Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030323a3a2f34382d3438203d3e203238303031.roa
File:                     323030313a313363373a373030323a3a2f34382d3438203d3e203238303031.roa (raw, json)
Hash identifier:          ftRNk95YHqCGtQ+FzYbEsVERmUd2ZTp+mCDAiifRCmM=
Subject key identifier:   FC:63:9A:B6:50:AD:5C:4A:A1:B7:94:EF:11:1A:0C:D3:2D:B5:D4:AB
Certificate issuer:       /CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
Certificate serial:       35AA2236F066708FE45BF5A21BD35ED24A83F7F9
Authority key identifier: 1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030323a3a2f34382d3438203d3e203238303031.roa
Signing time:             Tue 04 Feb 2025 18:19:34 +0000
ROA not before:           Tue 04 Feb 2025 18:14:34 +0000
ROA not after:            Tue 03 Feb 2026 18:19:34 +0000
asID:                     28001
IP address blocks:        2001:13c7:7002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:aa:22:36:f0:66:70:8f:e4:5b:f5:a2:1b:d3:5e:d2:4a:83:f7:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE
        Validity
            Not Before: Feb  4 18:14:34 2025 GMT
            Not After : Feb  3 18:19:34 2026 GMT
        Subject: CN=FC639AB650AD5C4AA1B794EF111A0CD32DB5D4AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6e:7f:6a:c9:bc:4d:dd:65:61:ed:bd:2e:e0:
                    c6:60:7a:93:d7:ba:01:d4:d6:2b:83:06:4e:a8:b5:
                    c6:c3:6a:f8:b4:fa:81:76:a5:4b:95:06:2f:c7:94:
                    e3:0f:12:4f:1f:ec:71:b2:84:03:7a:03:44:a5:d1:
                    3b:b6:c4:46:70:7a:cf:06:04:90:a7:1c:ce:a6:40:
                    0d:10:b3:41:c1:c4:d3:58:42:88:61:0c:e0:95:2f:
                    0f:1d:0e:b1:a8:55:5e:32:5e:5a:ed:76:1d:68:bd:
                    5c:a7:9e:18:84:df:7d:de:5d:d2:7c:f7:66:c0:9e:
                    48:13:c8:db:ed:e0:8c:06:2f:59:0e:2a:32:1f:3f:
                    f6:b3:41:fa:22:29:5a:df:ed:a8:15:06:95:52:a0:
                    73:7b:2c:ef:28:25:44:01:5c:f5:8f:a8:ab:62:cd:
                    b2:14:33:c4:80:cd:f4:df:48:76:dc:5d:09:c3:9f:
                    ef:26:d0:f3:89:24:09:c7:90:7d:19:38:c8:95:18:
                    3f:98:b8:81:4b:81:3c:94:05:6d:5d:a9:60:bd:a6:
                    75:e6:e7:39:85:57:98:74:1b:92:96:97:79:d7:99:
                    62:0d:aa:dd:fc:f2:91:01:f3:4e:4e:a5:d8:63:bf:
                    d7:39:de:9b:0e:8e:37:09:b4:96:d5:f1:5a:cd:43:
                    8b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:63:9A:B6:50:AD:5C:4A:A1:B7:94:EF:11:1A:0C:D3:2D:B5:D4:AB
            X509v3 Authority Key Identifier:
                keyid:1F:56:B9:01:1A:E8:C9:AD:DD:96:80:3D:EC:E1:D1:F9:30:6D:81:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1F56B9011AE8C9ADDD96803DECE1D1F9306D81DE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5AC33D4AC844439D945F2FA9F7BB78F06468E22C8BF5834A568CC00049AC3A7B/0/323030313a313363373a373030323a3a2f34382d3438203d3e203238303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:14:a0:31:60:0a:35:56:a0:e6:5b:9d:b5:6e:5c:63:e6:bc:
         c4:6d:02:65:5a:12:67:91:41:fd:65:0e:6d:c7:19:0a:37:93:
         20:80:c8:40:4c:21:ac:7f:07:47:21:ff:da:79:dd:90:dc:07:
         24:d7:a8:31:ca:21:ad:01:3a:5b:3f:a9:5a:ca:31:73:cf:04:
         69:1a:1b:b6:d4:51:8f:b5:72:92:38:84:39:6d:6d:23:92:df:
         70:18:a4:e9:b6:72:b1:52:4c:ec:bd:ad:26:09:7f:94:67:80:
         0d:96:a7:b6:f7:13:cd:3a:bd:ab:e4:39:cb:e4:3a:4f:65:82:
         a0:6d:82:fe:8b:27:72:61:46:a5:18:2d:9d:88:ad:23:4f:46:
         b0:ce:37:13:77:82:10:69:f6:19:5d:30:93:38:a4:75:be:28:
         8a:3a:25:ea:b4:c5:2b:5a:33:58:dc:ca:2e:5f:ea:80:97:1b:
         12:ee:20:8c:c9:12:bc:c3:97:33:c6:58:27:00:95:31:9a:0a:
         f2:5f:8a:ab:bb:e3:cd:8b:e9:65:aa:66:71:c1:93:c2:f9:3d:
         fa:46:d4:55:a1:6b:61:69:e9:17:34:f3:98:f7:36:83:a6:dc:
         99:2a:46:25:bd:59:b5:cd:32:a8:ba:60:7e:7b:72:94:f3:b8:
         9e:7b:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----