Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/323830313a31303a3a2f34352d3438203d3e203238303638.roa
File:                     323830313a31303a3a2f34352d3438203d3e203238303638.roa (raw, json)
Hash identifier:          nfC01tpW7XfcSidzi3lu0htBuUik9ZYzOZRKK4TBcuQ=
Subject key identifier:   99:B2:2C:44:BE:0B:11:5E:E3:E0:E5:7A:18:F1:3D:18:18:5F:B6:50
Certificate issuer:       /CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
Certificate serial:       5E701CA5CEC80BC5D43AC5EE3A0C7F3DFF9AB810
Authority key identifier: F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/323830313a31303a3a2f34352d3438203d3e203238303638.roa
Signing time:             Tue 04 Feb 2025 18:35:25 +0000
ROA not before:           Tue 04 Feb 2025 18:30:25 +0000
ROA not after:            Tue 03 Feb 2026 18:35:25 +0000
asID:                     28068
IP address blocks:        2801:10::/45 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:70:1c:a5:ce:c8:0b:c5:d4:3a:c5:ee:3a:0c:7f:3d:ff:9a:b8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3DADC8E304E127082BB1169FB59CD8EA1814053
        Validity
            Not Before: Feb  4 18:30:25 2025 GMT
            Not After : Feb  3 18:35:25 2026 GMT
        Subject: CN=99B22C44BE0B115EE3E0E57A18F13D18185FB650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:d9:b7:08:2e:63:04:72:e5:83:6e:3e:92:
                    00:b7:33:2c:08:c5:d3:57:5c:64:b1:02:97:99:28:
                    4b:e2:9a:f3:18:30:11:33:46:80:ca:a6:b2:a6:d8:
                    5f:b3:ef:65:a0:d6:5c:69:ae:91:05:33:6b:9c:07:
                    5b:4f:5f:c7:12:76:ed:c9:48:02:4d:d1:88:44:03:
                    5e:84:69:a0:68:e3:e9:68:54:ca:ed:d6:b9:11:77:
                    63:ff:20:63:eb:a4:dc:a9:3d:fa:20:df:27:e9:fb:
                    49:8a:b7:f3:de:5d:b2:6d:c7:aa:2e:4b:f8:0d:a7:
                    d1:5e:3f:f9:92:30:e1:51:a1:0c:69:61:c7:e8:cd:
                    d0:2a:80:d5:ff:fe:21:cc:63:ef:2f:e2:a5:7a:95:
                    09:89:10:77:bd:3c:d9:6f:13:22:c3:36:b3:e1:db:
                    10:34:9c:f8:21:71:30:91:1f:b0:3a:37:e3:31:6b:
                    5c:2c:30:0d:07:1a:b4:3a:bf:68:8a:03:21:5b:74:
                    21:5a:9a:a5:a3:a8:91:8b:c4:e8:46:31:db:a2:7a:
                    54:15:a1:1a:15:45:fc:e1:18:68:34:35:9f:b3:e2:
                    b5:1a:eb:c6:68:db:bd:8c:dc:ec:a2:75:93:77:84:
                    73:40:39:17:9c:a2:de:02:09:18:db:c7:3e:db:af:
                    25:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:2C:44:BE:0B:11:5E:E3:E0:E5:7A:18:F1:3D:18:18:5F:B6:50
            X509v3 Authority Key Identifier:
                keyid:F3:DA:DC:8E:30:4E:12:70:82:BB:11:69:FB:59:CD:8E:A1:81:40:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F3DADC8E304E127082BB1169FB59CD8EA1814053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/96FA1A6F3557EB53A08D692D2969844387E7AB240685FDE727EFB11737B3DBD2/0/323830313a31303a3a2f34352d3438203d3e203238303638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10::/45

    Signature Algorithm: sha256WithRSAEncryption
         21:87:21:85:1e:1c:1e:5b:ad:70:13:4a:eb:b3:69:e4:e6:3f:
         cf:30:ae:f3:ae:27:ba:f2:5f:94:85:09:c8:ea:03:bd:2d:b8:
         6c:e1:a0:06:70:90:65:c8:8c:70:d7:d1:32:69:6f:64:e5:87:
         ee:5f:5a:cf:13:ac:fc:01:46:78:88:5f:db:61:16:b0:18:da:
         a8:6a:aa:82:a5:f9:a1:5f:4e:a4:85:93:de:4b:b1:68:80:fc:
         5f:b9:4f:f1:82:5f:5e:4f:79:04:5a:73:10:9e:a2:fe:5e:b8:
         bd:f8:ef:47:07:dd:17:d9:40:4e:c8:d7:7e:f3:95:d0:cd:cd:
         da:40:5b:3a:13:73:07:b7:9b:7f:f0:72:d3:22:c8:6d:26:6d:
         41:76:50:66:04:81:89:d9:62:eb:0b:5a:1d:eb:a0:35:ec:5e:
         34:61:da:ad:d3:8b:ce:e8:44:4d:f7:fa:6e:a0:df:63:48:d7:
         e4:9a:90:c0:c9:17:a5:f0:b4:e1:a9:80:d5:aa:05:98:31:4f:
         b3:19:c6:4c:96:31:90:76:9b:18:3a:8e:bb:1a:cf:a3:37:20:
         a2:ad:69:c7:4d:7d:05:27:3d:7a:f7:f9:b1:db:06:65:80:e1:
         16:ad:84:f8:5b:3e:43:9e:79:68:cb:c0:42:18:fd:92:c7:47:
         1e:f5:e1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----