Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532343a3a2f34382d3438203d3e20323637383438.roa
File:                     323830303a6265303a346532343a3a2f34382d3438203d3e20323637383438.roa (raw, json)
Hash identifier:          md25DfnIB2nlDGA+6DcN5QzJx02z2kf4D9ow+5NOf1I=
Subject key identifier:   2A:E0:A9:E5:F4:42:3C:38:14:C1:43:A3:77:90:AE:43:AD:32:0E:A1
Certificate issuer:       /CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
Certificate serial:       11355FCD5D41D61BC33BD4ACC7D2CF1D3060A42B
Authority key identifier: 6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532343a3a2f34382d3438203d3e20323637383438.roa
Signing time:             Tue 04 Feb 2025 20:01:48 +0000
ROA not before:           Tue 04 Feb 2025 19:56:48 +0000
ROA not after:            Tue 03 Feb 2026 20:01:48 +0000
asID:                     267848
IP address blocks:        2800:be0:4e24::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:35:5f:cd:5d:41:d6:1b:c3:3b:d4:ac:c7:d2:cf:1d:30:60:a4:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A093BB581DCEEE5213FD9E637A8B33F86058AAD
        Validity
            Not Before: Feb  4 19:56:48 2025 GMT
            Not After : Feb  3 20:01:48 2026 GMT
        Subject: CN=2AE0A9E5F4423C3814C143A37790AE43AD320EA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:27:55:59:1d:1a:44:f7:14:31:31:b7:90:
                    09:b5:19:7d:ba:10:a9:36:b3:7c:0a:2d:2c:89:fb:
                    01:a2:40:47:71:fe:65:50:98:dd:a3:69:08:75:d9:
                    3f:d4:14:4e:1b:9b:8e:01:6e:4a:18:25:6e:d9:93:
                    13:b1:df:dc:32:ad:d2:09:3f:c5:60:3d:91:4b:14:
                    59:61:14:8b:ec:27:25:9d:24:84:92:3a:8a:5c:f9:
                    b6:4b:d1:32:b7:85:59:ce:45:19:fb:f7:60:9e:1c:
                    bc:c1:a7:94:6a:96:13:fe:84:4c:1e:fd:05:6e:89:
                    9d:60:2b:f8:0e:66:6c:2a:e9:7c:dd:00:b7:16:87:
                    49:ab:72:8d:bb:a3:3d:df:f1:a8:6f:35:6f:a8:38:
                    a1:38:66:cf:03:af:f3:f6:fb:eb:ad:9b:40:1b:43:
                    46:c8:c0:dc:e1:3d:eb:12:a7:b5:f5:14:bf:7a:09:
                    74:f3:24:74:91:e8:69:ce:a8:13:0f:53:a5:5b:8b:
                    8a:2d:bd:13:c7:e9:cb:3f:ab:55:cf:10:ee:b9:84:
                    d7:9b:58:46:38:2e:dc:95:41:74:92:58:c6:27:da:
                    05:92:9e:2a:16:1e:93:e5:16:d9:78:76:f0:1c:dd:
                    25:dd:9d:16:b8:f3:a1:88:3f:dc:0e:fd:73:cb:1c:
                    d6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E0:A9:E5:F4:42:3C:38:14:C1:43:A3:77:90:AE:43:AD:32:0E:A1
            X509v3 Authority Key Identifier:
                keyid:6A:09:3B:B5:81:DC:EE:E5:21:3F:D9:E6:37:A8:B3:3F:86:05:8A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A093BB581DCEEE5213FD9E637A8B33F86058AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F5055E9B7300A99B42C26142741A423DC347CB616FEBD41BA06655CD716A020F/0/323830303a6265303a346532343a3a2f34382d3438203d3e20323637383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:be0:4e24::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:45:06:7e:2f:0b:0c:8e:ac:ef:f1:1b:37:7b:23:59:65:91:
         03:6d:f4:d9:88:9a:cb:47:f9:79:08:50:8a:86:30:0b:c5:b0:
         50:8f:98:b0:f6:40:25:b4:0a:3d:1f:77:bd:f2:bd:81:a7:75:
         90:9f:aa:0d:14:54:63:99:ed:f3:bc:2d:88:40:1e:43:7f:bb:
         50:2b:c5:8c:dd:d6:8e:d8:ea:ea:35:78:f7:a8:d5:7b:1b:29:
         24:80:8a:d3:91:05:c9:97:ae:bc:44:90:54:be:01:29:8e:37:
         a8:bf:39:1f:67:e5:b7:a7:64:77:60:14:5d:15:92:21:c3:5d:
         34:70:1e:12:d0:ee:ba:2b:97:54:b0:d5:4e:05:68:60:8e:22:
         4c:9b:30:03:72:b3:41:6b:40:11:3a:bf:fa:e6:b6:9d:02:f6:
         d8:4b:5b:11:b7:00:c3:51:0d:aa:e1:0d:97:63:82:5b:87:ea:
         c8:f8:55:90:b6:4c:2e:5b:bc:0f:0d:c0:fd:38:90:cb:45:cd:
         d8:75:9d:08:1a:61:16:fa:f6:8b:ca:16:d9:3c:62:d1:34:9b:
         d2:07:b4:0b:db:97:56:0a:7c:d4:8e:93:68:19:a0:5e:ff:3e:
         92:9f:bb:fe:f8:f2:4c:02:10:76:0f:59:bc:0f:a2:e1:23:c8:
         f7:26:e2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----