Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/323030313a313331383a3a2f33322d3332203d3e2033353937.roa
File:                     323030313a313331383a3a2f33322d3332203d3e2033353937.roa (raw, json)
Hash identifier:          Mf095qDe9QzmII8oQvGAIGrPhL7k66fun/ClNv4W0fQ=
Subject key identifier:   03:DD:7B:7E:6D:4D:9B:0F:B7:12:94:0F:4C:5F:A4:D6:5B:C1:CE:9F
Certificate issuer:       /CN=F5141320452E9DA4404C594445360E531655082A
Certificate serial:       1861E17C264B81A8E34447D9DF351F7DA594B047
Authority key identifier: F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/323030313a313331383a3a2f33322d3332203d3e2033353937.roa
Signing time:             Tue 04 Feb 2025 18:39:28 +0000
ROA not before:           Tue 04 Feb 2025 18:34:28 +0000
ROA not after:            Tue 03 Feb 2026 18:39:28 +0000
asID:                     3597
IP address blocks:        2001:1318::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:61:e1:7c:26:4b:81:a8:e3:44:47:d9:df:35:1f:7d:a5:94:b0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F5141320452E9DA4404C594445360E531655082A
        Validity
            Not Before: Feb  4 18:34:28 2025 GMT
            Not After : Feb  3 18:39:28 2026 GMT
        Subject: CN=03DD7B7E6D4D9B0FB712940F4C5FA4D65BC1CE9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d5:79:9a:dc:52:b8:a0:5d:f9:3c:ea:a9:87:
                    ed:a5:36:e5:60:2e:5f:a3:30:e4:cd:01:9a:25:39:
                    35:d5:ea:6b:fd:17:90:98:6a:7d:82:3e:f0:4a:85:
                    cd:d6:a6:d5:23:bf:9c:cb:d8:7b:41:61:34:90:bd:
                    ec:e5:01:4e:82:6a:f0:1c:2d:5b:d7:e4:ac:63:47:
                    dd:98:74:20:07:2a:cd:49:82:54:e3:1b:58:1b:25:
                    de:6e:b5:e8:3a:68:10:7b:07:93:1b:b9:5d:92:ca:
                    ae:54:a1:96:47:94:bd:e0:96:28:7a:ab:39:f3:bb:
                    4b:1d:5d:78:98:4e:8a:f5:9f:15:47:67:9b:ad:c7:
                    40:24:f3:d0:05:2b:fc:e8:2b:51:f5:e2:67:1a:ae:
                    0f:91:77:78:57:b3:8e:f7:74:02:83:7c:62:02:33:
                    03:10:f8:35:9c:d7:6e:f9:82:ef:72:5f:82:34:c8:
                    51:b5:76:09:0a:0c:78:31:c4:66:e0:e9:57:16:63:
                    e9:2b:d0:83:85:86:09:15:d5:21:70:ef:d7:28:53:
                    c0:c3:1f:e0:79:bc:78:86:42:ec:57:87:6e:0f:37:
                    7c:b4:ef:03:dc:1d:37:46:8b:d3:7e:d0:e9:90:93:
                    c6:a1:7e:51:75:41:a6:98:60:4d:fd:43:73:2f:f2:
                    25:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:DD:7B:7E:6D:4D:9B:0F:B7:12:94:0F:4C:5F:A4:D6:5B:C1:CE:9F
            X509v3 Authority Key Identifier:
                keyid:F5:14:13:20:45:2E:9D:A4:40:4C:59:44:45:36:0E:53:16:55:08:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/F5141320452E9DA4404C594445360E531655082A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F5141320452E9DA4404C594445360E531655082A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B77F813CD1066BE7F7C49B60652ED2C7ACFEC8632443A619B9A47BBF296E54E9/0/323030313a313331383a3a2f33322d3332203d3e2033353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1318::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:55:6a:b2:78:6e:6f:24:fd:50:ef:3c:a6:2a:e8:68:54:c4:
