Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4C4DC0B9A305629B25EFCE7D6A6899E04C124D8A773283016FE9242919EE00C6/0/323830313a31363a633830303a3a2f34382d3438203d3e20323632353839.roa
File:                     323830313a31363a633830303a3a2f34382d3438203d3e20323632353839.roa (raw, json)
Hash identifier:          Klg8lA5QYsv4Fz+/7/Jz/d5ZEj9lcN8p9w0qRVwx8ls=
Subject key identifier:   DF:3E:2C:97:AE:0B:46:50:28:B6:EB:A5:9A:20:2F:6A:6F:80:82:54
Certificate issuer:       /CN=4A71F051F94009816889CBD49D890004C1D85E37
Certificate serial:       57973988097CFF56C0776E662AE3314CA6305AC0
Authority key identifier: 4A:71:F0:51:F9:40:09:81:68:89:CB:D4:9D:89:00:04:C1:D8:5E:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A71F051F94009816889CBD49D890004C1D85E37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4C4DC0B9A305629B25EFCE7D6A6899E04C124D8A773283016FE9242919EE00C6/0/323830313a31363a633830303a3a2f34382d3438203d3e20323632353839.roa
Signing time:             Wed 19 Feb 2025 17:10:16 +0000
ROA not before:           Wed 19 Feb 2025 17:05:16 +0000
ROA not after:            Wed 18 Feb 2026 17:10:16 +0000
asID:                     262589
IP address blocks:        2801:16:c800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:97:39:88:09:7c:ff:56:c0:77:6e:66:2a:e3:31:4c:a6:30:5a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A71F051F94009816889CBD49D890004C1D85E37
        Validity
            Not Before: Feb 19 17:05:16 2025 GMT
            Not After : Feb 18 17:10:16 2026 GMT
        Subject: CN=DF3E2C97AE0B465028B6EBA59A202F6A6F808254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:4a:a3:d4:93:b7:51:9c:09:61:c6:e9:66:
                    bb:c9:86:1a:46:32:61:ac:6a:86:96:ee:30:29:ec:
                    77:41:78:20:15:b2:f4:c8:b9:e4:91:5c:d8:7c:c9:
                    a9:3b:11:e6:b9:aa:48:2e:b8:86:cd:c3:1c:95:73:
                    0c:77:88:b5:08:ca:ed:cb:76:c2:2c:65:3d:e9:44:
                    27:e2:f7:08:a6:39:62:ac:ae:fc:43:a0:bc:f8:6a:
                    58:d1:9d:13:1d:a3:37:ef:c1:06:02:bd:b4:09:80:
                    13:34:6e:6b:08:e1:40:77:a5:ec:1b:7b:be:a8:bd:
                    0b:3c:19:a7:c3:b2:90:8c:33:46:76:83:b6:29:78:
                    69:79:84:99:ed:26:0a:d9:64:82:d9:0b:8b:4a:58:
                    41:8d:1e:de:b1:d7:b4:e0:de:13:40:19:55:16:5d:
                    91:16:ec:0f:57:cd:54:a9:cf:48:ad:03:07:22:42:
                    72:9b:cd:73:6c:26:ae:0e:c4:d8:a3:ac:4b:2d:ed:
                    3f:3b:30:f0:13:51:68:17:f9:d9:5e:cf:ff:02:68:
                    ff:af:6e:9e:f4:d8:4a:e6:c6:37:94:d8:c6:c8:f8:
                    01:7d:9b:e6:fa:da:76:b0:4e:d9:31:5e:04:d3:a1:
                    c9:98:a5:2f:fd:3a:4a:3d:e0:84:39:d7:08:f4:a7:
                    a9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:3E:2C:97:AE:0B:46:50:28:B6:EB:A5:9A:20:2F:6A:6F:80:82:54
            X509v3 Authority Key Identifier:
                keyid:4A:71:F0:51:F9:40:09:81:68:89:CB:D4:9D:89:00:04:C1:D8:5E:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4C4DC0B9A305629B25EFCE7D6A6899E04C124D8A773283016FE9242919EE00C6/0/4A71F051F94009816889CBD49D890004C1D85E37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4A71F051F94009816889CBD49D890004C1D85E37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4C4DC0B9A305629B25EFCE7D6A6899E04C124D8A773283016FE9242919EE00C6/0/323830313a31363a633830303a3a2f34382d3438203d3e20323632353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:61:dd:d9:d5:dd:8a:30:d9:5b:e3:63:f2:2c:7d:4a:cd:39:
         a5:b8:0e:fa:a0:7f:1d:c9:b0:2e:c5:26:ab:b6:c8:01:c4:1d:
         bf:e0:0c:4f:5e:63:6a:60:22:f2:b1:77:de:4a:76:20:28:75:
         b4:ea:b9:4c:90:f2:bc:29:24:e3:e6:45:e9:ec:8f:e5:79:2b:
         0b:e8:e6:26:bb:9a:02:b3:2c:d5:8c:59:e5:bf:f6:c1:8e:c3:
         7d:bc:f4:64:8e:f3:b4:46:59:58:65:95:12:a3:ed:f2:a1:7c:
         ae:07:36:05:a8:1e:70:d9:e9:90:5a:60:eb:9c:36:1f:67:05:
         c5:88:db:fe:f2:61:56:70:80:37:7d:98:9b:cd:ef:42:7b:d1:
         59:28:0f:f6:a7:ec:83:6e:54:d1:4d:6d:e3:e2:aa:ce:9d:50:
         97:d5:94:e2:cf:c4:ab:09:c3:21:aa:0a:15:61:5f:90:3f:08:
         89:df:79:ce:dc:65:87:39:00:d7:5a:5e:b8:b8:65:c6:99:0b:
         de:ef:e7:17:2b:95:34:25:ff:e2:df:64:31:5e:91:36:c8:0f:
         a8:3b:b5:d6:b7:0d:3e:5b:e8:66:43:21:70:e6:83:54:29:59:
         f2:8c:99:62:18:09:51:b0:28:31:f0:4a:32:f2:d2:0b:04:7f:
         33:bd:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----