Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203134303830.roa
File:                     323830313a31663a383830303a3a2f34382d3438203d3e203134303830.roa (raw, json)
Hash identifier:          k1h3GX7/01CFNQPUXRWMy+31lBOmFQ5wLNBC0nVPrWE=
Subject key identifier:   F5:BD:AF:37:1E:75:0C:72:78:BC:36:26:31:5E:E0:8A:50:6E:55:60
Certificate issuer:       /CN=1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27
Certificate serial:       7928227C843A41340876C9D005171305F687CC4B
Authority key identifier: 1E:D0:DC:5C:A7:7A:08:4E:E8:F2:BA:EC:17:C8:58:34:20:4A:CF:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203134303830.roa
Signing time:             Sun 30 Jun 2024 21:10:00 +0000
ROA not before:           Sun 30 Jun 2024 21:05:00 +0000
ROA not after:            Sun 29 Jun 2025 21:10:00 +0000
asID:                     14080
IP address blocks:        2801:1f:8800::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:28:22:7c:84:3a:41:34:08:76:c9:d0:05:17:13:05:f6:87:cc:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27
        Validity
            Not Before: Jun 30 21:05:00 2024 GMT
            Not After : Jun 29 21:10:00 2025 GMT
        Subject: CN=F5BDAF371E750C7278BC3626315EE08A506E5560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:55:62:8d:f5:b0:d0:f0:f3:36:77:0a:70:
                    9d:dc:35:4f:27:fb:60:2d:dd:17:36:a9:dd:3c:ea:
                    95:fd:ee:e5:d9:1f:ab:4e:77:ab:64:9b:82:8e:f1:
                    49:87:81:ba:cf:1a:42:a1:c3:fe:f4:9d:29:95:43:
                    1f:b6:49:9c:4e:7c:f9:bc:5c:8a:b0:f5:b7:d4:6e:
                    b9:b4:18:7f:24:c6:15:bd:51:b7:0e:b1:1c:e6:76:
                    3a:c3:70:a8:2d:9d:01:11:3d:38:7f:31:76:83:26:
                    23:48:c4:2d:a3:3b:47:91:f5:72:ee:32:93:5b:d9:
                    d9:ec:fd:23:ee:6b:20:9d:82:96:c3:97:6d:6c:b4:
                    59:7c:bd:9d:af:b2:d5:11:b0:5e:33:54:ae:44:27:
                    de:a8:b0:0f:aa:f0:7d:6c:3f:42:cc:3d:db:3b:d2:
                    b3:43:2b:a3:2a:eb:ee:33:f3:74:a8:aa:02:3f:f8:
                    d6:28:f1:11:9c:6d:e2:35:e5:18:ef:87:97:ca:5a:
                    9b:57:01:f2:2e:d2:c8:88:49:6e:48:b9:2c:ab:f3:
                    bd:32:a2:2e:cb:ee:f5:b5:a2:2a:c5:2f:22:1e:0c:
                    b6:a8:9f:e1:5c:7e:2a:73:f2:e0:d9:34:ea:8a:6f:
                    82:0e:b1:93:be:14:7e:2a:96:8a:6f:b7:b1:d4:80:
                    cd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BD:AF:37:1E:75:0C:72:78:BC:36:26:31:5E:E0:8A:50:6E:55:60
            X509v3 Authority Key Identifier:
                keyid:1E:D0:DC:5C:A7:7A:08:4E:E8:F2:BA:EC:17:C8:58:34:20:4A:CF:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1ED0DC5CA77A084EE8F2BAEC17C85834204ACF27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/62C2901A26EB21EA44FE6B619EE168E9B0458556B3D9F86FF6CF86813CF97CF5/0/323830313a31663a383830303a3a2f34382d3438203d3e203134303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:e2:4a:93:a7:1b:aa:54:9b:cd:51:54:d2:44:9a:40:28:49:
