Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a3a2f34302d3438203d3e203134303830.roa
File:                     323830313a3161643a3a2f34302d3438203d3e203134303830.roa (raw, json)
Hash identifier:          1Ks5O06fO+SSzT8lIn4nMq/hjfNmFN8OZNS3JOy1Ac0=
Subject key identifier:   2A:CD:8B:D4:9E:C4:87:CB:A2:67:11:5F:23:D5:F2:93:43:BE:8B:EC
Certificate issuer:       /CN=B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7
Certificate serial:       093ABD1C28D733CFCDBFDEFF1FA9896185FB4B0F
Authority key identifier: B3:6F:64:BA:5D:8E:C2:E9:6A:E8:71:2C:84:3D:EB:27:9E:AB:1D:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a3a2f34302d3438203d3e203134303830.roa
Signing time:             Fri 25 Apr 2025 02:50:00 +0000
ROA not before:           Fri 25 Apr 2025 02:45:00 +0000
ROA not after:            Fri 24 Apr 2026 02:50:00 +0000
asID:                     14080
IP address blocks:        2801:1ad::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3a:bd:1c:28:d7:33:cf:cd:bf:de:ff:1f:a9:89:61:85:fb:4b:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7
        Validity
            Not Before: Apr 25 02:45:00 2025 GMT
            Not After : Apr 24 02:50:00 2026 GMT
        Subject: CN=2ACD8BD49EC487CBA267115F23D5F29343BE8BEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f0:87:16:7b:38:b4:d4:6c:07:5a:d4:d1:cb:
                    47:95:6a:a2:27:a3:f8:5c:32:40:aa:ac:5b:f0:6e:
                    3b:f1:d8:15:a6:52:5e:ec:a9:23:d9:63:fa:87:c5:
                    43:f9:8c:56:94:80:b7:1f:44:25:11:6d:ae:d3:36:
                    c8:6d:0d:e6:c0:a2:48:b4:73:d0:a8:3a:21:f9:13:
                    84:57:bc:bd:8c:87:e2:e2:97:5d:f1:73:8d:1b:45:
                    24:c6:8b:11:b6:df:1f:2e:da:9f:fc:41:da:bb:35:
                    c1:56:45:eb:80:2b:6d:df:72:b0:8e:51:ac:1e:ac:
                    02:6d:32:14:60:5f:e4:9b:62:4f:66:40:93:f9:22:
                    b8:84:4d:7e:41:00:eb:50:61:94:45:0f:52:39:eb:
                    f4:36:6d:98:fe:a6:3d:c6:04:68:b3:fe:b0:63:c8:
                    30:9c:09:6f:b4:d3:5a:9e:23:e0:94:b6:b5:2f:e3:
                    17:3c:fb:7c:bd:6e:35:a3:e2:7b:10:6f:2a:d0:ec:
                    64:ab:03:25:40:97:2a:21:2f:e0:3c:1f:c2:77:f0:
                    27:ed:db:19:e1:24:9e:1f:26:7e:b0:ca:6d:8d:34:
                    9e:d0:43:cb:16:ec:9a:2d:c5:b3:0b:86:c6:32:9f:
                    b2:98:f9:1e:88:dd:1c:51:5f:d2:4f:10:64:b7:b5:
                    1d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CD:8B:D4:9E:C4:87:CB:A2:67:11:5F:23:D5:F2:93:43:BE:8B:EC
            X509v3 Authority Key Identifier:
                keyid:B3:6F:64:BA:5D:8E:C2:E9:6A:E8:71:2C:84:3D:EB:27:9E:AB:1D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B36F64BA5D8EC2E96AE8712C843DEB279EAB1DC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D71199B0D46FAD9B2376D7EF9E84F1AD6B97129C5F406CE4D61131D65645E5E8/0/323830313a3161643a3a2f34302d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ad::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:58:55:42:b4:87:60:c3:f6:cd:7f:9e:bd:91:ce:ca:8a:70:
