Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/323830313a31383a3830303a3a2f34382d3634203d3e203134373534.roa
File:                     323830313a31383a3830303a3a2f34382d3634203d3e203134373534.roa (raw, json)
Hash identifier:          xDezcw8rHTHUy0Qftg1vozZn/1ja4CWwhUyf16HMpCU=
Subject key identifier:   62:1D:64:47:4E:17:E3:16:82:3E:79:E9:5D:A0:82:45:E0:A6:02:19
Certificate issuer:       /CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2
Certificate serial:       6152A27A5427BFFDCD75A6B7761E9EE70E47F4B5
Authority key identifier: 5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/323830313a31383a3830303a3a2f34382d3634203d3e203134373534.roa
Signing time:             Tue 04 Feb 2025 18:15:40 +0000
ROA not before:           Tue 04 Feb 2025 18:10:40 +0000
ROA not after:            Tue 03 Feb 2026 18:15:40 +0000
asID:                     14754
IP address blocks:        2801:18:800::/48 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:52:a2:7a:54:27:bf:fd:cd:75:a6:b7:76:1e:9e:e7:0e:47:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2
        Validity
            Not Before: Feb  4 18:10:40 2025 GMT
            Not After : Feb  3 18:15:40 2026 GMT
        Subject: CN=621D64474E17E316823E79E95DA08245E0A60219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:04:b7:c0:de:af:60:81:81:3d:b8:62:88:d7:
                    23:8f:b1:aa:f1:8a:8f:28:05:65:c6:cc:f5:59:98:
                    06:07:e2:fd:26:f8:8e:27:32:51:f6:fa:c0:bc:34:
                    e4:6f:1e:9a:bd:65:46:dd:c1:7f:b5:0e:f9:38:f3:
                    b3:14:86:5c:c3:a3:e4:50:50:b5:cf:9a:8b:f0:d9:
                    1f:2d:a7:bc:7f:5b:81:3a:06:10:70:f0:9b:51:f3:
                    cb:0a:e9:6d:0d:f1:17:6c:32:0d:d1:c0:50:bb:43:
                    37:aa:44:30:d7:8d:cc:e8:68:ed:26:3d:cd:1b:55:
                    b0:1a:aa:99:f2:40:fc:7c:c9:f3:b6:14:4b:79:cb:
                    e9:07:fe:20:3e:93:e7:70:36:a1:43:75:72:0b:b4:
                    87:a5:6e:f8:87:de:1c:a2:b0:c5:9e:62:91:67:b4:
                    69:42:3d:ed:8f:5a:c6:c0:33:60:fe:e7:dc:a9:4f:
                    4a:48:dd:99:c8:ac:bb:f3:9a:81:63:6d:b2:03:cd:
                    5f:28:c1:c2:53:3d:0b:cc:56:a2:83:0b:9c:25:1d:
                    18:26:ff:08:7d:5f:39:1b:8e:9a:1d:fd:61:1a:36:
                    44:86:b7:f9:c8:42:55:e6:07:db:28:a7:07:06:63:
                    7a:43:3a:35:8c:9d:e5:00:5c:78:47:c5:0a:c3:6a:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1D:64:47:4E:17:E3:16:82:3E:79:E9:5D:A0:82:45:E0:A6:02:19
            X509v3 Authority Key Identifier:
                keyid:5B:A4:CD:8B:65:E4:B3:ED:FA:83:BD:F4:08:BB:53:2E:A0:7C:6D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5BA4CD8B65E4B3EDFA83BDF408BB532EA07C6DC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/69318625E29004EF60C160BBD28B633F4F0F0AE78E9DAD95BF88D69D9370CA37/0/323830313a31383a3830303a3a2f34382d3634203d3e203134373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:ae:70:ce:84:7f:87:99:0c:ec:87:4a:fb:18:7c:ea:00:3a:
