Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/323830313a303a3463303a3a2f34382d3438203d3e203237383137.roa
File:                     323830313a303a3463303a3a2f34382d3438203d3e203237383137.roa (raw, json)
Hash identifier:          50FsExOrp9iy34pOpQxfU7Uzv7XRnTMU8oPO4f3M8Zg=
Subject key identifier:   FD:8C:9D:6E:04:D8:89:40:E2:83:02:B8:A0:EB:3C:D1:AC:EE:C0:A1
Certificate issuer:       /CN=08A26042015ED7345A25228336BD6FF1618453BC
Certificate serial:       19BB98224AC077C2918EB57CFB1993F82DC8D3F7
Authority key identifier: 08:A2:60:42:01:5E:D7:34:5A:25:22:83:36:BD:6F:F1:61:84:53:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/323830313a303a3463303a3a2f34382d3438203d3e203237383137.roa
Signing time:             Tue 04 Feb 2025 20:03:16 +0000
ROA not before:           Tue 04 Feb 2025 19:58:16 +0000
ROA not after:            Tue 03 Feb 2026 20:03:16 +0000
asID:                     27817
IP address blocks:        2801:0:4c0::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:bb:98:22:4a:c0:77:c2:91:8e:b5:7c:fb:19:93:f8:2d:c8:d3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08A26042015ED7345A25228336BD6FF1618453BC
        Validity
            Not Before: Feb  4 19:58:16 2025 GMT
            Not After : Feb  3 20:03:16 2026 GMT
        Subject: CN=FD8C9D6E04D88940E28302B8A0EB3CD1ACEEC0A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:ef:53:67:56:bc:22:50:27:8f:98:3d:0f:
                    cc:e7:eb:25:96:37:08:4f:e2:25:fc:20:d4:ac:ec:
                    6b:63:83:bf:65:77:5c:48:1c:b1:c4:48:2f:7b:96:
                    03:79:b7:bd:51:ea:19:2c:ac:1c:00:cb:0e:2c:e2:
                    74:24:73:b1:b8:9b:d2:d5:65:3d:6d:1b:f9:30:8e:
                    86:f8:78:44:1a:dc:23:29:ce:98:1c:05:98:4e:47:
                    d3:c8:44:3b:38:16:d1:0e:7e:4b:60:6f:fa:b4:1b:
                    18:f4:23:bb:8c:07:6b:1b:1c:ed:b3:44:22:3c:f3:
                    69:d6:15:29:c7:24:90:f7:e9:19:77:cb:4a:cd:7b:
                    c7:75:55:c9:49:0b:3d:bc:25:af:39:37:af:f2:0c:
                    2a:29:aa:d1:39:7a:3b:3b:25:b6:3c:52:8e:e4:72:
                    14:87:c5:76:35:7f:94:5d:60:18:7d:8f:8c:78:b4:
                    d0:f7:a0:62:90:37:d5:41:59:b2:e4:1d:ba:cd:2f:
                    57:f6:79:9f:d8:6e:63:c1:ab:22:45:01:08:5e:70:
                    40:5d:4a:fa:6e:e2:b6:d5:40:8c:f7:1b:42:6b:12:
                    62:4b:cd:5c:32:fb:ec:4b:c4:f6:de:5e:55:1d:5c:
                    92:d3:f4:2d:7c:02:3d:6e:9e:f0:11:8f:67:67:54:
                    28:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8C:9D:6E:04:D8:89:40:E2:83:02:B8:A0:EB:3C:D1:AC:EE:C0:A1
            X509v3 Authority Key Identifier:
                keyid:08:A2:60:42:01:5E:D7:34:5A:25:22:83:36:BD:6F:F1:61:84:53:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/08A26042015ED7345A25228336BD6FF1618453BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08A26042015ED7345A25228336BD6FF1618453BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3A81FD1288C33C31490974399989ABBCE82FC7756A0279DF12F95894F5F77902/0/323830313a303a3463303a3a2f34382d3438203d3e203237383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:cb:bb:c7:65:38:aa:77:78:a4:61:e4:ea:ce:8d:e7:dd:0c:
         7f:73:35:12:97:ad:72:14:bd:65:76:d3:ba:f8:42:47:28:2e:
         58:3b:d4:0b:b7:1c:0b:ff:a2:40:b3:e5:38:d5:b3:82:12:86:
         e0:96:5b:5b:f4:66:3c:ce:67:5b:1e:6f:32:b4:b4:4e:f5:06:
         26:3b:ee:b6:9d:b7:7e:79:c9:f0:20:a4:70:95:c8:f4:04:09:
         16:21:ea:d4:9f:c4:46:98:27:13:b4:fa:99:a8:b0:10:64:b5:
         2f:52:5f:33:fa:4d:b9:37:0e:c7:59:86:51:61:fb:35:5c:16:
         df:4b:ff:4f:5e:4b:27:9b:11:ea:2a:19:54:a4:f2:35:b1:9e:
         97:81:5e:71:83:35:1b:e3:e4:03:7d:d8:3b:66:60:98:4d:8e:
         a2:19:cc:d8:af:b0:1c:e4:46:cb:2b:f9:c0:a4:5d:61:a9:38:
         21:b5:5c:c7:dc:89:81:a7:b8:48:cc:bd:18:c4:3d:97:0c:2c:
         04:02:8f:42:23:1c:99:6b:5f:25:45:fb:97:13:fb:05:9a:72:
         9c:3e:b1:70:ba:7f:b9:05:51:d0:0c:c7:ec:c4:d1:45:5e:84:
         0a:18:7c:e9:11:bd:73:6f:b7:6e:52:ec:d1:b9:03:9c:8a:97:
         a1:50:db:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----