Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d3438203d3e20323632313936.roa
File:                     323830303a6162303a3a2f33322d3438203d3e20323632313936.roa (raw, json)
Hash identifier:          vVBdKdqv4Qh1FkrtV0D4oiLFUK8nEtKam9SdVuyqVkY=
Subject key identifier:   24:E0:34:4D:31:B8:CF:9A:71:F5:C2:3F:10:CD:F2:A6:37:ED:12:4B
Certificate issuer:       /CN=236265F485589146D372FF70F0BD7364753EFBD3
Certificate serial:       10ED91EEE58B21A0B6F4C596F65EC808E38B4270
Authority key identifier: 23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d3438203d3e20323632313936.roa
Signing time:             Tue 17 Dec 2024 21:35:00 +0000
ROA not before:           Tue 17 Dec 2024 21:30:00 +0000
ROA not after:            Tue 16 Dec 2025 21:35:00 +0000
asID:                     262196
IP address blocks:        2800:ab0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ed:91:ee:e5:8b:21:a0:b6:f4:c5:96:f6:5e:c8:08:e3:8b:42:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=236265F485589146D372FF70F0BD7364753EFBD3
        Validity
            Not Before: Dec 17 21:30:00 2024 GMT
            Not After : Dec 16 21:35:00 2025 GMT
        Subject: CN=24E0344D31B8CF9A71F5C23F10CDF2A637ED124B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:f4:74:68:8c:8e:20:e2:4e:bb:9e:c3:d7:
                    fd:93:26:51:3e:07:6c:f6:16:f3:36:26:2e:64:03:
                    7c:61:61:75:ba:31:c6:d6:4d:1d:00:4b:80:de:62:
                    d7:0b:ac:54:da:bd:d3:3e:a6:58:f4:12:27:e4:b4:
                    53:0d:12:08:9e:81:84:99:4d:bd:01:7f:72:ba:40:
                    75:f5:d5:71:ed:51:dc:1e:d1:20:04:8c:7c:be:bb:
                    67:d5:c5:a9:54:84:e4:fa:0e:31:fc:9d:f4:51:fb:
                    06:92:d5:e9:f5:f2:13:5d:73:47:ad:b8:3e:c7:9f:
                    b6:48:03:c9:c2:37:71:cf:fd:82:98:e0:11:21:75:
                    36:69:7c:a7:00:f5:da:2b:ad:be:9c:57:07:1a:f0:
                    20:0b:1f:ea:cf:7b:cc:6b:6a:fc:28:6f:c2:d4:5c:
                    7d:38:fa:cb:40:7d:b9:69:b4:08:34:e7:d7:3d:4b:
                    b6:98:f7:4a:a5:da:04:48:d0:9d:12:91:33:fb:30:
                    f4:6e:44:1a:b0:3c:fa:8a:6b:1e:ab:80:2e:26:7b:
                    02:bc:86:7a:e8:0a:04:e9:87:ec:d7:63:c0:94:4a:
                    42:a3:85:77:5b:92:06:54:f7:c4:f7:a5:04:2d:d0:
                    a8:62:c3:2b:c0:0d:2c:0d:da:3c:c7:e1:75:ca:29:
                    04:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E0:34:4D:31:B8:CF:9A:71:F5:C2:3F:10:CD:F2:A6:37:ED:12:4B
            X509v3 Authority Key Identifier:
                keyid:23:62:65:F4:85:58:91:46:D3:72:FF:70:F0:BD:73:64:75:3E:FB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/236265F485589146D372FF70F0BD7364753EFBD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/236265F485589146D372FF70F0BD7364753EFBD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8899E7FA6BC08BE40F2B5F59D0A9C8ABE185D0DC13B8307E0971E96439A2E6AA/0/323830303a6162303a3a2f33322d3438203d3e20323632313936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:02:d6:3a:74:19:b1:8a:4a:ed:ff:7a:57:32:3b:9b:4e:32:
         6e:2a:b4:2c:4a:d3:2f:3d:89:b6:46:59:a5:a5:92:d3:df:84:
         58:24:d0:5c:52:c0:09:5b:ec:a6:ef:97:11:37:ac:ed:e0:96:
         35:ba:89:42:b8:2f:6b:0b:24:14:de:2a:ba:ff:5f:3e:64:59:
         3a:4d:8a:bd:d9:9d:24:34:4d:8b:bb:7a:40:ac:24:ff:b5:f3:
         be:66:48:33:25:19:6f:4b:8d:b8:b8:cb:ba:08:99:10:91:ff:
         fc:d1:ae:1f:52:78:a4:aa:db:5a:c2:d4:a5:8b:8e:03:fd:08:
         63:a9:60:ad:ef:e8:d8:5a:93:8d:4e:83:da:aa:31:f2:fc:ab:
         6c:fd:9f:55:3f:13:86:1f:34:f6:c2:89:d4:96:8c:5f:23:13:
         a6:47:fa:ad:f4:19:53:ee:e7:c9:ae:e2:db:dc:bc:8e:c7:e1:
         52:45:cb:c7:fb:13:10:58:4c:12:b9:3d:73:70:ce:cf:69:63:
         76:7d:14:89:c2:22:1f:11:99:92:da:df:91:46:96:c6:79:40:
         30:11:14:a8:8e:d9:38:df:44:6f:18:68:e1:6a:7e:a6:52:8f:
         fd:8b:8a:2c:87:da:5e:e1:d4:88:88:55:3d:aa:d7:7e:4a:cd:
         7a:2a:21:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----