Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203232393237.roa
File:                     323830303a6130303a3a2f33322d3438203d3e203232393237.roa (raw, json)
Hash identifier:          fR+kWrBJI+9OzFmZGFV7mBdSN8UWHjvfIu3YFbqoZrU=
Subject key identifier:   D7:CC:93:6E:01:E1:27:34:84:41:A2:00:E3:D2:A5:65:B6:F6:4E:96
Certificate issuer:       /CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
Certificate serial:       4CD2D4E500BA8E4E4C66BB433169F1161AF42BFD
Authority key identifier: 2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203232393237.roa
Signing time:             Tue 07 Jan 2025 17:35:00 +0000
ROA not before:           Tue 07 Jan 2025 17:30:00 +0000
ROA not after:            Tue 06 Jan 2026 17:35:00 +0000
asID:                     22927
IP address blocks:        2800:a00::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d2:d4:e5:00:ba:8e:4e:4c:66:bb:43:31:69:f1:16:1a:f4:2b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B4BC196C0E7319A144CC1D3821EACB886EC082E
        Validity
            Not Before: Jan  7 17:30:00 2025 GMT
            Not After : Jan  6 17:35:00 2026 GMT
        Subject: CN=D7CC936E01E127348441A200E3D2A565B6F64E96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:d6:dc:0e:ab:84:93:f8:26:a2:68:b6:72:
                    fc:42:ae:1f:f3:cd:e8:ae:22:56:cb:c6:19:18:73:
                    25:f7:d5:65:8c:92:93:5b:2a:ee:0d:d3:b8:63:51:
                    22:be:da:ef:49:84:5e:0e:ad:d8:84:88:98:41:3d:
                    ed:42:fc:cf:58:6a:cd:61:29:3e:52:99:2f:1d:4f:
                    9d:d2:d8:3b:f0:da:dd:98:3d:45:b2:50:01:67:55:
                    0a:2d:a3:7e:ea:97:42:19:d3:75:5b:33:f6:39:f6:
                    ed:ef:41:eb:d3:e2:e3:57:6a:c2:58:0f:5c:84:88:
                    39:1e:c9:59:35:8b:4e:c8:90:a1:19:54:57:c2:6f:
                    9b:00:a1:e8:db:f5:6b:f7:a7:ac:a2:b4:4c:a9:60:
                    c2:52:71:5c:12:22:f0:35:bb:9c:65:b4:49:5c:90:
                    96:ee:3c:a2:5b:d4:74:8f:f2:86:62:35:f9:2b:a5:
                    20:ba:4e:0c:d3:56:21:eb:c7:0c:32:05:7a:d4:4e:
                    fd:81:27:34:14:80:f6:4e:dd:14:57:11:78:c6:e8:
                    07:75:eb:e3:19:45:da:c7:f1:f6:ce:ff:f5:9a:aa:
                    b6:46:84:8f:30:e6:85:8c:12:3a:e4:3e:26:63:87:
                    87:5b:f8:3c:cc:ec:e5:56:84:6a:ce:c1:dd:a3:c9:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:CC:93:6E:01:E1:27:34:84:41:A2:00:E3:D2:A5:65:B6:F6:4E:96
            X509v3 Authority Key Identifier:
                keyid:2B:4B:C1:96:C0:E7:31:9A:14:4C:C1:D3:82:1E:AC:B8:86:EC:08:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2B4BC196C0E7319A144CC1D3821EACB886EC082E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E97415F97A0837B37C46EF587547D994F7186A77B4133F7A3C3E6C266F9D246/0/323830303a6130303a3a2f33322d3438203d3e203232393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:2a:a8:f2:75:93:23:68:4d:a9:2f:25:71:1a:e8:3d:fe:00:
         9f:e8:e2:2f:2a:2b:0d:79:49:6d:ca:d0:6e:58:24:bf:4d:81:
         9f:a6:ae:25:1e:84:74:9e:46:76:be:34:8c:b2:90:dc:b1:24:
         c2:8e:96:49:76:09:6a:0e:0f:27:7a:0c:d7:f6:05:45:1d:b1:
         d8:4f:91:1c:a3:a9:fa:f4:a2:89:53:19:48:8b:56:e5:75:3f:
         d9:45:dd:35:32:66:48:9e:fd:a5:26:24:31:3e:e4:7c:dc:29:
         55:5f:eb:ea:2e:fb:17:1b:08:0e:18:ae:e2:38:ec:d3:1d:35:
         40:0b:05:17:80:ea:7c:b1:02:b9:fe:14:59:fb:8c:d3:34:8d:
         bd:ee:f1:04:d4:06:2b:74:d8:36:8b:6d:13:9f:67:c4:d0:9a:
         65:13:88:21:c9:0a:f2:ff:15:45:bc:d4:60:95:c3:6b:7b:98:
         0b:58:76:67:66:c4:06:ab:d7:17:c1:15:b4:19:db:e7:3c:cd:
         fe:ab:d5:44:a2:43:7c:5c:e9:df:71:3a:52:6e:29:da:c9:60:
         cf:22:db:43:2e:92:83:2c:40:d7:36:5b:d0:b2:7a:f0:90:78:
         57:c4:35:db:bb:57:ff:a7:60:9d:de:a3:e5:f6:f4:36:0b:25:
         02:c5:9f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----