Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030323a3a2f34382d3438203d3e20323633373739.roa
File:                     323830313a31643a613030323a3a2f34382d3438203d3e20323633373739.roa (raw, json)
Hash identifier:          x3jy0RkHO4/WMRrBGaamLPtNTn1gqS8luyVdmc4r7+U=
Subject key identifier:   36:AF:8A:3A:E8:C4:B4:07:90:08:2D:82:7D:F1:C7:11:0F:ED:1B:7E
Certificate issuer:       /CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
Certificate serial:       494B60109192E356DF34029E240F5092758B8FF8
Authority key identifier: 20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030323a3a2f34382d3438203d3e20323633373739.roa
Signing time:             Tue 04 Feb 2025 18:14:05 +0000
ROA not before:           Tue 04 Feb 2025 18:09:05 +0000
ROA not after:            Tue 03 Feb 2026 18:14:05 +0000
asID:                     263779
IP address blocks:        2801:1d:a002::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:4b:60:10:91:92:e3:56:df:34:02:9e:24:0f:50:92:75:8b:8f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20F2D550DA2FAFE7B64F3850D9C739B71E61FD18
        Validity
            Not Before: Feb  4 18:09:05 2025 GMT
            Not After : Feb  3 18:14:05 2026 GMT
        Subject: CN=36AF8A3AE8C4B40790082D827DF1C7110FED1B7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:72:1a:df:ff:79:0d:c7:4a:4f:a4:47:59:a3:
                    34:20:63:98:81:69:74:15:1c:20:0e:17:86:28:76:
                    8b:21:6b:72:66:70:ec:3d:3b:e9:72:ba:40:76:75:
                    04:d2:8e:0d:f2:73:b1:d3:fc:c4:a1:a0:49:0c:6e:
                    68:28:33:f0:04:70:35:11:61:95:54:d6:b4:41:fb:
                    cc:5f:6b:52:f4:7c:f9:c4:5c:c6:50:1f:6f:73:94:
                    32:3e:1b:b1:f0:b1:68:f5:23:ec:ec:07:a1:b9:be:
                    52:cc:6f:53:d9:92:27:3c:ef:39:dd:85:05:61:82:
                    37:8f:e7:9b:65:6a:c6:60:05:aa:16:b8:94:97:24:
                    fa:4a:94:38:3e:6a:26:ed:02:2b:5f:5c:3a:f2:4c:
                    9e:d7:0f:8c:00:71:0e:9b:44:db:4e:1a:84:e3:4f:
                    8d:7b:31:d0:c8:38:c5:3c:13:9a:55:f1:82:a5:ca:
                    fc:ed:92:0a:93:05:8e:ed:79:6a:fd:0f:f3:c5:2b:
                    e0:9b:e8:fb:8b:12:7b:1c:e5:87:5c:c0:6f:80:98:
                    48:90:90:7f:d1:2f:4e:49:ef:90:b8:96:1e:f9:ab:
                    61:8a:75:b6:59:27:85:19:e3:cb:3c:a5:bd:92:fb:
                    87:a8:d6:5c:45:4b:54:bc:31:bb:54:d1:0f:ca:67:
                    91:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AF:8A:3A:E8:C4:B4:07:90:08:2D:82:7D:F1:C7:11:0F:ED:1B:7E
            X509v3 Authority Key Identifier:
                keyid:20:F2:D5:50:DA:2F:AF:E7:B6:4F:38:50:D9:C7:39:B7:1E:61:FD:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/20F2D550DA2FAFE7B64F3850D9C739B71E61FD18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7B15C99B60C3467DB710F176D9469BE63B6458FEA58DF3D6C540E8E7C6C5ABC5/0/323830313a31643a613030323a3a2f34382d3438203d3e20323633373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:a002::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:d2:99:3b:8b:ff:88:20:f9:c9:6b:e9:ce:df:21:dd:16:17:
         a8:27:b7:d8:89:d6:02:42:62:0d:a0:29:26:d9:e0:c0:7f:9e:
         5b:2b:cd:54:12:21:b4:bc:69:b6:27:54:9c:88:ca:28:83:a4:
         21:18:8d:f7:ba:47:7c:91:47:c3:7d:c9:35:a6:15:b8:4f:b6:
         bc:8c:52:7d:8f:30:4c:17:07:1a:f2:2e:1d:a5:6e:ad:50:40:
         75:8a:7f:7f:d8:84:92:84:c7:fa:d0:f5:68:72:76:ff:8a:5e:
         f1:2c:b4:1c:85:b8:09:7e:bd:85:df:4a:21:0d:b3:c4:60:d3:
         54:14:4b:9f:ad:03:bd:39:dc:d0:91:ea:45:f6:cd:a5:2a:e4:
         33:ae:31:2f:4e:85:23:fd:f2:78:a4:54:5c:3c:48:3d:7b:ea:
         05:38:6f:f8:e4:e4:d6:f8:fe:1f:8a:b7:0b:5e:9d:67:df:46:
         f3:14:b0:ac:f3:9b:21:88:7f:db:f2:e3:91:f6:9a:99:a7:ad:
         bd:fa:90:1d:5e:a0:d6:30:7c:f2:4d:5d:8c:13:63:1f:cd:c0:
         0b:b9:15:3f:c0:fc:da:24:dd:d7:70:0a:80:9c:7a:d6:a4:b6:
         01:f8:3e:9f:0e:4c:24:2f:0c:66:43:7e:8b:82:1a:f7:c8:e2:
         ed:20:4e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----