Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203131333135.roa
File:                     323830303a6130303a3a2f33322d3438203d3e203131333135.roa (raw, json)
Hash identifier:          atE7NVYEea6j6u2zP5ee0NzHD4Hy1FpiCSXeoW6k41s=
Subject key identifier:   BA:36:67:DE:19:5D:82:D7:2B:ED:A0:FA:52:65:DF:90:95:97:18:B5
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       527E1353DE9CA2EF5AEAE49E5B4E8BCADCEEF388
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203131333135.roa
Signing time:             Tue 04 Feb 2025 20:03:51 +0000
ROA not before:           Tue 04 Feb 2025 19:58:51 +0000
ROA not after:            Tue 03 Feb 2026 20:03:51 +0000
asID:                     11315
IP address blocks:        2800:a00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7e:13:53:de:9c:a2:ef:5a:ea:e4:9e:5b:4e:8b:ca:dc:ee:f3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Feb  4 19:58:51 2025 GMT
            Not After : Feb  3 20:03:51 2026 GMT
        Subject: CN=BA3667DE195D82D72BEDA0FA5265DF90959718B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:db:d1:04:58:8a:c5:b1:49:ec:f2:17:b2:92:
                    3f:96:3a:3f:62:6d:33:9f:47:df:56:f6:4b:f3:c4:
                    b3:0e:04:9e:c2:70:57:e6:57:1c:b1:2f:af:f9:3d:
                    cb:5a:6a:1f:2d:2c:91:f9:a6:16:26:9f:63:52:83:
                    e4:80:21:d6:fc:3b:ca:0b:d7:0e:f6:7d:25:ec:e8:
                    eb:2a:e0:a6:37:00:50:1b:2d:08:9c:cc:c2:23:e3:
                    87:08:f4:85:15:f8:05:9b:c5:bc:cb:03:97:0c:46:
                    7f:d5:34:87:5f:27:7d:20:cd:45:43:45:5f:eb:a0:
                    ea:e0:0d:9c:46:11:c0:b7:b7:52:11:01:04:70:a4:
                    c0:d5:9b:d0:56:4e:7f:24:54:3a:5b:c6:fb:da:ed:
                    27:4b:44:bd:00:7a:0e:26:a5:3f:1b:57:dd:5d:60:
                    5b:0f:3f:74:5c:f0:3a:b2:1a:c2:f9:29:9e:a7:f5:
                    5d:cf:1c:01:f0:43:7c:1a:9d:70:cd:36:32:99:81:
                    72:de:54:2d:8d:d3:d1:4b:52:c7:8a:20:26:0a:3a:
                    5a:64:bb:dd:53:76:ea:11:a8:65:95:05:06:90:6d:
                    3d:a3:2d:14:1e:ad:b9:5f:32:2e:35:59:a5:55:43:
                    6d:00:af:19:69:39:87:e1:99:05:9b:19:18:49:ad:
                    ed:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:36:67:DE:19:5D:82:D7:2B:ED:A0:FA:52:65:DF:90:95:97:18:B5
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203131333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:40:54:36:4c:cc:43:46:2e:93:fa:56:56:1f:f2:2e:08:77:
         85:38:ab:6b:6d:fe:dc:33:24:93:f0:9f:74:85:64:58:c2:86:
         3d:27:49:4b:8b:20:d7:39:bf:3e:2e:b1:40:14:bb:13:4a:c7:
         4e:50:01:16:36:43:4b:d4:f0:25:f5:53:5c:c9:94:2b:6c:c1:
         da:a2:36:fc:77:d0:f1:23:68:d3:2c:18:53:bc:d0:3c:4d:52:
         ff:68:e2:2a:6b:2d:c2:61:01:cd:2e:ae:93:69:67:c6:eb:87:
         02:1e:1c:a6:8a:f7:6d:fc:16:aa:fb:c5:2a:ec:28:35:a7:c5:
         42:4c:78:eb:ca:5a:d9:54:fb:6d:6b:96:d2:08:26:ad:fe:ca:
         e0:99:22:f5:e5:f2:d5:4b:23:e9:39:e7:a2:82:f5:b8:ab:35:
         bc:e6:07:11:11:df:f3:c7:8c:77:f9:70:7e:7b:65:23:5e:f6:
         13:ea:68:a9:7d:ff:65:d9:bf:a2:24:47:0b:3e:dd:f5:78:aa:
         40:8d:a8:a2:65:99:a0:b9:6e:e3:5b:f2:f2:fa:15:40:22:df:
         29:4b:05:bf:0e:a4:69:fe:01:a7:72:75:7c:7b:f2:8f:7c:a3:
         33:b1:65:66:f6:26:42:0c:cc:30:5f:9d:ba:47:14:89:94:1c:
         d0:0b:67:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----