Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e20323634373838.roa
File:                     323830303a3261303a3a2f33322d3438203d3e20323634373838.roa (raw, json)
Hash identifier:          Nyg0RBndadz88OZoyOUv1Zjlz4nVv4BZsvweA1612xE=
Subject key identifier:   2E:DD:9B:6F:14:14:CD:A7:43:6C:B7:F5:43:25:E7:2D:A3:85:02:77
Certificate issuer:       /CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
Certificate serial:       63BEA9A1939BDD2EE1CC2ED5612A1BAFF31CB2CB
Authority key identifier: 96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e20323634373838.roa
Signing time:             Tue 04 Feb 2025 18:11:23 +0000
ROA not before:           Tue 04 Feb 2025 18:06:23 +0000
ROA not after:            Tue 03 Feb 2026 18:11:23 +0000
asID:                     264788
IP address blocks:        2800:2a0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:be:a9:a1:93:9b:dd:2e:e1:cc:2e:d5:61:2a:1b:af:f3:1c:b2:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96F6D055361134166E9B66FB555FF27DCEDBF85D
        Validity
            Not Before: Feb  4 18:06:23 2025 GMT
            Not After : Feb  3 18:11:23 2026 GMT
        Subject: CN=2EDD9B6F1414CDA7436CB7F54325E72DA3850277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:cd:1a:6c:55:13:c9:0d:ca:c2:81:8c:cf:68:
                    3d:99:00:6c:9e:67:1d:4f:81:0d:24:ec:61:40:74:
                    21:23:42:38:38:40:19:58:72:a9:fd:79:a8:0f:ff:
                    0f:60:ab:16:69:0b:eb:73:1d:3a:56:e3:aa:73:70:
                    5e:17:be:47:29:5d:61:df:c3:21:8a:a9:7a:2e:a0:
                    dd:71:d9:c1:24:8e:d1:08:95:e1:0b:9f:db:9a:8b:
                    7f:77:5c:7e:18:fe:1f:c9:0b:e2:58:d7:2b:42:90:
                    66:0d:f3:36:27:d2:9a:eb:80:8e:3b:55:3e:cb:25:
                    70:22:f4:ed:2e:dc:d5:f2:91:d3:0b:65:27:f5:d7:
                    94:3c:a8:43:d7:f2:86:01:b6:26:43:3c:30:83:fd:
                    7b:52:39:e4:97:4c:50:66:b2:56:cd:cc:75:41:da:
                    74:f8:51:fa:2d:47:65:0c:56:f7:47:4b:dd:f9:e5:
                    45:6f:56:43:95:44:95:19:49:64:3f:0d:f8:52:3e:
                    1d:44:c9:0a:2b:fd:b5:99:d7:c9:ec:e4:c5:c9:9e:
                    b7:7f:fd:b6:37:2c:fb:c7:92:41:5d:d0:7e:e5:67:
                    16:ae:27:07:65:76:70:2d:5b:88:66:4b:a6:4d:b1:
                    9b:63:fe:e6:31:48:07:6e:1a:58:d2:8c:f0:c0:a4:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DD:9B:6F:14:14:CD:A7:43:6C:B7:F5:43:25:E7:2D:A3:85:02:77
            X509v3 Authority Key Identifier:
                keyid:96:F6:D0:55:36:11:34:16:6E:9B:66:FB:55:5F:F2:7D:CE:DB:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/96F6D055361134166E9B66FB555FF27DCEDBF85D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/F7959A2DB129AB6818B9F2CDFCA54039039708CB847724BB23423576862D4A7F/0/323830303a3261303a3a2f33322d3438203d3e20323634373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:4c:44:bd:ae:a4:a2:07:84:f1:6e:da:68:19:04:88:e0:56:
         93:06:63:d8:00:19:a6:74:01:70:ef:27:fa:e7:87:18:5d:88:
         46:f1:6a:75:6d:6f:51:8c:d0:e7:78:29:59:37:43:2e:67:1e:
         49:14:05:1c:5f:58:f2:44:5e:7b:a4:77:cc:dc:22:53:23:09:
         8e:51:c6:80:cf:b2:af:38:c2:0e:ee:ad:22:30:a3:03:8b:8b:
         24:d1:d2:22:81:b8:d3:82:2a:c0:e3:25:6d:fc:29:d9:f1:f4:
         07:40:f5:c6:56:0a:a6:b2:e8:2c:59:86:a6:5d:c9:79:56:6e:
         22:5a:24:3c:5a:93:db:28:49:3e:bf:2a:f7:9a:fa:47:01:76:
         ba:a3:38:7c:d8:21:d0:8d:b4:15:90:a6:a1:a9:93:e8:99:ca:
         39:e6:1d:10:bb:4d:b5:b7:04:08:4f:5e:eb:4b:73:4d:54:e6:
         ba:0d:24:86:bd:cb:20:18:63:73:6c:68:da:82:8f:54:53:2d:
         f4:99:50:8c:c1:52:cb:c1:3b:b5:a9:2c:1a:e1:25:f8:61:f1:
         06:53:4f:1b:59:9a:46:eb:41:52:36:39:6a:3a:a2:87:4c:08:
         d0:f7:7d:27:95:07:41:01:10:b6:79:61:a3:c9:46:c1:c6:05:
         44:5e:4d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----