Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a3a2f33322d3438203d3e203138373334.roa
File:                     323030313a313237383a3a2f33322d3438203d3e203138373334.roa (raw, json)
Hash identifier:          esINbfjGKx5cwloq7kAjMxlUCfQ+y4+v/59xYVJgh0A=
Subject key identifier:   F5:D4:3B:3B:28:6A:73:3B:C1:45:FD:3B:61:A6:20:5F:06:0E:2E:FF
Certificate issuer:       /CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
Certificate serial:       6DF31970FAAA9D158133EBA596AAA4C0A092DD43
Authority key identifier: 79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a3a2f33322d3438203d3e203138373334.roa
Signing time:             Tue 05 Mar 2024 17:50:46 +0000
ROA not before:           Tue 05 Mar 2024 17:45:46 +0000
ROA not after:            Tue 04 Mar 2025 17:50:46 +0000
asID:                     18734
IP address blocks:        2001:1278::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f3:19:70:fa:aa:9d:15:81:33:eb:a5:96:aa:a4:c0:a0:92:dd:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7997A25836B429E9E6D15518DC739700B6C9C4FD
        Validity
            Not Before: Mar  5 17:45:46 2024 GMT
            Not After : Mar  4 17:50:46 2025 GMT
        Subject: CN=F5D43B3B286A733BC145FD3B61A6205F060E2EFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fd:52:b6:45:98:8c:c0:a6:64:b5:ed:62:89:
                    6c:8b:6f:29:3a:37:6c:43:ef:16:fe:bf:41:6a:f0:
                    bc:66:aa:5a:e4:27:6f:f7:c9:e8:0c:cf:da:5f:9a:
                    82:87:8d:c8:b2:b6:d4:b5:d8:64:d9:b5:dc:de:c7:
                    55:85:25:52:c7:37:46:ea:37:8f:23:fa:72:47:fa:
                    b8:ca:63:6f:8e:f0:e6:58:31:b1:a8:d9:65:72:1a:
                    59:87:71:b9:d4:4e:80:21:7a:ee:13:60:02:91:2d:
                    6a:f8:91:98:f6:0f:17:69:7f:46:8c:44:bc:2b:9e:
                    3a:8e:9f:a5:ad:fa:b5:e3:8c:5e:d6:bc:51:c9:2c:
                    d1:6b:34:56:9a:16:5e:6c:b3:be:0b:fc:5f:b9:86:
                    e5:d1:7e:d9:2a:c1:aa:c0:94:97:03:a3:e4:b3:eb:
                    f2:b5:44:ef:a7:c3:52:c3:cf:cf:e2:a0:20:af:a2:
                    13:1b:5f:fe:02:52:2d:23:10:b4:3f:10:9c:d5:3b:
                    50:99:cb:be:6b:f7:d7:b4:da:34:fc:fb:15:e5:c3:
                    db:6c:8f:a6:09:a0:6d:cd:14:16:a6:29:c6:17:bd:
                    bc:02:ae:6b:ae:17:ef:d7:6c:15:d6:19:d4:91:b6:
                    dd:cb:c1:ad:02:bc:5b:b2:36:27:e4:5f:7e:75:79:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D4:3B:3B:28:6A:73:3B:C1:45:FD:3B:61:A6:20:5F:06:0E:2E:FF
            X509v3 Authority Key Identifier:
                keyid:79:97:A2:58:36:B4:29:E9:E6:D1:55:18:DC:73:97:00:B6:C9:C4:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7997A25836B429E9E6D15518DC739700B6C9C4FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4F2FFFB0B3834045F7C4282AEB4C645DD9461750CCD5338F8CC6FD65F5AE1CCA/0/323030313a313237383a3a2f33322d3438203d3e203138373334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1278::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:69:28:ba:fe:b3:c9:b6:27:32:d9:95:64:94:9b:3a:51:9e:
         56:b1:45:28:51:f1:04:c2:c2:cf:1a:52:ce:03:d3:fe:2e:a9:
         a6:71:47:bb:4f:5c:76:cb:61:dc:62:9a:24:04:e7:72:9f:55:
         ec:50:71:9c:73:86:5a:3e:e0:1c:ee:b6:41:aa:64:b0:00:6b:
         15:d9:e1:67:11:66:dd:b3:2f:fe:cb:c1:9d:b6:f3:cd:fa:60:
         78:07:04:0c:8a:73:1c:fc:50:df:fb:c5:5d:b1:d9:18:a2:f4:
         dd:aa:31:8f:7c:13:9d:9f:c8:a9:dd:ea:ea:6b:38:95:21:b2:
         54:6c:0a:a8:19:c5:a7:4c:61:95:c1:96:74:c9:ca:bb:d4:c3:
         74:67:8d:3a:30:ac:6a:ed:16:04:a1:9e:89:89:85:2b:71:cc:
         de:ce:e6:f3:8d:18:12:7e:18:e7:0c:51:13:93:38:38:0b:10:
         8f:7d:f5:bf:2c:b2:d8:ad:cb:7c:10:e9:c7:35:8b:21:f5:3a:
         a9:cb:0f:55:c3:ac:ad:bd:59:d8:32:b8:cf:48:f9:c0:98:51:
         ff:31:ef:0e:3c:95:b4:b9:96:26:24:8d:e3:cf:61:99:b5:92:
         96:92:1e:f5:68:9e:c0:00:e6:eb:bf:54:7f:e4:b1:c2:e8:45:
         a6:0b:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----