         a2:98:59:3b:dc:bb:2d:6b:f2:39:d8:ce:31:61:50:09:18:9a:
         be:79:99:00:7e:7a:6d:b1:9a:09:8d:27:1b:f0:85:a9:7c:37:
         34:f5:87:d0:1c:8a:70:88:27:15:64:47:47:df:2c:47:bb:3c:
         91:68:e7:1d:d7:43:5a:95:92:85:51:5e:e1:b3:7d:c6:36:5f:
         c3:49:f6:a8:56:40:5c:83:bc:7a:5b:87:ff:16:15:10:3e:94:
         ff:6e:ad:06:02:3a:21:02:48:20:76:02:1c:81:09:a7:fa:a1:
         8d:bd:c6:51:48:15:2d:96:dd:52:fa:bc:9f:98:77:04:31:ac:
         e4:cb:51:08:45:50:d1:70:e7:37:3a:18:b6:bc:29:e7:51:e8:
         79:f6:92:e6:67:b0:7d:77:d1:09:bb:83:a3:f2:f3:03:f8:14:
         13:11:ee:15:e9:1d:44:38:1f:af:f8:61:eb:87:27:b7:df:82:
         89:e6:00:a5:a7:2f:e2:73:69:b9:22:77:d2:16:2a:03:03:3c:
         34:92:43:26:20:e5:b5:42:14:6e:57:18:8e:95:b5:e3:61:4f:
         6b:c5:15:d3:d7:9a:57:7a:2a:48:f7:8e:b8:c2:49:b5:fd:5d:
         16:f7:38:f9
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgIUeSgifIQ6QTQIdsnQBRcTBfaHzEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUVEMERDNUNBNzdBMDg0RUU4RjJCQUVDMTdDODU4MzQy
MDRBQ0YyNzAeFw0yNDA2MzAyMTA1MDBaFw0yNTA2MjkyMTEwMDBaMDMxMTAvBgNV
BAMTKEY1QkRBRjM3MUU3NTBDNzI3OEJDMzYyNjMxNUVFMDhBNTA2RTU1NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCde1VijfWw0PDzNncKcJ3cNU8n
+2At3Rc2qd086pX97uXZH6tOd6tkm4KO8UmHgbrPGkKhw/70nSmVQx+2SZxOfPm8
XIqw9bfUbrm0GH8kxhW9UbcOsRzmdjrDcKgtnQERPTh/MXaDJiNIxC2jO0eR9XLu
MpNb2dns/SPuayCdgpbDl21stFl8vZ2vstURsF4zVK5EJ96osA+q8H1sP0LMPds7
0rNDK6Mq6+4z83SoqgI/+NYo8RGcbeI15Rjvh5fKWptXAfIu0siISW5IuSyr870y
oi7L7vW1oirFLyIeDLaon+Fcfipz8uDZNOqKb4IOsZO+FH4qlopvt7HUgM0lAgMB
AAGjggLPMIICyzAdBgNVHQ4EFgQU9b2vNx51DHJ4vDYmMV7gilBuVWAwHwYDVR0j
BBgwFoAUHtDcXKd6CE7o8rrsF8hYNCBKzycwDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy82MkMyOTAxQTI2RUIyMUVBNDRGRTZCNjE5RUUxNjhFOUIw
NDU4NTU2QjNEOUY4NkZGNkNGODY4MTNDRjk3Q0Y1LzAvMUVEMERDNUNBNzdBMDg0
RUU4RjJCQUVDMTdDODU4MzQyMDRBQ0YyNy5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8xRUQwREM1Q0E3N0EwODRFRThG
MkJBRUMxN0M4NTgzNDIwNEFDRjI3LmNlcjCBywYIKwYBBQUHAQsEgb4wgbswgbgG
CCsGAQUFBzALhoGrcnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9s
YWNuaWMvNjJDMjkwMUEyNkVCMjFFQTQ0RkU2QjYxOUVFMTY4RTlCMDQ1ODU1NkIz
RDlGODZGRjZDRjg2ODEzQ0Y5N0NGNS8wLzMyMzgzMDMxM2EzMTY2M2EzODM4MzAz
MDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzQzMDM4MzAucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAo
AQAfiAAwDQYJKoZIhvcNAQELBQADggEBAGziSpOnG6pUm81RVNJEmkAoSaKYWTvc
uy1r8jnYzjFhUAkYmr55mQB+em2xmgmNJxvwhal8NzT1h9AcinCIJxVkR0ffLEe7
PJFo5x3XQ1qVkoVRXuGzfcY2X8NJ9qhWQFyDvHpbh/8WFRA+lP9urQYCOiECSCB2
AhyBCaf6oY29xlFIFS2W3VL6vJ+YdwQxrOTLUQhFUNFw5zc6GLa8KedR6Hn2kuZn
sH130Qm7g6Py8wP4FBMR7hXpHUQ4H6/4YeuHJ7ffgonmAKWnL+Jzabkid9IWKgMD
PDSSQyYg5bVCFG5XGI6VteNhT2vFFdPXmld6Kkj3jrjCSbX9XRb3OPk=
-----END CERTIFICATE-----