Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/323830303a39383a3a2f33322d3438203d3e203134373534.roa
File:                     323830303a39383a3a2f33322d3438203d3e203134373534.roa (raw, json)
Hash identifier:          c/M5sh87XvdoQC/sFSsteJAFYPJSRcb93mN6tVRafVY=
Subject key identifier:   51:23:76:8E:7F:C2:11:AD:86:AC:3E:01:44:06:B5:54:16:BE:99:01
Certificate issuer:       /CN=30B067F4705EDF16C63ED51B9F8946787B07F237
Certificate serial:       65783B4BAC550529E404F7D3B4F3AF709A9BF4E3
Authority key identifier: 30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/323830303a39383a3a2f33322d3438203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:55:19 +0000
ROA not before:           Tue 04 Feb 2025 18:50:19 +0000
ROA not after:            Tue 03 Feb 2026 18:55:19 +0000
asID:                     14754
IP address blocks:        2800:98::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:78:3b:4b:ac:55:05:29:e4:04:f7:d3:b4:f3:af:70:9a:9b:f4:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B067F4705EDF16C63ED51B9F8946787B07F237
        Validity
            Not Before: Feb  4 18:50:19 2025 GMT
            Not After : Feb  3 18:55:19 2026 GMT
        Subject: CN=5123768E7FC211AD86AC3E014406B55416BE9901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:76:28:b0:4a:13:ba:a0:12:d6:d4:ed:9a:
                    09:da:93:19:c8:51:85:5a:20:ae:16:2f:7f:b3:f4:
                    79:a9:af:c6:1e:db:2e:30:6c:2c:21:36:0b:e2:e6:
                    45:0b:10:72:fa:63:d0:76:3e:5d:7e:02:3b:48:c3:
                    92:5d:05:57:5b:80:97:7f:37:3f:3f:89:53:7f:ac:
                    06:ed:d8:db:1d:b6:ff:16:30:42:ff:10:f4:ad:b3:
                    9c:22:5f:ef:f9:c8:76:91:84:b2:95:2e:21:77:d2:
                    d0:fa:18:11:41:78:ef:f4:94:e7:7f:ce:bf:ba:d8:
                    3c:51:c1:75:d0:23:4c:4b:41:96:c8:83:98:63:77:
                    eb:a1:70:43:13:40:9e:e4:57:70:18:26:86:0f:ea:
                    d9:d6:9f:e3:e9:97:63:27:e6:c4:3f:a6:8f:ac:95:
                    d2:90:65:ff:4d:0e:26:98:9d:d6:fe:fa:76:38:ed:
                    9b:14:4e:e2:57:b1:4a:80:1c:54:70:16:03:00:7f:
                    31:1a:43:f2:d2:a5:e0:18:69:ea:30:f9:2d:45:17:
                    6b:21:50:9f:2f:bb:83:32:54:6e:72:e7:ee:10:55:
                    9a:53:d6:83:c7:ee:7a:52:86:c0:12:5e:15:f9:5d:
                    42:eb:fb:d4:78:80:d1:b9:31:96:89:a0:d9:15:99:
                    02:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:23:76:8E:7F:C2:11:AD:86:AC:3E:01:44:06:B5:54:16:BE:99:01
            X509v3 Authority Key Identifier:
                keyid:30:B0:67:F4:70:5E:DF:16:C6:3E:D5:1B:9F:89:46:78:7B:07:F2:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/30B067F4705EDF16C63ED51B9F8946787B07F237.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B067F4705EDF16C63ED51B9F8946787B07F237.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25464C9B8AD92A55446F1DB59CF02C7287BE2E0239736DBA2E6AAEEC851E35C8/0/323830303a39383a3a2f33322d3438203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:98::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:ef:12:31:72:a8:c8:1a:ec:91:5d:20:17:ce:41:ce:50:ad:
         f5:1e:eb:0b:d0:46:58:3f:35:79:94:a8:cb:73:1d:74:cc:1b:
         b9:87:d9:37:24:19:19:3d:4e:17:3b:3d:a8:8b:45:b6:f1:ee:
         b5:39:0b:10:81:65:f5:46:23:71:75:b9:eb:74:d7:c8:60:f9:
         e2:0e:52:72:b3:88:05:6b:6e:1b:8b:53:85:f7:08:e0:e8:1c:
         c9:28:e2:c6:2f:47:4c:4c:0a:92:95:cf:91:d8:0c:be:d9:ad:
         e1:23:df:9a:ed:00:ab:33:cb:21:1b:cf:50:1b:ae:84:3c:73:
         1d:79:92:66:27:3b:4a:cc:69:44:77:d6:11:2a:85:93:98:4c:
         d0:fd:e0:58:d3:9b:1b:29:12:7e:4b:cb:ed:87:49:68:48:6f:
         52:1d:5a:0a:8d:fc:33:76:f4:00:2c:03:d3:69:c4:91:2c:7c:
         61:cf:48:62:1b:b1:54:15:a7:95:dc:a8:ac:1f:dd:ea:dd:bb:
         75:6d:a5:e5:36:07:89:de:2b:df:8b:01:b3:69:3a:b0:ef:c6:
         2d:71:02:49:20:e4:54:72:3f:e7:bf:90:79:7b:08:31:7c:19:
         a8:38:68:3d:71:ef:5a:ba:6d:86:43:ac:b0:60:0c:de:c7:33:
         6b:c1:ee:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----