Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/323830313a3131613a3a2f34302d3430203d3e20323639393534.roa
File:                     323830313a3131613a3a2f34302d3430203d3e20323639393534.roa (raw, json)
Hash identifier:          ov/YcoE+Pl5ZeOViK/d1j1p6oPx6u+Abytaiu13HuG0=
Subject key identifier:   21:C5:DD:81:3F:F2:93:DF:81:1E:79:47:E4:C0:2A:96:78:65:67:0B
Certificate issuer:       /CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B
Certificate serial:       352D21C67885F4D17636C5F0851E228DE6960311
Authority key identifier: A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/323830313a3131613a3a2f34302d3430203d3e20323639393534.roa
Signing time:             Fri 07 Mar 2025 14:40:01 +0000
ROA not before:           Fri 07 Mar 2025 14:35:01 +0000
ROA not after:            Fri 06 Mar 2026 14:40:01 +0000
asID:                     269954
IP address blocks:        2801:11a::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2d:21:c6:78:85:f4:d1:76:36:c5:f0:85:1e:22:8d:e6:96:03:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B
        Validity
            Not Before: Mar  7 14:35:01 2025 GMT
            Not After : Mar  6 14:40:01 2026 GMT
        Subject: CN=21C5DD813FF293DF811E7947E4C02A967865670B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:44:fe:f3:89:78:df:18:5e:a9:ba:d9:6e:
                    0d:ac:ca:dd:59:5a:c9:f7:22:fc:17:30:5d:6e:22:
                    54:f9:5b:4d:e4:89:25:12:a1:0c:ba:c4:ba:4e:8e:
                    c2:d4:90:46:26:37:6c:2c:38:ac:23:8f:87:f3:a2:
                    f5:c2:69:c0:36:95:1d:d0:9e:c9:35:ed:19:00:ca:
                    5a:15:82:d3:cd:bb:3b:af:c2:f3:46:15:e5:91:a6:
                    8f:16:fe:50:d4:c3:99:ad:01:26:2f:ee:7d:dd:44:
                    8a:37:2e:7f:74:84:01:e9:1c:5f:a9:86:d2:bf:13:
                    d5:94:97:09:82:b4:10:82:0d:f6:00:52:0a:6e:d1:
                    3c:8e:2b:ab:9e:e6:03:92:93:50:a9:5d:d5:5b:8d:
                    fb:71:db:c9:56:1a:a8:1a:01:7c:10:7c:d6:19:5b:
                    cf:87:7c:f9:b5:dc:9a:bd:09:f8:f6:82:35:6b:ad:
                    2f:01:0b:71:da:c2:0d:80:e3:a1:88:be:1c:46:d6:
                    f5:6c:27:f1:b4:62:41:1c:e4:b9:12:0f:f1:96:9d:
                    68:6e:2d:14:b4:1a:fd:bc:00:dd:e2:ed:64:b2:32:
                    73:71:1f:af:e6:cb:f4:f6:06:e1:ac:40:b3:7b:1c:
                    39:ea:66:5e:5c:84:93:72:80:64:41:03:47:00:94:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C5:DD:81:3F:F2:93:DF:81:1E:79:47:E4:C0:2A:96:78:65:67:0B
            X509v3 Authority Key Identifier:
                keyid:A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/323830313a3131613a3a2f34302d3430203d3e20323639393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11a::/40

    Signature Algorithm: sha256WithRSAEncryption
         ba:3a:6c:4e:59:a4:ed:c2:a4:84:6c:92:27:77:68:52:bd:af:
         31:64:e7:2a:7c:ce:6b:35:94:b6:57:89:0b:36:93:e1:65:9a:
         49:06:c1:1f:d3:84:88:ce:f1:1d:a0:72:ff:08:1d:46:a7:29:
         cf:d8:41:76:f6:ab:ee:51:5b:3d:d7:26:2e:60:95:5d:74:85:
         e1:2e:15:e0:a1:ae:1a:76:63:ac:66:60:91:26:bc:5f:15:fb:
         c9:24:31:5d:c6:5a:7d:1c:44:f1:1d:b8:04:70:e5:c0:63:7b:
         db:3e:d2:01:1e:f3:23:f3:b8:7f:22:81:16:43:12:89:c4:d8:
         ef:de:e1:78:9b:55:7c:09:e3:b0:84:fc:10:ca:af:5a:15:ff:
         16:b1:d1:ea:1d:c0:10:d7:fb:9b:da:6b:5e:8c:32:96:8b:41:
         9c:91:7c:07:31:a6:aa:e3:8b:ac:1b:ba:fe:5e:fe:9e:ac:a3:
         71:13:b9:b9:31:cb:d8:25:bb:6d:c6:52:80:ce:ab:6a:79:17:
         6f:73:a8:b2:4a:c8:d4:09:f9:6a:25:b1:3a:73:b5:86:18:7c:
         cd:cb:13:d8:13:01:58:4a:6d:77:ca:33:73:63:d0:36:61:44:
         58:8a:14:65:ba:2c:d4:91:44:e9:4e:a8:08:98:8e:94:b9:4a:
         59:ee:d1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----