Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/323830313a63343a31393a3a2f34382d3438203d3e203232313232.roa
File:                     323830313a63343a31393a3a2f34382d3438203d3e203232313232.roa (raw, json)
Hash identifier:          58DfXiLYWC+sVw2Y3HYvWtfYz72eH0MyFprudhwTUsU=
Subject key identifier:   FA:D6:5A:71:18:96:17:F9:DE:1D:B5:BC:B2:80:E9:C3:36:48:D0:35
Certificate issuer:       /CN=8D67A138567146B2E89E0918237CB2D076D67AFA
Certificate serial:       299831880C9C2D5F2881837A6B5105CE2F90B9DE
Authority key identifier: 8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/323830313a63343a31393a3a2f34382d3438203d3e203232313232.roa
Signing time:             Tue 04 Feb 2025 18:39:00 +0000
ROA not before:           Tue 04 Feb 2025 18:34:00 +0000
ROA not after:            Tue 03 Feb 2026 18:39:00 +0000
asID:                     22122
IP address blocks:        2801:c4:19::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:98:31:88:0c:9c:2d:5f:28:81:83:7a:6b:51:05:ce:2f:90:b9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D67A138567146B2E89E0918237CB2D076D67AFA
        Validity
            Not Before: Feb  4 18:34:00 2025 GMT
            Not After : Feb  3 18:39:00 2026 GMT
        Subject: CN=FAD65A71189617F9DE1DB5BCB280E9C33648D035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:a2:ae:77:a0:af:58:19:f6:fd:46:5b:e7:
                    05:b6:9a:bd:5b:66:fb:65:67:57:4b:3f:6a:10:ac:
                    1e:ca:ce:43:37:8e:0a:f8:2d:9e:cb:01:f1:e5:c5:
                    fa:87:c7:45:7a:78:67:91:2f:ab:1f:0a:27:d3:fc:
                    0e:3f:42:ca:76:bf:9e:0b:b8:49:97:d4:83:9c:6a:
                    93:b7:80:cc:bc:14:f7:15:53:05:27:dc:fe:e9:4f:
                    80:d9:37:c3:92:42:0c:92:d2:61:61:36:71:c5:6e:
                    86:7d:b7:d5:96:bf:98:d8:39:c4:55:15:45:68:97:
                    97:d9:5e:00:84:cb:f3:51:a4:60:c6:6f:a9:84:9d:
                    9c:e8:0f:77:d5:5d:6f:2a:33:b7:7f:c7:e3:41:57:
                    f9:48:53:b5:39:4b:1d:40:3b:de:7e:4e:04:19:d5:
                    b9:96:26:90:54:bd:c9:ee:b1:40:66:0c:77:fb:38:
                    bb:97:2c:ca:7e:f9:3c:46:a5:58:55:4c:dc:48:e4:
                    c5:45:36:3a:13:4b:4f:8b:fb:f6:77:99:79:a2:23:
                    f7:a5:3d:85:7b:e1:1e:ae:f1:f0:1c:09:1f:92:f7:
                    ca:cf:98:6a:66:8e:c6:ad:c1:9f:5a:aa:a7:d3:52:
                    ee:ec:11:8f:c7:fe:b0:53:3b:da:4f:f1:17:87:66:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D6:5A:71:18:96:17:F9:DE:1D:B5:BC:B2:80:E9:C3:36:48:D0:35
            X509v3 Authority Key Identifier:
                keyid:8D:67:A1:38:56:71:46:B2:E8:9E:09:18:23:7C:B2:D0:76:D6:7A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/8D67A138567146B2E89E0918237CB2D076D67AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8D67A138567146B2E89E0918237CB2D076D67AFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56FD67D89D96D39A39724C4AD614F457C08FA2784415BE3952C491BEBE4BE207/0/323830313a63343a31393a3a2f34382d3438203d3e203232313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:ff:f6:e8:23:0b:91:92:d0:2c:09:2a:1c:2e:0d:2c:ae:3e:
         5f:e3:2f:5c:07:62:36:12:50:b0:5f:3e:fe:6b:1d:a0:15:eb:
         1b:5f:46:a7:45:0c:7f:00:f5:3a:ed:70:b6:cb:a5:15:ab:da:
         97:ec:6f:03:f1:bc:18:7f:5d:e8:04:60:3d:b9:d7:75:63:d1:
         9d:6b:e4:bc:64:8c:07:2f:cb:bb:5c:e2:28:a9:c0:7e:10:44:
         a4:da:cc:9f:4e:98:f6:9f:b9:c2:16:d3:45:a5:bf:c4:8b:c4:
         c5:f3:e6:dc:40:ba:b8:f4:9b:a6:b3:31:5a:31:3a:d4:58:11:
         94:79:f5:e7:c2:4f:c6:37:81:00:7c:05:b7:c8:55:ca:39:e0:
         31:da:e0:4a:3b:5f:a2:c2:7d:b1:18:12:4d:5f:de:0f:48:ec:
         fe:5c:9b:07:3a:7c:8d:ef:2d:18:3e:c7:ac:dd:e6:d1:83:7e:
         79:1e:d8:07:15:8b:8c:09:07:73:fe:4d:e8:f1:5a:1b:68:70:
         ac:86:88:75:1e:d3:ba:e8:e4:05:0d:e0:1b:30:20:ac:79:f6:
         c9:b3:ed:d5:b4:12:a9:2d:4a:01:21:bf:54:b1:a0:27:03:a5:
         36:b1:fb:b1:66:0b:0e:28:01:b5:55:a5:53:0e:b7:b2:3e:b4:
         98:52:44:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----