Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430333a3a2f34382d3438203d3e203237383832.roa
File:                     323830303a3332303a383430333a3a2f34382d3438203d3e203237383832.roa (raw, json)
Hash identifier:          Eu/hIJZ8OLcMIR2nfKJ/xzHkVd7Ni+JN6kBFm0Z9UhE=
Subject key identifier:   7F:C4:7A:9A:A0:62:CF:62:D4:13:60:71:E8:3F:B2:2A:D3:5A:A2:2F
Certificate issuer:       /CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
Certificate serial:       3B2BAC37F1566B19874380AEF966CD8F15823F22
Authority key identifier: B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430333a3a2f34382d3438203d3e203237383832.roa
Signing time:             Tue 04 Feb 2025 20:05:42 +0000
ROA not before:           Tue 04 Feb 2025 20:00:42 +0000
ROA not after:            Tue 03 Feb 2026 20:05:42 +0000
asID:                     27882
IP address blocks:        2800:320:8403::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2b:ac:37:f1:56:6b:19:87:43:80:ae:f9:66:cd:8f:15:82:3f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3866813178FF550E6FCABCD492387DD1D0E08A5
        Validity
            Not Before: Feb  4 20:00:42 2025 GMT
            Not After : Feb  3 20:05:42 2026 GMT
        Subject: CN=7FC47A9AA062CF62D4136071E83FB22AD35AA22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e3:a6:e2:ee:69:9c:ce:d2:35:e4:e3:b9:34:
                    29:a4:a9:ac:e8:06:4a:81:05:df:4b:9d:0e:e5:fa:
                    1d:36:3e:5e:b8:7d:e5:46:3b:4e:84:80:18:44:dd:
                    f5:fd:ae:a4:65:9e:22:5e:3d:15:38:cc:57:83:db:
                    d3:ad:a1:5e:b4:6e:12:30:7b:ec:46:59:db:4e:6a:
                    fd:91:40:57:c4:99:8b:43:f1:dd:2c:39:2a:a2:fb:
                    d5:03:45:07:b3:b9:b9:c9:35:1b:a7:c9:d3:3b:fe:
                    c0:91:d5:25:35:65:35:0e:5b:c6:94:93:85:53:35:
                    37:33:f8:43:3d:47:38:8e:d7:80:70:d0:bb:a1:fb:
                    28:d9:12:33:e1:b9:cf:c0:a7:ba:db:5e:46:76:0c:
                    0e:6d:7d:12:5a:f7:46:1b:89:e8:f4:86:55:e1:71:
                    00:32:8b:91:12:a9:46:89:1e:38:d1:a8:0b:8e:d7:
                    f5:21:8d:51:cc:02:85:ba:56:72:22:c5:67:48:2e:
                    e8:b6:4f:21:d9:60:39:8e:7f:72:cf:27:ea:61:ae:
                    41:ca:be:46:1a:56:38:81:9d:59:8a:8e:32:21:f5:
                    67:de:1e:26:50:40:d0:fc:be:88:a0:e0:46:5a:01:
                    5d:6c:b7:89:35:88:be:c5:d5:44:5f:9c:99:e4:74:
                    83:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C4:7A:9A:A0:62:CF:62:D4:13:60:71:E8:3F:B2:2A:D3:5A:A2:2F
            X509v3 Authority Key Identifier:
                keyid:B3:86:68:13:17:8F:F5:50:E6:FC:AB:CD:49:23:87:DD:1D:0E:08:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B3866813178FF550E6FCABCD492387DD1D0E08A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F157BD59DABCB6D961AC0F2D00BA596759FAC82A0EAEDE7D129DF241CBEFBF19/0/323830303a3332303a383430333a3a2f34382d3438203d3e203237383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:320:8403::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:29:c5:d1:36:03:b9:73:7c:bb:1c:b5:d0:e0:47:9b:0a:31:
         19:31:b8:80:22:22:b2:44:f3:88:2e:b2:c7:24:8b:e5:c0:18:
         20:19:db:ee:91:92:4e:be:f6:85:42:1c:56:0d:1a:d0:c2:b9:
         69:97:1e:1c:57:42:b9:59:ef:24:58:7e:36:44:27:bd:cd:8b:
         5d:69:5a:17:78:01:35:39:3e:7a:f8:ce:0e:83:c1:c6:c9:18:
         bc:cd:23:ac:ec:84:f4:9f:bc:19:d4:b7:8a:a1:1b:a2:7e:d2:
         62:25:71:8f:66:92:4f:4a:15:f8:c9:49:2d:67:c8:99:1c:fe:
         a6:90:8c:e6:28:d7:d5:e7:e5:9d:10:7a:98:23:7b:9a:37:d1:
         a5:67:e4:e4:1b:f4:f5:84:06:df:4c:6b:eb:6c:3e:69:c4:70:
         f2:ad:45:e6:ad:bd:dd:a5:fc:7f:67:31:74:33:cb:8b:03:57:
         c9:8f:b6:ce:da:e2:4e:35:5e:50:49:c3:75:5e:3f:ff:c3:e1:
         21:50:45:cb:08:28:25:e1:83:c2:7a:aa:ed:33:19:7a:ff:99:
         f6:24:94:85:6d:f5:fe:b4:67:4b:8e:58:ce:01:87:3b:7e:a8:
         51:9e:ed:36:14:84:eb:4e:3e:8a:1e:2a:02:09:a6:05:4e:a0:
         0a:df:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----