Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/323830313a3133353a3a2f34382d3438203d3e20323733313635.roa
File:                     323830313a3133353a3a2f34382d3438203d3e20323733313635.roa (raw, json)
Hash identifier:          EYJNwVRjc/Bvj94ZzTcxLUuk7l6XIFw5PTKVPlXHcOY=
Subject key identifier:   02:0F:C2:3D:5E:C3:A0:18:60:A8:1C:9E:85:1A:AA:95:35:93:BC:6D
Certificate issuer:       /CN=F4F8147BF99626D17AFEE91E12422301459D2C55
Certificate serial:       3EA2E2EE8756E0B793EA263282BD4276D4708ADC
Authority key identifier: F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/323830313a3133353a3a2f34382d3438203d3e20323733313635.roa
Signing time:             Sat 26 Oct 2024 11:30:00 +0000
ROA not before:           Sat 26 Oct 2024 11:25:00 +0000
ROA not after:            Sat 25 Oct 2025 11:30:00 +0000
asID:                     273165
IP address blocks:        2801:135::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a2:e2:ee:87:56:e0:b7:93:ea:26:32:82:bd:42:76:d4:70:8a:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4F8147BF99626D17AFEE91E12422301459D2C55
        Validity
            Not Before: Oct 26 11:25:00 2024 GMT
            Not After : Oct 25 11:30:00 2025 GMT
        Subject: CN=020FC23D5EC3A01860A81C9E851AAA953593BC6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:3e:ea:47:87:a6:80:09:84:59:1e:37:e6:
                    1c:ae:2d:c3:0f:10:4d:9a:6c:6f:98:b0:08:16:6c:
                    bc:95:5c:79:6b:93:60:e1:e4:23:07:71:93:5a:49:
                    1e:54:21:85:57:a4:b9:d5:f0:db:df:4d:7d:a2:b3:
                    e7:c9:bc:44:d2:8b:b1:ac:cf:bd:52:a6:5c:c4:ec:
                    b9:ee:1f:69:40:20:fa:3e:d4:10:a8:e1:60:7d:52:
                    44:34:54:d1:89:70:8c:48:c7:a2:c9:2c:17:5e:bc:
                    45:fa:ac:e5:67:48:82:55:cd:a6:8b:9c:5c:f7:de:
                    22:42:17:16:d9:cb:c5:98:9b:1d:c3:68:70:db:8e:
                    0f:34:97:24:dc:72:9f:65:2a:52:b8:c0:3a:f2:f2:
                    ce:14:d2:b2:c7:30:7d:b6:e4:69:38:4e:49:31:23:
                    94:5b:2d:60:b5:f1:7f:94:63:93:38:01:fd:cc:4f:
                    79:aa:73:e3:eb:07:00:7e:29:eb:5e:67:45:d2:8d:
                    44:ac:2e:78:1f:ff:bd:56:55:4d:de:7c:5f:f9:04:
                    4a:b9:f1:24:17:9b:9b:b8:e2:7a:0c:b2:d5:e9:38:
                    26:cb:51:c0:53:26:d8:c2:b3:53:a3:ad:b1:ae:92:
                    05:0f:30:4a:8c:a9:b3:e0:d3:3a:d0:d8:0c:eb:82:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0F:C2:3D:5E:C3:A0:18:60:A8:1C:9E:85:1A:AA:95:35:93:BC:6D
            X509v3 Authority Key Identifier:
                keyid:F4:F8:14:7B:F9:96:26:D1:7A:FE:E9:1E:12:42:23:01:45:9D:2C:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/F4F8147BF99626D17AFEE91E12422301459D2C55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F4F8147BF99626D17AFEE91E12422301459D2C55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2FDE7FF9C3A66561AFE3B8D77A6F3D0600826CFAF42B1A0DADA0592B9E1D2E95/0/323830313a3133353a3a2f34382d3438203d3e20323733313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:135::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:91:39:ae:28:52:c3:ed:da:c9:ad:7c:ac:1f:6b:d0:42:05:
         2e:10:68:7d:13:21:48:6a:ce:86:e5:dc:0f:a1:10:26:5d:6c:
         e0:be:69:7a:98:5f:98:0a:f0:91:6f:20:61:41:3f:d0:c4:d6:
         3a:ad:dc:00:5b:06:e7:19:5a:37:7d:a7:14:ab:e7:fe:ea:3e:
         de:22:1f:11:b8:7e:03:9b:6f:13:bc:29:3e:f9:90:ba:61:85:
         3c:4f:99:33:f5:1b:c2:00:35:3e:21:6a:6e:cb:23:48:d6:73:
         91:8a:44:76:2d:6d:dd:e1:3a:82:8c:96:e7:2a:92:76:a4:e9:
         56:97:b8:10:ad:32:16:f0:69:58:44:a7:d8:d2:49:c0:f8:36:
         0b:f3:87:80:ba:80:88:7b:74:c5:b9:fa:f0:bf:2f:c2:e6:3b:
         23:71:0c:75:3a:e3:3f:b5:83:42:cc:51:9d:2a:6a:94:3a:31:
         3a:e9:05:62:a8:72:85:f3:60:98:bc:bc:05:6f:74:d9:6a:2c:
         3a:7e:17:4d:29:98:6f:17:13:f2:10:34:4c:3a:35:46:21:b7:
         fe:8c:6a:34:c1:dd:78:44:19:a0:f4:07:47:2b:f4:2a:a3:88:
         4c:08:2e:b6:cd:7e:44:11:e9:0b:a0:27:33:7d:9f:bc:7a:06:
         c6:e6:54:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----