Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a3a2f33322d3438203d3e2033353733.roa
File:                     323830313a3166303a3a2f33322d3438203d3e2033353733.roa (raw, json)
Hash identifier:          384S1p41U59KmjkewY5/vbMybi6gw7qbNYm3XkYF3Ho=
Subject key identifier:   AA:96:CE:48:7D:DF:A7:DF:A0:75:F3:A1:91:2A:65:4E:8C:0E:1D:76
Certificate issuer:       /CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
Certificate serial:       6F4CE11DCA815D7BE0CFC3DB56B7CC621151590E
Authority key identifier: A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a3a2f33322d3438203d3e2033353733.roa
Signing time:             Tue 04 Feb 2025 18:37:55 +0000
ROA not before:           Tue 04 Feb 2025 18:32:55 +0000
ROA not after:            Tue 03 Feb 2026 18:37:55 +0000
asID:                     3573
IP address blocks:        2801:1f0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:4c:e1:1d:ca:81:5d:7b:e0:cf:c3:db:56:b7:cc:62:11:51:59:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6924675E88437FC2668BD69E27678D5A7D0CB2A
        Validity
            Not Before: Feb  4 18:32:55 2025 GMT
            Not After : Feb  3 18:37:55 2026 GMT
        Subject: CN=AA96CE487DDFA7DFA075F3A1912A654E8C0E1D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:22:29:f0:d8:d0:4d:6a:c0:66:01:d0:99:84:
                    58:be:75:bc:73:7b:f5:d4:08:79:f5:c3:39:89:4a:
                    3c:cb:90:ba:3d:40:26:e3:a4:ac:88:9f:41:c0:c4:
                    4a:8d:34:19:63:2a:67:e3:eb:6a:1c:a5:a0:31:04:
                    75:8b:52:61:64:98:72:4d:46:bc:a3:e8:cf:ca:07:
                    85:d2:ee:80:4b:c5:e7:27:4d:e7:b4:ba:9e:4d:06:
                    a9:64:cf:7a:02:53:50:3f:08:b3:0d:a8:6d:cc:f9:
                    09:38:00:10:63:1d:1e:33:a6:96:fa:00:2d:ec:97:
                    46:73:be:0e:a5:38:92:f6:55:11:2f:53:f3:43:b8:
                    88:aa:f6:59:45:0f:30:6b:eb:68:53:bf:55:7d:52:
                    6f:da:79:21:61:cc:c4:e4:ad:b3:75:e0:3f:9a:71:
                    e2:1f:80:a5:5c:1f:b5:4b:f6:f0:d0:41:45:4e:38:
                    69:94:bf:3d:52:19:2b:b1:56:73:c1:1b:a6:7e:2f:
                    e3:49:d3:e6:2d:2a:5c:f4:f0:f9:fe:38:5c:0c:57:
                    ec:f0:9d:3b:b2:57:05:ac:b1:56:45:05:ca:81:c7:
                    ad:4d:6b:c8:ea:60:e1:d4:69:51:30:dc:aa:32:fd:
                    38:e0:ef:3a:2f:15:a9:2e:4f:2b:75:34:5a:4f:84:
                    f7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:96:CE:48:7D:DF:A7:DF:A0:75:F3:A1:91:2A:65:4E:8C:0E:1D:76
            X509v3 Authority Key Identifier:
                keyid:A6:92:46:75:E8:84:37:FC:26:68:BD:69:E2:76:78:D5:A7:D0:CB:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6924675E88437FC2668BD69E27678D5A7D0CB2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C8971430686F2E3AB7E05E87B2CB4B1F0262D1B1E1A9F6CA323AA81547F50E0E/0/323830313a3166303a3a2f33322d3438203d3e2033353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:33:e4:04:e1:da:42:f0:2f:96:5a:55:56:6f:e4:cf:d7:f2:
         55:20:d9:b4:19:8f:19:2c:77:3c:77:ad:eb:b9:01:e8:2b:f1:
         40:6a:6f:f2:a4:1b:61:7a:b7:6b:ed:77:92:5c:2a:61:ed:5a:
         22:00:8b:5a:4d:c8:31:da:28:db:86:65:c9:e4:b2:d0:4b:38:
         78:4b:54:7d:74:65:77:ca:e1:fa:2c:1f:83:9f:1f:14:98:29:
         09:e5:dd:e9:92:9f:dc:af:d7:d2:d2:c8:ed:85:4c:64:71:5d:
         91:3b:a9:65:ba:aa:a1:40:9f:bc:6c:1c:dd:29:3e:84:11:71:
         47:43:44:cf:b9:7f:55:21:92:49:ef:e6:65:73:bd:41:14:dc:
         a6:44:ff:e8:14:87:a2:63:b5:2b:aa:00:b0:cf:dd:28:41:61:
         07:68:68:0b:1d:94:b4:4d:aa:51:72:20:b9:56:73:d5:a2:48:
         72:d4:c3:33:47:a9:6d:fb:5c:0f:34:70:f7:ec:f9:aa:b1:43:
         71:66:f3:5a:73:7a:31:de:62:41:76:ec:82:50:2e:54:82:34:
         8a:e6:c0:4b:c2:de:81:77:38:a5:f8:de:46:e1:09:5e:f9:a2:
         77:b4:66:d8:e6:a0:5b:9f:00:43:ed:dc:17:2f:a5:81:db:58:
         57:ad:a9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----