Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/397525C21B1731E064E2D30FA1FA9FB6254D3E938AF519E21E17FE649E77C6CD/0/323830313a31663a323830303a3a2f34382d3438203d3e203532343638.roa
File:                     323830313a31663a323830303a3a2f34382d3438203d3e203532343638.roa (raw, json)
Hash identifier:          kF50zNVAkzfmFth8fV27W+05XSqqNNrVlJojwt6fpw0=
Subject key identifier:   6A:DB:06:46:DE:AC:D2:00:17:74:D8:9F:7F:CB:3B:E1:4A:68:09:42
Certificate issuer:       /CN=07E63C866CF5AD3474792D028F7B00BEF4184E8D
Certificate serial:       1196C68E20A1718A843DEFF8F148EB3CBEEEB6FB
Authority key identifier: 07:E6:3C:86:6C:F5:AD:34:74:79:2D:02:8F:7B:00:BE:F4:18:4E:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07E63C866CF5AD3474792D028F7B00BEF4184E8D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/397525C21B1731E064E2D30FA1FA9FB6254D3E938AF519E21E17FE649E77C6CD/0/323830313a31663a323830303a3a2f34382d3438203d3e203532343638.roa
Signing time:             Mon 24 Mar 2025 17:12:50 +0000
ROA not before:           Mon 24 Mar 2025 17:07:50 +0000
ROA not after:            Mon 23 Mar 2026 17:12:50 +0000
asID:                     52468
IP address blocks:        2801:1f:2800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:96:c6:8e:20:a1:71:8a:84:3d:ef:f8:f1:48:eb:3c:be:ee:b6:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07E63C866CF5AD3474792D028F7B00BEF4184E8D
        Validity
            Not Before: Mar 24 17:07:50 2025 GMT
            Not After : Mar 23 17:12:50 2026 GMT
        Subject: CN=6ADB0646DEACD2001774D89F7FCB3BE14A680942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:68:2a:31:b7:e0:cc:fc:b8:26:4f:e1:93:da:
                    88:4b:87:36:c7:38:3a:91:55:e0:69:2b:94:44:37:
                    66:03:0b:a9:11:9c:f7:c0:ec:d4:d6:ab:d2:6d:58:
                    71:84:14:96:c6:ee:75:88:35:f5:86:27:5a:c9:e3:
                    94:5f:cc:62:e5:a1:1d:44:86:fd:d0:86:4f:b4:98:
                    bb:d7:93:9d:63:48:46:c5:76:14:ba:4d:e5:87:09:
                    e1:29:39:a8:d7:ba:1f:31:cd:32:da:fd:cd:1c:3d:
                    8c:55:f1:9b:c3:ac:80:b5:3f:32:d3:83:53:b7:24:
                    14:82:35:f9:1f:38:6c:66:1c:cd:8d:85:0c:f5:5d:
                    d7:01:5b:1f:5d:8d:86:4a:6e:e6:32:c9:cf:b0:3c:
                    00:5c:34:a8:a8:0f:51:85:cc:1f:56:6a:85:2e:ed:
                    c5:af:c7:ac:70:7d:28:de:2f:c4:4f:cc:e1:ad:29:
                    61:6b:b6:ea:7a:b2:55:b7:35:81:c7:43:f8:0b:b7:
                    ab:58:2b:ba:a7:61:85:c5:00:ed:e2:7d:d7:ec:ba:
                    f8:d3:d8:46:25:71:69:ac:03:37:0d:de:3f:70:73:
                    01:d8:38:85:fc:a3:a5:2e:9b:21:93:af:be:23:97:
                    4e:74:3f:04:c8:35:1a:6f:27:23:32:33:a8:b9:b6:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DB:06:46:DE:AC:D2:00:17:74:D8:9F:7F:CB:3B:E1:4A:68:09:42
            X509v3 Authority Key Identifier:
                keyid:07:E6:3C:86:6C:F5:AD:34:74:79:2D:02:8F:7B:00:BE:F4:18:4E:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/397525C21B1731E064E2D30FA1FA9FB6254D3E938AF519E21E17FE649E77C6CD/0/07E63C866CF5AD3474792D028F7B00BEF4184E8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/07E63C866CF5AD3474792D028F7B00BEF4184E8D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/397525C21B1731E064E2D30FA1FA9FB6254D3E938AF519E21E17FE649E77C6CD/0/323830313a31663a323830303a3a2f34382d3438203d3e203532343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:3c:ec:64:9e:0c:7a:df:3c:5e:23:35:aa:e9:f2:1a:25:dd:
         48:a6:f3:57:86:ef:27:9d:bb:04:49:be:9a:1a:3e:dc:db:52:
         1c:85:a8:5e:ed:13:ad:fa:9a:df:64:20:d0:0b:ea:c9:2f:dc:
         1b:26:c1:77:3f:93:bd:18:50:05:da:8e:a8:11:cf:4d:b1:6a:
         e0:c0:bc:60:31:0b:23:2a:0a:72:eb:7e:6d:81:5b:62:5c:f5:
         05:be:a9:78:3a:22:ee:92:f1:f7:de:6f:20:3c:3a:fc:0c:21:
         b4:03:0e:fa:5e:87:ca:84:16:94:49:58:ad:c4:87:26:9b:00:
         09:4b:26:b8:d0:e6:1f:69:f4:9e:ba:51:de:1b:33:9f:89:26:
         2c:fb:80:c6:45:02:27:eb:8f:11:c0:03:4d:d6:6f:24:82:e9:
         7d:fd:d9:d4:b7:40:b3:81:52:28:b6:93:81:6e:f0:77:0d:c3:
         2f:8e:30:e4:92:b4:e8:a8:d1:db:81:76:75:fb:b5:d0:46:19:
         2d:25:e5:89:0c:e4:3b:72:2f:c5:7b:a4:6f:3a:23:1a:ac:0a:
         e9:0c:e9:e2:fd:c1:6d:f3:cb:ac:39:a9:a3:3a:9c:de:00:2c:
         c3:2c:06:ca:68:9e:fc:06:14:73:02:67:d8:5c:79:7b:7b:d6:
         51:21:05:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----