Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/323830303a6333303a616430303a3a2f34302d3430203d3e20323635373035.roa
File:                     323830303a6333303a616430303a3a2f34302d3430203d3e20323635373035.roa (raw, json)
Hash identifier:          bq24zsyduxxVXLxvfgFM0hUG5egfFiX4nqfgtAPa1Zw=
Subject key identifier:   2B:0D:AB:6E:E6:76:D6:07:B9:3A:8C:6C:8B:3B:0E:F7:00:F1:0B:35
Certificate issuer:       /CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
Certificate serial:       475E4EB2D765F2FE06AD5B268B656D4019B28EDA
Authority key identifier: 05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/323830303a6333303a616430303a3a2f34302d3430203d3e20323635373035.roa
Signing time:             Tue 04 Feb 2025 20:01:36 +0000
ROA not before:           Tue 04 Feb 2025 19:56:36 +0000
ROA not after:            Tue 03 Feb 2026 20:01:36 +0000
asID:                     265705
IP address blocks:        2800:c30:ad00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:5e:4e:b2:d7:65:f2:fe:06:ad:5b:26:8b:65:6d:40:19:b2:8e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05C9632C2BAF4CD4754DA6B446116C70FEF4D267
        Validity
            Not Before: Feb  4 19:56:36 2025 GMT
            Not After : Feb  3 20:01:36 2026 GMT
        Subject: CN=2B0DAB6EE676D607B93A8C6C8B3B0EF700F10B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:b8:78:62:96:70:6f:86:f9:9c:39:f7:d5:
                    c7:3e:2d:13:b5:7a:7f:5e:52:86:ff:e8:eb:9f:ba:
                    16:cb:4c:d0:f0:2f:9f:38:d0:49:59:24:72:ee:c6:
                    1c:e7:eb:17:1e:ae:ae:c1:85:6f:b8:28:49:2c:4c:
                    38:21:ad:1f:bf:e1:26:d0:f3:f6:50:f2:5a:ef:b6:
                    b5:bc:ba:f1:e8:42:86:f5:95:d9:e3:41:cd:39:e1:
                    85:8f:99:bc:1d:2d:a2:7e:f6:4e:c4:d3:ba:fd:a6:
                    81:98:06:5f:63:00:23:fa:45:91:b9:f3:9d:9a:9a:
                    74:d8:a3:c3:b8:d5:ee:ec:c5:fe:d1:3d:28:7e:3e:
                    fd:00:6a:0c:16:e2:a8:40:8f:2c:c1:63:eb:1d:bd:
                    b3:dd:c3:fa:26:41:39:11:fa:31:11:9c:98:8f:af:
                    8f:fe:5e:7a:3a:56:c6:1d:a0:e3:e7:51:fe:2a:38:
                    7f:c8:42:c2:88:8f:60:54:ba:f4:29:21:0d:d4:6a:
                    53:f3:ce:ac:81:7e:e4:91:4a:20:2e:b4:56:30:79:
                    29:54:1d:1c:4b:53:0c:a1:9b:34:85:2c:a9:68:c5:
                    e0:3d:13:5d:51:6b:ff:ee:40:a6:91:1c:97:85:4c:
                    7d:f5:c9:61:6a:9e:4d:67:a4:11:d8:c9:f6:fa:cf:
                    cb:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0D:AB:6E:E6:76:D6:07:B9:3A:8C:6C:8B:3B:0E:F7:00:F1:0B:35
            X509v3 Authority Key Identifier:
                keyid:05:C9:63:2C:2B:AF:4C:D4:75:4D:A6:B4:46:11:6C:70:FE:F4:D2:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/05C9632C2BAF4CD4754DA6B446116C70FEF4D267.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BA0053DA603852AF61C84424FBFF9AC8A63288718996C633B6329A8C93C0671E/0/323830303a6333303a616430303a3a2f34302d3430203d3e20323635373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:c30:ad00::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:a7:93:e7:a9:3a:a9:5e:cd:61:54:cd:c1:3b:06:d2:ae:b1:
         18:60:35:c8:0d:db:bd:1e:05:19:1c:c7:77:78:83:10:ba:2e:
         11:c7:f2:12:c6:22:23:32:dd:83:75:23:df:5f:be:69:d7:73:
         55:3d:45:2d:c7:bf:51:b4:f8:08:f3:26:4a:dd:30:c4:d9:39:
         e5:26:bc:e7:44:de:9b:2f:9f:d2:0d:53:4f:df:eb:b8:f0:99:
         a3:41:01:29:78:99:3e:c5:66:f5:08:e3:5e:fe:de:63:6e:83:
         89:45:03:fe:8f:ba:ca:fd:16:81:b3:27:cd:6c:c5:f8:d0:8e:
         2d:87:e3:01:02:5a:d5:bf:d1:d6:92:08:3a:c1:a6:c6:6e:47:
         7c:26:8b:73:e9:80:b2:2f:af:f1:67:1d:b9:f8:8c:80:a9:e9:
         20:ea:dd:24:b8:26:d2:26:fa:da:68:c1:d2:98:0d:87:11:db:
         6a:69:84:0d:76:74:bb:62:f2:ea:d3:de:69:4e:b8:75:c1:17:
         ca:74:bf:46:8b:48:0f:f9:df:16:ee:47:de:03:83:ad:0e:ca:
         12:4f:70:be:a6:78:2b:29:26:bd:a8:ed:96:75:e3:58:e8:3d:
         84:89:a3:f1:d1:1e:7e:a2:85:17:b0:0d:3a:6f:4e:a4:a7:d9:
         de:b8:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----