : Feb 26 15:50:00 2026 GMT
        Subject: CN=C9A050F03FD979326C5DA5C83394CB511816C814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7d:73:3a:98:40:62:5b:d9:cc:d1:5a:ea:96:
                    78:ab:90:5c:08:f8:8f:1e:8c:c1:ec:35:1f:59:bd:
                    6f:ad:a1:b0:52:9e:19:c8:d7:62:4c:1e:47:0f:39:
                    77:91:63:2b:ac:e0:6f:cb:20:22:88:37:bf:8f:99:
                    1f:c3:cf:84:75:51:26:35:53:ed:07:bd:5a:ad:71:
                    2f:b6:98:31:00:51:0b:07:9b:b0:f0:92:23:a7:b2:
                    51:bd:0a:5d:37:41:66:bf:5b:2c:a4:a0:24:57:9c:
                    aa:94:33:38:9d:dc:70:79:72:a2:56:2e:cc:10:cc:
                    43:cb:21:64:dd:13:a7:29:3b:a7:47:c3:2e:eb:9c:
                    12:dd:c6:65:2c:36:03:b7:dc:ae:b3:25:7b:d3:ce:
                    17:f8:7c:00:da:e5:ae:4b:ed:4a:de:f9:d0:f2:d8:
                    55:4e:c7:ff:51:dd:33:18:26:33:b0:31:e7:f2:a9:
                    e2:54:63:e2:9a:94:18:f3:ad:99:a1:c6:86:73:eb:
                    89:0a:e1:54:47:18:de:c9:a0:6e:b9:42:cd:5e:c5:
                    d4:6b:2c:72:97:db:b0:04:7b:8f:31:4d:5c:14:5f:
                    67:12:0c:e7:d2:ce:de:39:2d:f4:71:31:ee:24:6b:
                    da:c2:92:a9:4b:28:08:cb:e5:1f:f9:53:e4:29:a0:
                    9b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A0:50:F0:3F:D9:79:32:6C:5D:A5:C8:33:94:CB:51:18:16:C8:14
            X509v3 Authority Key Identifier:
                keyid:CB:DE:88:C6:53:20:D3:EB:D8:ED:2F:56:8D:89:6F:39:35:E8:7C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CBDE88C65320D3EBD8ED2F568D896F3935E87CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1FAE84C9D2EA5B9E68263543BBD498C3F1CEF1F87F38343467F5515D602B7529/0/323830303a3331303a383030303a3a2f33332d3438203d3e203138363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:310:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:a2:02:23:ba:c1:40:a4:29:5f:b7:e3:d2:3d:80:0f:cc:
         00:ea:d1:e1:2c:da:34:7c:8d:fc:30:41:4c:c9:b9:dd:b8:73:
         7d:11:2a:84:86:28:72:7a:9f:d2:3d:6c:72:54:84:12:a5:25:
         d6:8f:ba:30:65:71:84:4a:4d:8c:ef:d9:70:f4:5e:cf:7e:dc:
         12:fa:4a:78:b5:c9:04:cb:8a:c5:3f:67:b3:2b:3d:55:9d:11:
         1c:23:a4:86:22:7b:d7:95:00:3e:f5:d9:26:cf:2b:43:1b:a2:
         57:dc:9f:6c:69:ed:bf:27:5c:1d:5c:6a:78:5a:94:dd:ad:ff:
         7e:9a:e9:b1:ee:fb:a8:a3:5d:29:cd:87:58:87:48:9b:e4:8b:
         fb:1d:b1:c0:b3:61:45:94:c9:29:8f:b5:d6:7f:78:f7:a0:00:
         ac:b9:a2:41:d6:55:82:1b:70:28:28:0c:b2:4b:fc:47:a3:44:
         92:87:41:0a:f2:0d:a1:8d:f6:a5:1d:f9:ea:bc:9c:9c:a9:30:
         ef:c9:10:c8:93:7d:70:b5:74:f4:e0:3a:e9:17:56:1b:97:43:
         89:4b:9f:bd:93:f6:99:03:5d:9f:79:5d:21:b7:92:63:10:8c:
         78:41:c6:36:33:f0:05:4a:24:f3:17:a7:9a:b9:f5:ce:cd:6c:
         f8:2a:ea:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----