Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65363a363230303a3a2f34382d3438203d3e203133343839.roa
File:                     323830303a65363a363230303a3a2f34382d3438203d3e203133343839.roa (raw, json)
Hash identifier:          A1Sp2sEa8C2lOv2vpdqvS16u/k9e10uA29R9DbSkaAg=
Subject key identifier:   40:56:12:05:24:86:BD:F3:DE:C1:32:FA:D8:AB:1D:50:17:DF:85:79
Certificate issuer:       /CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
Certificate serial:       757464BFA8287056A7BBBB0D65B5FF403066CF19
Authority key identifier: 34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65363a363230303a3a2f34382d3438203d3e203133343839.roa
Signing time:             Mon 16 Dec 2024 19:20:01 +0000
ROA not before:           Mon 16 Dec 2024 19:15:01 +0000
ROA not after:            Mon 15 Dec 2025 19:20:01 +0000
asID:                     13489
IP address blocks:        2800:e6:6200::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:74:64:bf:a8:28:70:56:a7:bb:bb:0d:65:b5:ff:40:30:66:cf:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7
        Validity
            Not Before: Dec 16 19:15:01 2024 GMT
            Not After : Dec 15 19:20:01 2025 GMT
        Subject: CN=405612052486BDF3DEC132FAD8AB1D5017DF8579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bc:4f:a2:33:80:25:7f:4a:76:6b:2f:53:53:
                    33:5f:99:0c:d1:e3:95:a3:7b:a1:20:d3:cd:72:a9:
                    7f:79:11:57:76:d2:b5:13:8c:5c:2f:2c:9e:b0:b7:
                    e8:4a:f2:d9:51:b6:95:ff:71:dd:04:2a:45:64:93:
                    8f:72:66:f9:58:3d:cf:84:bf:fe:cb:d9:e1:b6:64:
                    39:d0:83:f5:cf:a7:d9:a5:26:df:fa:c8:66:3b:a7:
                    ec:4d:aa:81:fc:26:60:9b:64:a6:4b:51:e5:b5:31:
                    7f:58:5a:e3:30:4e:22:37:19:a4:d6:e1:00:c8:fb:
                    80:68:30:fe:7c:d6:71:f8:42:5c:10:92:b1:9a:d3:
                    54:32:c9:56:df:a2:b5:41:cb:0e:31:49:a0:43:b4:
                    4f:df:eb:10:e7:00:3a:09:fb:a0:67:1d:95:23:21:
                    11:05:f6:3f:d5:15:e9:cf:d4:7d:2a:4a:8e:79:26:
                    62:9b:11:d8:b7:cd:5a:4c:42:64:ef:96:90:2e:1a:
                    25:7f:36:57:93:40:c6:72:2a:d6:43:f7:c4:3b:17:
                    7e:97:fb:b5:fc:a7:d8:b4:54:d5:01:11:50:c9:e9:
                    f6:2d:d6:4a:c8:33:a3:55:37:2e:5c:72:07:0e:cc:
                    73:50:ab:36:b9:0e:f9:9c:0b:3d:39:64:0c:35:45:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:56:12:05:24:86:BD:F3:DE:C1:32:FA:D8:AB:1D:50:17:DF:85:79
            X509v3 Authority Key Identifier:
                keyid:34:03:9F:5B:AD:EC:D4:DF:B4:2E:3F:4E:0C:5E:CE:97:A3:01:80:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34039F5BADECD4DFB42E3F4E0C5ECE97A30180A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/51E523A47843A96CCBD949FDF72C80642205A6F5B61CB329F665368A48B2A5A1/0/323830303a65363a363230303a3a2f34382d3438203d3e203133343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:e6:6200::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:9c:92:33:92:e4:b2:94:13:d2:a9:25:b0:23:6e:e9:ac:d7:
         c5:8c:ae:a3:a1:7e:41:e4:c1:24:6a:8e:db:c3:1f:e4:3c:7c:
         80:99:fb:c3:0a:a9:7d:80:3f:72:14:71:b2:b7:40:35:56:5d:
         1d:0b:cc:24:b2:56:07:ea:ae:8a:a5:c4:a7:89:bd:0a:88:9d:
         08:cd:1d:93:ef:3f:d2:dd:c9:0c:b3:78:0b:0d:fd:93:50:4e:
         e3:cf:bb:c0:98:74:dc:0b:2c:6b:18:df:01:e1:a2:74:da:55:
         c3:b0:16:61:82:37:4c:df:fa:f4:e2:86:f2:b0:ec:3c:b4:05:
         c6:2a:ef:ad:82:5f:88:91:41:78:d5:61:3b:2f:8a:9d:2a:79:
         43:a8:55:d5:8d:f6:36:a9:d3:fd:2c:4d:37:c7:d6:c1:54:48:
         7f:70:b3:62:2d:ec:b7:8a:a5:47:08:8d:a0:7f:98:51:79:85:
         19:ee:b4:6a:7c:22:d7:f5:63:34:82:8b:ad:6b:08:3d:d1:da:
         33:3d:c5:13:8f:f0:15:9e:46:62:ee:30:4b:82:23:8b:c4:20:
         23:3a:d2:28:ef:84:f6:4f:ec:48:3e:09:ca:8a:91:0f:9d:00:
         f2:99:01:30:5e:da:6b:e5:26:ee:cc:f3:23:e2:e4:1a:c9:76:
         7c:6b:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----