Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/323830313a63343a39353a3a2f34382d3438203d3e20323730323034.roa
File:                     323830313a63343a39353a3a2f34382d3438203d3e20323730323034.roa (raw, json)
Hash identifier:          HE0RTmM01njnvDF6lcKRacqgTg9/uL/GUAMoa1lYpvo=
Subject key identifier:   70:28:2F:A5:24:62:CC:61:77:2C:9F:70:26:B8:32:A3:93:58:DC:F6
Certificate issuer:       /CN=75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E
Certificate serial:       3F747D874A5CD7F8050F703C61C9BC559010249C
Authority key identifier: 75:80:6F:8E:B3:68:FC:BB:81:D2:DA:BA:CA:0A:A8:AC:1F:6B:57:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/323830313a63343a39353a3a2f34382d3438203d3e20323730323034.roa
Signing time:             Tue 04 Feb 2025 18:23:34 +0000
ROA not before:           Tue 04 Feb 2025 18:18:34 +0000
ROA not after:            Tue 03 Feb 2026 18:23:34 +0000
asID:                     270204
IP address blocks:        2801:c4:95::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:74:7d:87:4a:5c:d7:f8:05:0f:70:3c:61:c9:bc:55:90:10:24:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E
        Validity
            Not Before: Feb  4 18:18:34 2025 GMT
            Not After : Feb  3 18:23:34 2026 GMT
        Subject: CN=70282FA52462CC61772C9F7026B832A39358DCF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d8:a6:65:03:8b:a6:78:d3:ff:9c:4d:bc:36:
                    af:c7:c3:85:e5:4a:cd:28:bb:a1:e9:79:d0:3e:50:
                    36:8c:d5:52:7f:e3:79:71:f8:eb:e0:82:ce:d1:b5:
                    52:d1:0b:be:ec:45:90:9d:3a:f7:7b:57:f3:03:84:
                    07:c3:6f:c6:7c:d1:53:27:a8:5b:59:5d:c8:f4:d6:
                    9d:92:da:70:3f:ce:57:94:27:ee:16:51:bc:c0:e5:
                    f3:98:93:29:ce:9e:70:14:18:df:07:56:1c:9b:27:
                    2a:24:bd:ad:c6:18:21:a8:00:85:69:ea:2b:14:2f:
                    5b:6a:48:03:47:00:05:5e:71:5c:a0:af:ff:dc:47:
                    48:6f:61:ea:6c:8f:fe:9a:50:48:d1:0a:2c:40:13:
                    3e:73:ff:92:23:51:cc:9a:9f:b1:4b:44:bc:13:bf:
                    8d:75:5f:e9:b5:46:8e:18:94:93:9f:ae:98:c6:f4:
                    29:b3:90:97:8b:29:57:ef:9e:95:2d:be:02:87:75:
                    7b:90:bd:7b:a6:fe:6e:c8:b9:22:26:3b:03:fa:77:
                    19:62:b2:eb:b2:6e:09:2d:ef:2e:aa:08:06:46:d5:
                    85:14:b8:57:22:0b:5a:e9:59:90:91:9c:74:95:6d:
                    80:05:aa:c1:66:99:d4:32:99:da:01:b5:5a:dc:0d:
                    64:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:28:2F:A5:24:62:CC:61:77:2C:9F:70:26:B8:32:A3:93:58:DC:F6
            X509v3 Authority Key Identifier:
                keyid:75:80:6F:8E:B3:68:FC:BB:81:D2:DA:BA:CA:0A:A8:AC:1F:6B:57:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/75806F8EB368FCBB81D2DABACA0AA8AC1F6B575E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8EAC9DA1B85F9106F35F2F9D917788FD6163F1C4250C3B5F34FC948D2DF7F430/0/323830313a63343a39353a3a2f34382d3438203d3e20323730323034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:95::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:4b:7d:84:b6:75:80:5b:d4:7c:ec:0c:40:7e:9c:36:c3:95:
         6f:a9:56:44:5a:eb:32:32:6e:db:21:f7:3b:55:3f:73:8e:14:
         8b:ea:7a:61:8a:50:77:d0:da:6d:55:5f:10:01:48:3f:6b:06:
         8a:44:6f:64:5c:6f:38:77:66:88:6c:95:30:38:20:d0:19:3c:
         aa:a3:70:22:65:8b:28:72:8f:a6:27:0f:dc:f4:80:d5:c7:ae:
         7f:cb:8c:7f:95:03:87:e8:ec:ca:0a:b4:45:db:ce:ff:62:4a:
         36:7e:0b:18:58:77:c1:a3:ff:2b:de:2c:50:c6:03:1a:a6:51:
         3d:84:50:15:6a:f3:93:8b:7b:ae:76:e2:db:1a:62:64:17:0e:
         29:1b:40:d7:11:dc:ca:29:53:fd:62:b2:cb:64:e3:03:e9:2b:
         51:21:e9:3f:bf:c0:61:f0:37:35:91:c3:04:78:87:3e:35:7a:
         a1:53:10:0b:24:75:d8:f0:46:dd:a0:99:fe:48:9b:2f:13:03:
         9a:44:13:37:a9:77:aa:96:86:b5:7c:11:68:fd:94:8b:fe:35:
         e5:b6:52:9c:13:b5:c8:80:b2:47:f1:cc:cd:98:05:a2:8d:b1:
         49:ce:83:94:20:ff:de:fe:b8:fe:8a:2e:76:8a:df:71:23:4d:
         69:f6:02:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----