         c8:0f:b4:20:d0:39:67:65:8a:42:23:08:1a:03:fd:4e:9c:b0:
         3a:52:d8:26:24:88:75:36:8b:b3:a4:ad:41:b9:6e:83:ea:f8:
         8a:09:ae:be:e6:44:62:da:ff:f5:d5:a5:03:19:0c:96:09:e0:
         c6:e3:2d:11:3b:dd:2f:1d:12:8a:4d:72:c2:15:fd:19:d2:c7:
         d5:28:f5:5e:a2:d5:13:28:61:a3:1a:54:ec:db:31:67:16:3e:
         9c:f8:43:e0:bd:19:b9:af:ee:fd:6b:31:b5:e4:72:fa:a0:fd:
         7f:c8:a0:07:b5:33:0f:a0:67:16:9e:cc:b4:50:e8:83:f4:d4:
         18:dc:53:2e:30:58:12:c3:bc:9e:34:73:3f:9b:72:1b:b9:6b:
         3c:65:fe:24:8a:99:01:05:c7:4e:b1:18:e7:c6:87:f8:e0:f1:
         ca:25:5f:c7:9a:d4:ad:51:16:73:ea:a8:87:cd:76:68:58:73:
         1c:8f:23:b4:a9:98:3a:7f:6b:f6:b9:76:c3:6c:1f:f9:17:4f:
         01:c7:99:1d:0f:3d:38:59:c3:8d:19:68:b7:75:69:d1:37:95:
         f0:7b:a8:b3:35:28:f2:67:e6:eb:09:bb:d3:2f:11:04:56:15:
         2b:fb:db:73
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgIUGGHhfCZLgajjREfZ3zUffaWUsEcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjUxNDEzMjA0NTJFOURBNDQwNEM1OTQ0NDUzNjBFNTMx
NjU1MDgyQTAeFw0yNTAyMDQxODM0MjhaFw0yNjAyMDMxODM5MjhaMDMxMTAvBgNV
BAMTKDAzREQ3QjdFNkQ0RDlCMEZCNzEyOTQwRjRDNUZBNEQ2NUJDMUNFOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt1Xma3FK4oF35POqph+2lNuVg
Ll+jMOTNAZolOTXV6mv9F5CYan2CPvBKhc3WptUjv5zL2HtBYTSQvezlAU6CavAc
LVvX5KxjR92YdCAHKs1JglTjG1gbJd5uteg6aBB7B5MbuV2Syq5UoZZHlL3glih6
qznzu0sdXXiYTor1nxVHZ5utx0Ak89AFK/zoK1H14mcarg+Rd3hXs473dAKDfGIC
MwMQ+DWc1275gu9yX4I0yFG1dgkKDHgxxGbg6VcWY+kr0IOFhgkV1SFw79coU8DD
H+B5vHiGQuxXh24PN3y07wPcHTdGi9N+0OmQk8ahflF1QaaYYE39Q3Mv8iWbAgMB
AAGjggLFMIICwTAdBgNVHQ4EFgQUA917fm1Nmw+3EpQPTF+k1lvBzp8wHwYDVR0j
BBgwFoAU9RQTIEUunaRATFlERTYOUxZVCCowDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9CNzdGODEzQ0QxMDY2QkU3RjdDNDlCNjA2NTJFRDJDN0FD
RkVDODYzMjQ0M0E2MTlCOUE0N0JCRjI5NkU1NEU5LzAvRjUxNDEzMjA0NTJFOURB
NDQwNEM1OTQ0NDUzNjBFNTMxNjU1MDgyQS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9GNTE0MTMyMDQ1MkU5REE0NDA0
QzU5NDQ0NTM2MEU1MzE2NTUwODJBLmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvQjc3RjgxM0NEMTA2NkJFN0Y3QzQ5QjYwNjUyRUQyQzdBQ0ZFQzg2MzI0
NDNBNjE5QjlBNDdCQkYyOTZFNTRFOS8wLzMyMzAzMDMxM2EzMTMzMzEzODNhM2Ey
ZjMzMzIyZDMzMzIyMDNkM2UyMDMzMzUzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAIAETGDANBgkq
hkiG9w0BAQsFAAOCAQEAZlVqsnhubyT9UO88piroaFTEyA+0INA5Z2WKQiMIGgP9
TpywOlLYJiSIdTaLs6StQblug+r4igmuvuZEYtr/9dWlAxkMlgngxuMtETvdLx0S
ik1ywhX9GdLH1Sj1XqLVEyhhoxpU7NsxZxY+nPhD4L0Zua/u/WsxteRy+qD9f8ig
B7UzD6BnFp7MtFDog/TUGNxTLjBYEsO8njRzP5tyG7lrPGX+JIqZAQXHTrEY58aH
+ODxyiVfx5rUrVEWc+qoh812aFhzHI8jtKmYOn9r9rl2w2wf+RdPAceZHQ89OFnD
jRlot3Vp0TeV8HuoszUo8mfm6wm70y8RBFYVK/vbcw==
-----END CERTIFICATE-----