Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          7UfKWaQAr95bPBridFn/arYQ/3LdRnATvxQ9sAAQ4B4=
Subject key identifier:   9A:92:5E:44:AE:CE:10:7C:12:8F:BF:D2:8A:42:D8:4B:3F:04:65:C3
Certificate issuer:       /CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
Certificate serial:       1A2B9AB1FBB32660650E4400898163A967B1C9F4
Authority key identifier: DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Tue 04 Feb 2025 18:03:29 +0000
ROA not before:           Tue 04 Feb 2025 17:58:29 +0000
ROA not after:            Tue 03 Feb 2026 18:03:29 +0000
asID:                     14080
IP address blocks:        2801:13:2800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:2b:9a:b1:fb:b3:26:60:65:0e:44:00:89:81:63:a9:67:b1:c9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8
        Validity
            Not Before: Feb  4 17:58:29 2025 GMT
            Not After : Feb  3 18:03:29 2026 GMT
        Subject: CN=9A925E44AECE107C128FBFD28A42D84B3F0465C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0c:0f:50:20:47:08:08:cd:3e:6c:d4:ee:c1:
                    d5:bb:dc:ac:30:c7:50:6e:56:72:88:fc:93:51:28:
                    d1:68:c0:32:19:aa:fc:8e:53:2c:a6:3f:9d:1b:52:
                    dd:5d:66:e0:4c:b5:36:ea:1b:62:d0:51:e2:8e:7a:
                    c3:42:ab:3e:c1:be:93:8b:ed:32:6e:8b:e0:31:0f:
                    df:21:40:e2:03:a3:54:57:f7:06:de:e3:1b:bd:16:
                    19:78:52:c1:2b:1d:5a:f9:80:60:b1:08:4e:50:59:
                    0f:52:b4:01:b7:03:26:73:b8:1a:04:82:de:35:56:
                    4e:29:be:a3:7d:04:38:fa:e7:12:89:85:60:08:ac:
                    f8:0d:bf:6e:e7:4c:39:dc:90:76:6a:8d:2a:a7:e6:
                    ba:d5:f4:28:b2:72:30:0d:3c:75:9c:a5:82:17:7c:
                    b6:0c:30:d6:68:5e:5b:8f:7e:12:3c:cf:2f:78:d7:
                    98:cf:fb:9a:07:69:78:0d:3e:de:db:46:ae:69:e0:
                    4c:9b:0d:ae:53:22:d2:49:45:8d:f2:81:53:c4:7b:
                    74:68:7e:99:c5:27:93:74:aa:d6:75:9c:0b:6f:2b:
                    c7:5c:7a:55:b7:da:73:7c:c4:4e:45:e5:0d:2c:a3:
                    43:b7:a8:d1:12:81:99:b6:a6:6f:f1:5b:4a:3e:f7:
                    50:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:92:5E:44:AE:CE:10:7C:12:8F:BF:D2:8A:42:D8:4B:3F:04:65:C3
            X509v3 Authority Key Identifier:
                keyid:DF:B8:DF:1F:0B:E6:09:FB:6F:98:00:3E:B9:6C:9C:DE:72:B5:3A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DFB8DF1F0BE609FB6F98003EB96C9CDE72B53AF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F71344DC9977AF21B2F3CDF655628295968F99079B5A9F39ABCD04A7949D9D31/0/323830313a31333a323830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:2800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:94:10:3a:6b:ac:87:41:90:66:bf:c1:bf:ac:ff:6a:eb:c9:
         90:95:01:bf:8b:9b:05:9e:25:bb:e4:29:43:38:0a:b7:9b:29:
         45:4e:55:34:83:78:3e:76:b1:39:11:02:64:63:d7:28:b0:15:
         b3:e9:9b:d7:5f:88:f7:6f:64:8b:b3:f8:eb:8b:41:57:87:40:
         a6:34:d5:bc:3c:98:36:81:31:7c:a4:1e:f3:14:0f:2a:90:48:
         55:fb:60:4b:8e:8d:83:ac:33:aa:79:49:90:ad:3d:1a:20:63:
         a9:c7:7d:d9:21:cb:96:dc:89:f0:18:9c:d3:64:01:fd:20:fc:
         b5:e2:6c:b1:67:cb:f8:53:9a:39:47:fc:31:36:ad:10:58:d9:
         9a:df:63:cc:1b:7e:fc:c7:79:94:0c:bc:0a:8a:45:f3:2c:ac:
         c6:35:f0:88:4f:b5:fd:c4:31:9d:e4:99:fb:fc:78:a1:97:d1:
         6a:c7:27:4a:55:4d:68:0b:06:ab:6b:91:e7:0e:8c:a6:eb:43:
         d3:c1:16:63:79:f6:a1:20:f4:76:17:c5:25:5a:d3:60:58:fb:
         5f:ed:3d:5f:35:ea:15:d1:63:1b:d0:84:c4:61:06:3a:8b:83:
         ac:77:0d:55:87:b2:7f:d4:2b:85:f3:63:a8:be:d5:e4:8b:a3:
         57:bf:a2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----