Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e20323732303637.roa
File:                     323830313a31363a393830303a3a2f34382d3438203d3e20323732303637.roa (raw, json)
Hash identifier:          NLzCh50z3X//xJu1Rb6/7j+ROHv1cqDnMMDgR14o8ng=
Subject key identifier:   27:E6:48:60:14:92:B5:8B:6F:52:A2:2D:AD:16:65:30:55:71:27:8B
Certificate issuer:       /CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
Certificate serial:       3D32F0860A2A827641436EF6A1E4E8DD1D0A9B71
Authority key identifier: FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e20323732303637.roa
Signing time:             Tue 04 Feb 2025 18:53:35 +0000
ROA not before:           Tue 04 Feb 2025 18:48:35 +0000
ROA not after:            Tue 03 Feb 2026 18:53:35 +0000
asID:                     272067
IP address blocks:        2801:16:9800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:32:f0:86:0a:2a:82:76:41:43:6e:f6:a1:e4:e8:dd:1d:0a:9b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA42334FD8ECA11B3B3779140D2E9FB302E2E545
        Validity
            Not Before: Feb  4 18:48:35 2025 GMT
            Not After : Feb  3 18:53:35 2026 GMT
        Subject: CN=27E648601492B58B6F52A22DAD1665305571278B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:af:27:6c:c5:ac:4b:7f:23:57:09:f7:10:
                    02:04:0b:a0:62:06:32:20:9c:2b:c2:5a:e8:61:67:
                    ce:59:b6:65:98:58:26:f2:7e:d9:c0:36:dc:0c:f2:
                    41:36:0e:38:4d:f6:f4:ea:2b:ec:a6:ab:09:0e:48:
                    17:dc:9d:63:62:ac:cb:81:5d:c5:37:c5:e3:8e:39:
                    b4:6d:97:d9:36:18:6e:67:64:c2:b7:76:ca:b8:c6:
                    57:23:e1:cd:25:a3:e2:84:3c:3e:e3:41:f3:89:ef:
                    38:42:04:cb:98:d5:f5:66:bd:84:02:aa:c6:14:49:
                    ac:f6:57:56:41:a8:b8:a1:25:78:cc:00:49:85:9e:
                    cb:0d:e2:47:5b:c5:eb:83:f2:73:cc:9e:a3:8f:89:
                    d1:98:a7:1e:50:75:5a:09:ef:e3:ea:92:a2:9d:a3:
                    19:1b:5b:8c:ca:c3:80:3a:bd:63:1b:a8:59:c0:74:
                    ea:1e:28:10:84:f3:d5:26:1e:02:7c:80:23:50:b7:
                    c8:d3:79:ff:88:84:52:ea:a1:5d:ba:ef:c2:20:fa:
                    c3:ca:bb:c3:26:3b:0b:6b:4a:bd:c7:a8:32:13:5d:
                    99:dd:c7:d2:4a:00:92:7e:de:6e:3a:37:51:37:fb:
                    4b:29:a9:8f:89:8b:f6:b6:1c:f0:49:f6:50:31:cd:
                    1a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E6:48:60:14:92:B5:8B:6F:52:A2:2D:AD:16:65:30:55:71:27:8B
            X509v3 Authority Key Identifier:
                keyid:FA:42:33:4F:D8:EC:A1:1B:3B:37:79:14:0D:2E:9F:B3:02:E2:E5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA42334FD8ECA11B3B3779140D2E9FB302E2E545.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7942869D21D54E1BE946085A785AA6BB7F5F7417B7EDA9AD82C7FAE9D0E6CC62/0/323830313a31363a393830303a3a2f34382d3438203d3e20323732303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:50:2b:cc:98:83:26:d9:d7:6c:4f:40:89:fc:cf:f1:be:5b:
         9d:e1:b6:c9:7b:20:04:ab:b2:ee:28:d2:a7:b7:63:15:d5:33:
         ec:e9:ef:38:50:6b:fe:89:1c:fb:00:ea:e8:54:1c:eb:43:83:
         67:4c:bb:ce:6f:d3:9a:25:4d:6a:71:8a:7c:50:30:2b:12:07:
         fe:b6:99:66:57:3f:5d:35:0e:4f:7a:26:51:cd:69:18:0a:0f:
         dd:24:de:f5:28:fc:61:d4:93:65:e8:f6:21:e6:cb:b3:c4:fe:
         9d:6e:dc:d7:f2:b2:76:46:cf:3f:43:f6:63:f4:b5:40:1d:0f:
         b1:ce:31:7c:7b:e2:74:d3:4d:51:07:4f:53:9c:2f:17:b4:a3:
         f9:07:f8:a5:7d:9e:d8:52:0d:a5:3e:00:36:93:69:2b:42:8c:
         f5:81:f9:cf:f6:a5:7a:cd:dd:43:73:8b:3e:9b:60:b8:91:64:
         e7:4e:f7:ee:da:ba:a7:20:d5:92:46:48:92:f9:d6:76:4c:0a:
         5b:af:86:88:47:4f:00:1b:4a:74:fc:d4:ff:a0:0f:4c:a7:ee:
         8d:c0:d5:c4:b2:23:3d:ec:ae:8a:c5:1a:e3:74:58:a9:43:12:
         d8:9e:8d:7c:1e:99:78:f0:9f:87:19:99:fc:0f:2e:fd:07:e7:
         c9:c8:b8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----