Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a353a3a2f34382d3438203d3e20323732313533.roa
File:                     323830313a3138393a353a3a2f34382d3438203d3e20323732313533.roa (raw, json)
Hash identifier:          +9KpMaOWesUM8CLnuYwXQti+ahS9Y2KEQDeNgNb6MiU=
Subject key identifier:   1C:F4:64:F5:91:FD:FB:67:18:53:1F:23:B2:1B:53:65:3E:72:0B:98
Certificate issuer:       /CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
Certificate serial:       483DB75204C1FD077EFB1029EF3C2D99B1D515A0
Authority key identifier: BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a353a3a2f34382d3438203d3e20323732313533.roa
Signing time:             Tue 04 Feb 2025 18:49:46 +0000
ROA not before:           Tue 04 Feb 2025 18:44:46 +0000
ROA not after:            Tue 03 Feb 2026 18:49:46 +0000
asID:                     272153
IP address blocks:        2801:189:5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3d:b7:52:04:c1:fd:07:7e:fb:10:29:ef:3c:2d:99:b1:d5:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDFE2F793030C65A8091475B67EF5A8CC19F1953
        Validity
            Not Before: Feb  4 18:44:46 2025 GMT
            Not After : Feb  3 18:49:46 2026 GMT
        Subject: CN=1CF464F591FDFB6718531F23B21B53653E720B98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:7f:3c:08:81:1e:78:72:d3:af:8f:41:49:
                    9c:cf:46:f1:42:5a:f3:31:f7:9c:30:24:d7:3b:58:
                    1e:a4:8b:68:d4:10:24:62:d4:b3:d6:18:1b:13:64:
                    bb:c5:bf:3d:56:cd:d2:3f:3d:cc:90:95:ec:c3:5f:
                    67:f5:af:0a:cc:c1:ed:31:e0:76:db:1d:9e:c8:2f:
                    30:e2:c6:61:c3:d3:4b:74:8c:4f:65:f8:66:c3:16:
                    3f:19:fa:7b:bb:a0:cf:31:1a:45:d8:d3:ad:f7:1e:
                    5f:91:4d:a7:e8:96:b7:81:02:45:8c:32:27:68:6c:
                    b8:dd:4a:47:f2:82:40:6e:52:92:ad:aa:1e:80:bd:
                    a0:a7:9c:30:be:8a:e4:71:21:1f:f4:83:e1:39:dc:
                    49:7d:7f:20:36:2e:c3:b7:0b:a5:e6:38:ff:7c:a6:
                    65:76:8b:80:f3:43:35:0f:51:be:41:90:77:b7:43:
                    c1:b2:eb:42:50:2f:01:d4:61:2a:fd:03:b4:84:a3:
                    9c:03:8b:ce:81:ec:0b:34:88:4b:38:a8:bf:ad:f4:
                    89:e9:4e:18:08:b4:64:ef:fd:5a:86:1c:e6:f1:c0:
                    5f:f0:cb:67:19:f8:c1:00:cd:e0:e2:8c:7d:4a:10:
                    b4:41:59:29:3c:96:db:94:47:11:97:f8:1d:00:ae:
                    c2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F4:64:F5:91:FD:FB:67:18:53:1F:23:B2:1B:53:65:3E:72:0B:98
            X509v3 Authority Key Identifier:
                keyid:BD:FE:2F:79:30:30:C6:5A:80:91:47:5B:67:EF:5A:8C:C1:9F:19:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BDFE2F793030C65A8091475B67EF5A8CC19F1953.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/493E05FBD6A91A2B3C82526B6436CA955938E08DE56045DC4BB6FC7D11AB872A/0/323830313a3138393a353a3a2f34382d3438203d3e20323732313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:189:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:b5:5c:d2:0e:14:02:3a:a1:cc:3f:d5:a8:a9:80:c1:77:
         35:bd:89:8e:28:d7:9a:e0:5e:7b:b9:e1:94:41:e3:a4:75:43:
         5c:3a:ee:b0:2c:1b:48:36:6b:ea:26:70:ec:8e:fa:dc:ea:73:
         a4:82:a0:45:8b:9a:fb:f9:9a:37:dd:86:65:33:6d:22:52:bb:
         76:64:17:84:6a:25:05:df:4e:d0:1a:80:f3:2c:ad:6e:88:03:
         fe:b0:a1:09:56:95:35:43:20:fa:da:f0:ba:1f:23:14:81:63:
         00:ea:3c:6c:55:90:04:63:89:bd:97:c1:8b:77:6d:82:2c:1f:
         e3:6d:41:fe:41:6f:40:39:d8:71:a2:36:b1:c5:5a:28:13:4f:
         0e:7b:d7:a0:e8:f2:8e:0d:d2:80:35:63:57:d1:bd:92:b2:8b:
         50:45:6b:9d:c0:e2:8f:0f:2d:51:34:91:9f:8d:d2:d8:17:4a:
         d1:0a:6e:0c:84:0d:6e:c5:ea:2d:02:b8:bd:a4:15:65:9f:a6:
         d8:ae:37:e5:3a:5f:25:d0:8c:f7:ad:27:71:6f:7a:1c:d3:f3:
         d2:2c:d8:09:0f:64:90:9a:57:47:68:be:93:ab:28:47:62:95:
         19:e2:40:2e:2d:81:ee:91:87:34:66:99:01:57:bc:da:d0:80:
         fd:17:93:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----