Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F3227317C0EB62AC2C7919801AD3EE6470616CA7FC54D1CF04C1952937A790FC/0/323830313a31313a323830303a3a2f34382d3438203d3e20323639393932.roa
File:                     323830313a31313a323830303a3a2f34382d3438203d3e20323639393932.roa (raw, json)
Hash identifier:          LLOcmkNh/UCMQ4bZ/auAVXjFgQGhCYJwVHQwaqKDOhE=
Subject key identifier:   7E:28:7F:C2:CE:F3:AA:04:46:94:BF:BE:C9:A8:EF:E5:86:4C:46:59
Certificate issuer:       /CN=A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC
Certificate serial:       4D54BD226E899F1515D7F40A97ECA584EF74736C
Authority key identifier: A3:54:2B:13:5B:BE:D4:B3:6D:F5:AF:7D:01:9B:48:E3:C2:BB:2A:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F3227317C0EB62AC2C7919801AD3EE6470616CA7FC54D1CF04C1952937A790FC/0/323830313a31313a323830303a3a2f34382d3438203d3e20323639393932.roa
Signing time:             Tue 04 Feb 2025 18:46:19 +0000
ROA not before:           Tue 04 Feb 2025 18:41:19 +0000
ROA not after:            Tue 03 Feb 2026 18:46:19 +0000
asID:                     269992
IP address blocks:        2801:11:2800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:54:bd:22:6e:89:9f:15:15:d7:f4:0a:97:ec:a5:84:ef:74:73:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC
        Validity
            Not Before: Feb  4 18:41:19 2025 GMT
            Not After : Feb  3 18:46:19 2026 GMT
        Subject: CN=7E287FC2CEF3AA044694BFBEC9A8EFE5864C4659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e6:84:d1:e5:1b:92:d6:af:1b:46:13:56:c4:
                    5f:12:5c:2d:1d:16:41:bc:dc:e2:f6:c6:3e:81:71:
                    1c:88:3b:19:36:63:3d:da:65:0e:10:2c:87:62:3e:
                    5b:57:e1:3c:c3:5e:a3:af:61:db:2f:e9:21:84:d1:
                    8f:e8:54:85:96:67:22:d7:e3:84:a8:5e:8d:f7:7c:
                    1a:bd:1c:20:6c:4f:e9:6e:11:a8:18:d6:ec:b8:cf:
                    a2:c5:60:53:b5:4d:2a:23:8e:f8:30:94:5e:bd:d3:
                    48:85:22:0f:97:ad:9d:f4:27:c8:c8:5f:4a:ec:60:
                    00:67:92:dc:be:25:eb:bf:49:30:e8:88:76:f7:b3:
                    18:d3:d0:83:c1:a6:fe:0b:fb:a5:9b:e5:e9:ec:74:
                    3a:e6:5c:d5:56:ea:24:86:ac:53:1c:8c:f2:ef:76:
                    f5:20:6a:69:97:0a:e0:d3:30:e6:65:89:bb:c0:5c:
                    69:89:38:09:31:d1:be:e7:1e:dc:94:ea:86:9f:9b:
                    87:30:ed:fe:51:f7:cf:30:2b:69:32:3b:50:27:28:
                    7e:00:1f:7c:40:fc:48:1d:1a:fa:70:08:b3:d4:67:
                    3d:5f:59:f0:19:2e:d7:b5:1b:ff:f0:59:48:1b:95:
                    b8:16:cf:db:5e:b4:f7:d4:32:ca:9b:9d:00:a6:57:
                    39:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:28:7F:C2:CE:F3:AA:04:46:94:BF:BE:C9:A8:EF:E5:86:4C:46:59
            X509v3 Authority Key Identifier:
                keyid:A3:54:2B:13:5B:BE:D4:B3:6D:F5:AF:7D:01:9B:48:E3:C2:BB:2A:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F3227317C0EB62AC2C7919801AD3EE6470616CA7FC54D1CF04C1952937A790FC/0/A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A3542B135BBED4B36DF5AF7D019B48E3C2BB2ACC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F3227317C0EB62AC2C7919801AD3EE6470616CA7FC54D1CF04C1952937A790FC/0/323830313a31313a323830303a3a2f34382d3438203d3e20323639393932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:3c:bf:3e:b7:43:43:85:97:10:7b:9e:2b:40:f7:14:d3:0e:
         6b:94:93:16:92:01:ab:82:cd:bc:ce:0a:33:a4:1e:75:c7:ba:
         8d:17:82:ee:a3:f6:aa:bf:78:72:02:ac:49:b4:ce:44:a0:fe:
         70:a9:7d:b4:04:0f:43:f6:a0:4c:27:d9:20:b2:60:9a:12:ce:
         c7:03:bd:85:d2:62:64:d3:4a:a4:2f:b4:6c:18:0d:15:d7:30:
         2c:19:5d:07:92:bc:06:d8:cf:12:2c:3c:33:af:67:9d:af:96:
         55:70:22:4e:0b:12:61:9f:c9:0d:0e:d7:03:e4:7c:ae:26:58:
         59:9c:28:68:8a:b6:60:b9:f7:fa:02:c3:2b:4b:f1:56:91:91:
         04:33:ff:d5:4d:a9:d5:95:a9:21:ea:e7:4e:3e:04:f5:09:c4:
         ea:95:90:24:18:c4:48:8f:e2:7f:c9:52:85:70:9c:dc:03:16:
         be:02:98:37:ae:9f:3c:c4:8e:73:c8:ec:13:9a:f7:6f:79:1c:
         b5:8f:dc:39:21:a5:0c:a1:19:66:be:fd:56:b6:60:d7:43:c3:
         c4:cf:c0:b5:17:0f:2e:9a:5b:be:9e:70:0f:a2:53:42:a2:65:
         d7:39:a3:60:53:ed:b1:36:bb:cb:69:27:fe:92:6a:d7:6e:be:
         a3:5c:ff:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----