         77:5f:3b:90:fd:b0:d3:93:19:3e:79:35:e2:34:81:18:1e:ef:
         9f:9c:87:b8:c8:3a:a0:1d:bb:74:08:1c:c1:3d:1c:64:09:ed:
         d7:71:00:ea:1e:04:3c:34:70:6e:b2:76:48:08:12:37:57:ca:
         90:d0:c5:2d:17:fa:b7:4e:28:4a:58:07:a4:63:7f:61:04:16:
         32:6a:e5:d6:d6:0e:6c:36:9a:4e:77:14:55:f7:10:b0:93:61:
         d8:9c:f2:4a:58:4a:84:49:74:8c:79:d5:01:40:48:98:55:6b:
         28:af:0b:64:29:50:2f:74:68:38:7b:af:fd:c7:84:dd:48:af:
         f3:eb:1e:b1:54:66:dd:38:fc:2c:f8:39:22:73:4d:ae:45:4c:
         bb:bc:5f:4e:7d:0d:10:9f:c0:59:90:2e:74:b9:bb:21:0b:df:
         d1:5f:09:9b:29:39:e9:da:e1:4c:b5:1a:37:0a:54:81:23:de:
         e2:42:9b:57:e3:f8:fd:2a:ef:07:25:98:7f:ba:37:e4:2d:89:
         5f:47:23:fd:88:08:8d:63:39:45:56:b5:ae:43:3d:c3:a0:60:
         b0:71:67:44:c8:92:17:49:bf:96:cf:a6:b5:51:83:91:f9:f1:
         a1:28:16:d5
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgIUYVKielQnv/3Ndaa3dh6e5w5H9LUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUJBNENEOEI2NUU0QjNFREZBODNCREY0MDhCQjUzMkVB
MDdDNkRDMjAeFw0yNTAyMDQxODEwNDBaFw0yNjAyMDMxODE1NDBaMDMxMTAvBgNV
BAMTKDYyMUQ2NDQ3NEUxN0UzMTY4MjNFNzlFOTVEQTA4MjQ1RTBBNjAyMTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlBLfA3q9ggYE9uGKI1yOPsarx
io8oBWXGzPVZmAYH4v0m+I4nMlH2+sC8NORvHpq9ZUbdwX+1Dvk487MUhlzDo+RQ
ULXPmovw2R8tp7x/W4E6BhBw8JtR88sK6W0N8RdsMg3RwFC7QzeqRDDXjczoaO0m
Pc0bVbAaqpnyQPx8yfO2FEt5y+kH/iA+k+dwNqFDdXILtIelbviH3hyisMWeYpFn
tGlCPe2PWsbAM2D+59ypT0pI3ZnIrLvzmoFjbbIDzV8owcJTPQvMVqKDC5wlHRgm
/wh9Xzkbjpod/WEaNkSGt/nIQlXmB9sopwcGY3pDOjWMneUAXHhHxQrDaiN7AgMB
AAGjggLNMIICyTAdBgNVHQ4EFgQUYh1kR04X4xaCPnnpXaCCReCmAhkwHwYDVR0j
BBgwFoAUW6TNi2Xks+36g730CLtTLqB8bcIwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82OTMxODYyNUUyOTAwNEVGNjBDMTYwQkJEMjhCNjMzRjRG
MEYwQUU3OEU5REFEOTVCRjg4RDY5RDkzNzBDQTM3LzAvNUJBNENEOEI2NUU0QjNF
REZBODNCREY0MDhCQjUzMkVBMDdDNkRDMi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC81QkE0Q0Q4QjY1RTRCM0VERkE4
M0JERjQwOEJCNTMyRUEwN0M2REMyLmNlcjCByQYIKwYBBQUHAQsEgbwwgbkwgbYG
CCsGAQUFBzALhoGpcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjkzMTg2MjVFMjkwMDRFRjYwQzE2MEJCRDI4QjYzM0Y0RjBGMEFFNzhF
OURBRDk1QkY4OEQ2OUQ5MzcwQ0EzNy8wLzMyMzgzMDMxM2EzMTM4M2EzODMwMzAz
YTNhMmYzNDM4MmQzNjM0MjAzZDNlMjAzMTM0MzczNTM0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKAEA
GAgAMA0GCSqGSIb3DQEBCwUAA4IBAQAnrnDOhH+HmQzsh0r7GHzqADp3XzuQ/bDT
kxk+eTXiNIEYHu+fnIe4yDqgHbt0CBzBPRxkCe3XcQDqHgQ8NHBusnZICBI3V8qQ
0MUtF/q3TihKWAekY39hBBYyauXW1g5sNppOdxRV9xCwk2HYnPJKWEqESXSMedUB
QEiYVWsorwtkKVAvdGg4e6/9x4TdSK/z6x6xVGbdOPws+Dkic02uRUy7vF9OfQ0Q
n8BZkC50ubshC9/RXwmbKTnp2uFMtRo3ClSBI97iQptX4/j9Ku8HJZh/ujfkLYlf
RyP9iAiNYzlFVrWuQz3DoGCwcWdEyJIXSb+Wz6a1UYOR+fGhKBbV
-----END CERTIFICATE-----