         09:54:82:43:da:eb:54:d1:27:1c:f2:5d:9a:00:17:81:2e:6b:
         e3:f2:4d:71:5e:21:86:f4:1f:0f:33:9d:6e:b3:46:88:1f:6d:
         f8:75:3c:48:e2:1c:53:19:c3:0d:73:da:65:52:fa:b0:44:4d:
         26:e7:ed:49:3c:75:e1:f9:03:22:85:0a:33:8d:f7:22:b7:74:
         bf:c8:a1:74:a3:51:21:72:6a:fd:c1:94:3b:69:6f:d5:43:bf:
         d1:7b:f4:a8:03:67:fa:78:ad:1b:0f:ca:fa:96:51:d2:44:4f:
         7a:6f:58:68:87:6b:5e:1d:75:d2:e4:81:a6:85:de:87:81:8a:
         8f:6e:bd:2b:ff:0a:98:13:94:a0:bd:a6:e4:05:c4:c7:5e:66:
         79:17:94:92:40:ae:cb:fe:04:b9:cb:76:0f:e7:7f:a6:26:a0:
         f2:8b:9b:d2:19:47:02:2d:2f:82:a2:41:af:80:fb:20:31:fc:
         9a:3a:95:ed:de:18:b8:da:e1:58:52:87:95:24:db:00:2b:48:
         84:90:a6:b1:4d:5a:00:00:ed:6d:93:b4:bd:3c:f3:45:4b:8c:
         0d:53:93:89:3f:5a:ea:02:a7:f1:dc:62:85:8d:75:33:2d:d4:
         fc:c4:a3:86
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUCTq9HCjXM8/Nv97/H6mJYYX7Sw8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM2RjY0QkE1RDhFQzJFOTZBRTg3MTJDODQzREVCMjc5
RUFCMURDNzAeFw0yNTA0MjUwMjQ1MDBaFw0yNjA0MjQwMjUwMDBaMDMxMTAvBgNV
BAMTKDJBQ0Q4QkQ0OUVDNDg3Q0JBMjY3MTE1RjIzRDVGMjkzNDNCRThCRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk8IcWezi01GwHWtTRy0eVaqIn
o/hcMkCqrFvwbjvx2BWmUl7sqSPZY/qHxUP5jFaUgLcfRCURba7TNshtDebAoki0
c9CoOiH5E4RXvL2Mh+Lil13xc40bRSTGixG23x8u2p/8Qdq7NcFWReuAK23fcrCO
UawerAJtMhRgX+SbYk9mQJP5IriETX5BAOtQYZRFD1I56/Q2bZj+pj3GBGiz/rBj
yDCcCW+001qeI+CUtrUv4xc8+3y9bjWj4nsQbyrQ7GSrAyVAlyohL+A8H8J38Cft
2xnhJJ4fJn6wym2NNJ7QQ8sW7JotxbMLhsYyn7KY+R6I3RxRX9JPEGS3tR0HAgMB
AAGjggLGMIICwjAdBgNVHQ4EFgQUKs2L1J7Eh8uiZxFfI9Xyk0O+i+wwHwYDVR0j
BBgwFoAUs29kul2Owulq6HEshD3rJ56rHccwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy9ENzExOTlCMEQ0NkZBRDlCMjM3NkQ3RUY5RTg0RjFBRDZC
OTcxMjlDNUY0MDZDRTRENjExMzFENjU2NDVFNUU4LzAvQjM2RjY0QkE1RDhFQzJF
OTZBRTg3MTJDODQzREVCMjc5RUFCMURDNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC9CMzZGNjRCQTVEOEVDMkU5NkFF
ODcxMkM4NDNERUIyNzlFQUIxREM3LmNlcjCBwwYIKwYBBQUHAQsEgbYwgbMwgbAG
CCsGAQUFBzALhoGjcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvRDcxMTk5QjBENDZGQUQ5QjIzNzZEN0VGOUU4NEYxQUQ2Qjk3MTI5QzVG
NDA2Q0U0RDYxMTMxRDY1NjQ1RTVFOC8wLzMyMzgzMDMxM2EzMTYxNjQzYTNhMmYz
NDMwMmQzNDM4MjAzZDNlMjAzMTM0MzAzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKAEBrQAwDQYJ
KoZIhvcNAQELBQADggEBAFBYVUK0h2DD9s1/nr2RzsqKcAlUgkPa61TRJxzyXZoA
F4Eua+PyTXFeIYb0Hw8znW6zRogfbfh1PEjiHFMZww1z2mVS+rBETSbn7Uk8deH5
AyKFCjON9yK3dL/IoXSjUSFyav3BlDtpb9VDv9F79KgDZ/p4rRsPyvqWUdJET3pv
WGiHa14dddLkgaaF3oeBio9uvSv/CpgTlKC9puQFxMdeZnkXlJJArsv+BLnLdg/n
f6YmoPKLm9IZRwItL4KiQa+A+yAx/Jo6le3eGLja4VhSh5Uk2wArSISQprFNWgAA
7W2TtL0880VLjA1Tk4k/WuoCp/HcYoWNdTMt1PzEo4Y=
-----END CERTIFICATE-----