Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036343a3a2f34372d3437203d3e2033353733.roa
File:                     323830313a3166303a343036343a3a2f34372d3437203d3e2033353733.roa (raw, json)
Hash identifier:          Vi726K6c1M6sXPvmzBgLfM0HbSevx/nrwrHjy0l9F2Q=
Subject key identifier:   CE:2B:83:4C:3D:39:D2:A2:D0:E8:2E:40:3B:D4:42:34:DE:A7:5F:DB
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       351355F13E07EC8637422800DB262312A8ECC4CB
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036343a3a2f34372d3437203d3e2033353733.roa
Signing time:             Fri 21 Mar 2025 09:12:42 +0000
ROA not before:           Fri 21 Mar 2025 09:07:42 +0000
ROA not after:            Fri 20 Mar 2026 09:12:42 +0000
asID:                     3573
IP address blocks:        2801:1f0:4064::/47 maxlen: 47
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:13:55:f1:3e:07:ec:86:37:42:28:00:db:26:23:12:a8:ec:c4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Mar 21 09:07:42 2025 GMT
            Not After : Mar 20 09:12:42 2026 GMT
        Subject: CN=CE2B834C3D39D2A2D0E82E403BD44234DEA75FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:af:46:2f:68:f5:1b:5f:15:85:e7:c7:d2:1f:
                    36:e1:db:f7:bc:b6:6d:03:ae:f7:c4:b9:40:40:ad:
                    17:10:0d:5f:cc:14:d3:ca:51:f9:53:76:72:ef:ff:
                    24:75:5d:1f:84:42:8e:5c:36:67:e9:c1:a7:22:86:
                    b2:93:f8:c2:6d:38:e9:18:75:1e:ce:4c:b7:a1:87:
                    75:ab:95:13:f9:44:8c:38:f6:ab:48:de:29:72:68:
                    ae:48:e5:ed:84:05:a9:ac:41:54:60:74:ce:9a:19:
                    f2:5d:f6:b4:aa:75:16:26:ab:66:65:3c:48:1a:ef:
                    75:e8:3d:b3:1e:30:f5:b6:a6:40:85:cd:31:76:8d:
                    bf:f1:d4:e7:c7:56:09:ea:1b:e9:27:bf:1a:95:d4:
                    4b:57:2f:2d:45:b0:fa:29:7d:1f:e0:46:b4:e6:ac:
                    76:a1:14:56:5d:82:bc:53:ea:c4:46:51:56:36:3e:
                    17:49:ea:ec:45:8b:e8:55:73:0c:76:f2:0d:ad:df:
                    3e:01:b4:f3:72:c7:c1:c3:f7:52:ba:95:e6:e6:e5:
                    d3:64:ab:83:8d:4d:be:73:9c:5b:99:75:5b:3f:31:
                    9f:39:63:d0:c1:d6:cf:51:a9:93:7d:f4:37:28:52:
                    fe:b3:f3:5d:ce:37:b6:1c:91:09:87:c2:0f:f0:50:
                    9e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2B:83:4C:3D:39:D2:A2:D0:E8:2E:40:3B:D4:42:34:DE:A7:5F:DB
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a343036343a3a2f34372d3437203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0:4064::/47

    Signature Algorithm: sha256WithRSAEncryption
         78:4f:48:31:3b:2c:9c:16:5f:8a:16:2a:1d:8f:ef:c7:1b:2d:
         c4:db:29:f5:94:9b:80:6e:61:ce:ac:de:9a:b7:52:f0:35:01:
         17:a6:37:11:00:28:c5:0e:7d:f6:3a:98:43:6c:21:bd:15:6d:
         5b:8a:7f:18:ad:4f:f0:a9:5a:89:f1:b1:6f:e8:10:85:17:2c:
         b9:02:e4:42:8f:18:36:7e:ee:da:06:0e:42:93:33:bb:66:c2:
         0c:63:70:b8:47:14:07:41:45:81:a0:88:78:df:ab:b1:96:19:
         bb:92:87:8d:a5:d3:a7:68:d5:f3:74:93:8c:ab:fb:c1:a2:e0:
         ea:69:c8:47:c5:4c:ba:63:5a:01:33:63:9a:4b:77:46:97:8d:
         04:44:80:81:eb:20:1a:62:fa:0e:d7:45:35:9b:2b:e6:54:48:
         52:7b:ef:db:4b:3b:44:01:d4:4f:fb:a4:2f:42:c6:be:29:1b:
         d5:7e:95:59:c8:b7:7a:73:68:29:00:e0:78:76:97:c0:05:37:
         f4:24:c8:38:e4:34:80:36:ae:6d:8b:d6:20:83:a3:ad:c5:1c:
         48:84:29:6e:30:2a:05:77:e2:35:60:ab:f7:93:c4:4d:b2:d7:
         7e:c5:7a:4f:59:16:7c:2c:a8:2b:0f:53:35:3e:1f:ad:10:9f:
         a7:d2:b4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----