Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/323830303a3363303a3a2f33322d3438203d3e203139383633.roa
File:                     323830303a3363303a3a2f33322d3438203d3e203139383633.roa (raw, json)
Hash identifier:          W5S3eRZsjQaOGXxFqP9jAwn8zJ0OdjFHzhie7XSJ0Iw=
Subject key identifier:   82:B2:B4:04:0B:06:C8:09:E6:45:78:10:61:AE:92:AB:4A:5F:02:0E
Certificate issuer:       /CN=56BA7549B3C1698AA281B67A49603425B3B3D575
Certificate serial:       617D0C886FECE9F4A56A7713ACE7B2AE9A3D85EA
Authority key identifier: 56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/323830303a3363303a3a2f33322d3438203d3e203139383633.roa
Signing time:             Tue 04 Feb 2025 18:01:28 +0000
ROA not before:           Tue 04 Feb 2025 17:56:28 +0000
ROA not after:            Tue 03 Feb 2026 18:01:28 +0000
asID:                     19863
IP address blocks:        2800:3c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7d:0c:88:6f:ec:e9:f4:a5:6a:77:13:ac:e7:b2:ae:9a:3d:85:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56BA7549B3C1698AA281B67A49603425B3B3D575
        Validity
            Not Before: Feb  4 17:56:28 2025 GMT
            Not After : Feb  3 18:01:28 2026 GMT
        Subject: CN=82B2B4040B06C809E645781061AE92AB4A5F020E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:65:d4:d6:0d:01:48:e3:f5:f8:95:06:09:
                    ae:89:07:9d:79:04:23:d5:c6:09:21:43:87:64:77:
                    de:08:f2:ce:8b:bf:13:c6:e8:a9:54:8d:40:33:29:
                    e0:f6:87:0f:21:0b:19:a6:50:85:bf:ea:e7:2c:54:
                    92:f5:3e:c1:1b:72:1d:c1:3a:24:f5:cc:20:ce:fc:
                    98:26:53:5b:d7:8c:21:f4:75:4e:62:e2:af:f6:6f:
                    8a:48:c4:86:88:fa:c0:4e:d7:91:0c:1a:66:5f:39:
                    86:9d:ad:9b:bb:76:4f:fd:18:e9:8a:b2:22:2e:ae:
                    f6:3d:20:bd:03:b7:b7:59:9f:1b:28:cd:b0:68:9f:
                    45:6b:3a:64:22:8f:4b:ab:f1:df:7a:08:94:80:98:
                    70:ba:fd:83:5b:15:34:88:ed:4a:1f:8a:2c:dc:c4:
                    37:dd:24:20:61:88:f0:be:7c:41:d9:a9:a7:49:5f:
                    c5:7f:3a:99:cc:1b:95:70:ca:95:47:ea:38:28:cd:
                    16:60:9b:47:a7:4a:a3:e2:7d:8b:aa:c3:05:b1:88:
                    9f:5e:20:84:15:8b:96:51:fa:bd:b2:0c:99:10:a9:
                    29:7c:24:1a:9e:35:0b:d0:2c:22:b5:e0:d5:a8:51:
                    51:00:3a:05:1b:0d:4f:82:cd:19:16:cb:bd:90:db:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B2:B4:04:0B:06:C8:09:E6:45:78:10:61:AE:92:AB:4A:5F:02:0E
            X509v3 Authority Key Identifier:
                keyid:56:BA:75:49:B3:C1:69:8A:A2:81:B6:7A:49:60:34:25:B3:B3:D5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/56BA7549B3C1698AA281B67A49603425B3B3D575.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/56BA7549B3C1698AA281B67A49603425B3B3D575.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B7637F3972392C9408841506A009C0E58793566DC9ECF11D2B194EDAA707D0AE/0/323830303a3363303a3a2f33322d3438203d3e203139383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:07:03:c9:48:94:e7:bc:47:fd:09:b3:30:c7:c8:e8:07:b7:
         09:3d:4e:7e:13:8c:b4:a9:15:89:5a:13:fd:1d:b8:a5:18:56:
         fc:2d:b2:28:c9:b7:8a:eb:45:16:1b:af:5e:e1:ee:81:01:58:
         02:31:b7:fb:a0:9b:90:9f:f0:a3:0b:a9:a7:25:6b:b4:f9:e1:
         eb:74:c7:37:4f:0e:57:f5:fd:d1:b8:cd:72:89:23:02:55:d6:
         c1:99:bb:bf:26:f9:5d:2b:9b:81:bb:fa:65:81:e8:87:92:6a:
         c0:54:7c:47:ee:c2:c9:a2:c2:2c:9b:ea:61:8e:69:85:6d:9a:
         39:93:10:8f:4d:a6:d7:17:d8:da:6a:f8:3c:c3:70:96:47:b8:
         21:cb:0f:b3:e9:3a:46:8f:6f:4e:d2:be:e2:df:97:83:73:d3:
         cb:94:d2:ae:a1:8e:ec:21:28:b3:a3:7e:74:31:84:ed:38:fa:
         df:00:e8:7c:3c:6e:59:df:73:60:b0:47:5f:95:e4:76:6d:0c:
         8f:d8:8e:bf:e1:26:0b:93:78:bc:ac:59:de:69:6b:e8:34:db:
         93:79:cb:fb:64:b7:8e:d3:a2:7c:14:5a:30:45:3d:54:8a:ac:
         8c:ae:ae:87:3d:a6:2a:00:e7:d9:1f:a6:36:f5:51:5f:bd:af:
         16:e9:05:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----