Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a353a3a2f34382d3438203d3e203138373334.roa
File:                     323030313a313237383a353a3a2f34382d3438203d3e203138373334.roa (raw, json)
Hash identifier:          ICCEI9j9cGKrnGOBdlYeOxNxq7TKjFjvs1In6ydSWeU=
Subject key identifier:   E1:2C:AA:25:9F:2D:04:23:E2:2B:30:1A:10:BA:A4:8A:80:E1:0D:E6
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       13CD0035B2C20B741337717D8F1B5DD4F765F41D
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a353a3a2f34382d3438203d3e203138373334.roa
Signing time:             Tue 04 Feb 2025 18:06:46 +0000
ROA not before:           Tue 04 Feb 2025 18:01:46 +0000
ROA not after:            Tue 03 Feb 2026 18:06:46 +0000
asID:                     18734
IP address blocks:        2001:1278:5::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:cd:00:35:b2:c2:0b:74:13:37:71:7d:8f:1b:5d:d4:f7:65:f4:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Feb  4 18:01:46 2025 GMT
            Not After : Feb  3 18:06:46 2026 GMT
        Subject: CN=E12CAA259F2D0423E22B301A10BAA48A80E10DE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:44:90:6f:ec:98:f4:d1:f9:7f:aa:bc:a5:
                    e4:dd:3e:71:66:37:23:fd:5b:fc:6c:b3:92:cb:5a:
                    98:df:d3:e9:9a:ae:5a:a1:39:47:f2:d2:e1:70:2b:
                    73:76:59:cf:8f:24:aa:c1:bb:40:75:4d:06:f8:76:
                    af:e6:71:32:86:a1:98:85:9a:65:1c:a3:2d:51:29:
                    6b:7c:cd:bc:d8:f9:78:6d:2a:85:5f:af:50:cd:38:
                    71:cd:1f:18:57:2f:9a:e4:3f:99:d4:f0:64:6e:f6:
                    2b:ae:ea:54:46:cc:71:5b:da:74:bf:65:3f:21:46:
                    3f:fa:82:54:50:00:7a:31:8b:3d:30:21:a8:66:3f:
                    ea:0a:63:6c:ba:7a:33:e2:0c:64:f7:fc:6b:6c:b2:
                    35:98:70:4f:a3:68:3a:7c:92:ae:95:d3:77:92:38:
                    53:b0:5f:6b:f5:13:75:c1:57:37:91:33:1c:55:ca:
                    8a:21:93:89:81:31:01:a9:4b:9c:52:d3:7c:57:89:
                    cc:3f:3f:b9:38:0f:f8:2a:38:a1:95:7b:42:28:c3:
                    bf:f5:b6:77:50:a7:cf:3b:0b:a6:70:2d:44:04:73:
                    6b:4f:43:fc:b0:6c:12:23:6a:81:a0:03:cf:c4:a0:
                    64:7f:3b:af:3f:02:01:bd:c8:fc:7b:2c:5c:fd:a6:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:2C:AA:25:9F:2D:04:23:E2:2B:30:1A:10:BA:A4:8A:80:E1:0D:E6
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a353a3a2f34382d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:5d:1f:df:5a:ed:2f:9b:c9:99:2d:33:85:76:8e:8f:18:81:
         46:58:8f:0d:99:9c:5a:33:f2:65:80:e7:cb:a2:f5:02:7a:5f:
         9b:69:8e:13:96:c5:53:98:42:17:a4:af:d8:f4:8d:b0:da:00:
         fb:4f:bd:25:bc:89:25:43:5c:22:8c:62:4e:0b:45:6f:81:4a:
         df:eb:a8:54:78:a6:81:2a:6e:09:bd:7f:fe:44:8c:83:b9:12:
         53:16:16:d0:52:b9:17:97:73:72:79:51:05:e3:52:6b:65:6a:
         42:60:9d:e5:b7:8d:08:a3:20:c2:fa:8e:6f:d6:71:c9:b6:bd:
         b9:f9:96:29:c1:16:2e:40:11:89:48:e7:96:59:cc:b9:a9:15:
         20:45:04:26:e7:eb:3d:f0:cf:78:d1:2e:18:64:41:f8:60:48:
         08:86:db:7e:a8:6c:3b:0a:3f:e7:89:ae:56:fa:07:9e:f5:ec:
         1b:23:ff:de:d2:62:b1:ac:fa:e6:2b:83:27:6e:7a:bd:d7:78:
         65:02:43:15:8b:d4:2e:4f:b1:4c:6e:1a:c9:3d:5a:e1:59:03:
         cf:2b:42:c8:0d:b1:84:ca:62:cf:90:53:68:51:9b:dd:48:70:
         9f:b6:e2:23:cc:73:6f:6c:fb:fe:c5:43:94:6f:53:2e:7a:0f:
         e9:ce:0b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----