Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/323830303a3936303a3a2f33322d3332203d3e203237373638.roa
File:                     323830303a3936303a3a2f33322d3332203d3e203237373638.roa (raw, json)
Hash identifier:          lhnRcyu6Tcg1rY5Rl4qaOtF68VrVV1xJGU9/pvQgQs8=
Subject key identifier:   18:34:F9:68:04:1E:77:92:C5:90:44:14:F2:24:CC:FA:16:2C:7B:F1
Certificate issuer:       /CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
Certificate serial:       15BF8A6E65F8391B32A9110A6A525B88DCC16607
Authority key identifier: EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/323830303a3936303a3a2f33322d3332203d3e203237373638.roa
Signing time:             Sun 08 Dec 2024 00:15:00 +0000
ROA not before:           Sun 08 Dec 2024 00:10:00 +0000
ROA not after:            Sun 07 Dec 2025 00:15:00 +0000
asID:                     27768
IP address blocks:        2800:960::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:bf:8a:6e:65:f8:39:1b:32:a9:11:0a:6a:52:5b:88:dc:c1:66:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC2EAE5BF883D3DFD8B270D082FF89DD81090C53
        Validity
            Not Before: Dec  8 00:10:00 2024 GMT
            Not After : Dec  7 00:15:00 2025 GMT
        Subject: CN=1834F968041E7792C5904414F224CCFA162C7BF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2c:ff:f4:ff:4c:98:37:46:d8:2a:4b:57:04:
                    fc:2d:fd:2f:89:89:d1:de:2e:1b:3a:fb:6a:d8:70:
                    8f:8b:b4:2a:c4:bf:18:e8:12:a2:42:be:06:a6:95:
                    ec:b5:0b:2e:d1:e8:b3:ae:6e:45:80:5a:5d:f3:1a:
                    1b:82:2e:50:7b:a7:a3:be:08:1c:2d:89:1d:59:70:
                    ce:cb:7e:37:50:ec:09:16:25:cb:da:bb:63:f1:73:
                    5e:96:15:12:8b:53:b4:42:ef:c5:bc:8b:15:5d:8c:
                    63:42:68:50:4e:14:63:1f:33:ab:55:e1:2a:f6:f7:
                    7d:6b:72:88:bd:9d:af:14:da:43:31:1d:34:12:de:
                    94:c4:43:b7:37:03:f4:60:96:2b:52:36:97:c2:8e:
                    d1:7b:15:f7:58:48:8e:a8:9f:af:22:3e:74:9e:06:
                    29:9c:04:cf:75:ea:d5:93:81:e6:01:b7:b9:dc:88:
                    46:7f:98:0d:fd:05:c1:05:0d:74:30:69:ed:48:b5:
                    6d:27:b4:44:e7:8c:68:64:9d:1c:a2:f8:78:67:fe:
                    cc:a5:eb:87:e5:1d:cf:3f:25:cf:e4:80:1b:af:68:
                    e8:06:20:b9:85:14:32:a6:52:b4:44:be:33:7c:e1:
                    14:90:14:09:cd:24:c9:6d:aa:65:89:5d:53:97:70:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:34:F9:68:04:1E:77:92:C5:90:44:14:F2:24:CC:FA:16:2C:7B:F1
            X509v3 Authority Key Identifier:
                keyid:EC:2E:AE:5B:F8:83:D3:DF:D8:B2:70:D0:82:FF:89:DD:81:09:0C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC2EAE5BF883D3DFD8B270D082FF89DD81090C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A3A4E0D18D97D39C5390FFDE26FC78BE4AB5068967B888AD988E4BB0D48F9819/0/323830303a3936303a3a2f33322d3332203d3e203237373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:960::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:4f:d4:1b:f0:96:1f:b2:e0:54:f6:a4:ba:02:6a:97:dd:
         10:70:a6:4c:09:30:24:cb:6b:2e:78:f2:64:f4:37:e4:53:80:
         ba:32:9e:43:0e:ca:b0:26:e1:c8:cb:bc:a1:bb:97:54:1c:d8:
         cf:9b:93:0f:fe:20:0c:6f:e5:11:80:41:d1:c1:94:fe:40:4a:
         5b:6b:25:e2:e4:0d:f5:4a:9b:1c:f5:41:a4:04:f3:32:0e:56:
         1d:af:c9:d3:c0:93:6f:b5:98:ad:e5:e8:18:1a:40:68:09:92:
         62:fe:ff:a6:14:f1:57:b1:a6:f1:40:1a:8b:d3:eb:2b:06:e3:
         b1:73:0e:f2:f8:55:cd:96:b7:66:c1:aa:1a:1a:69:c4:ce:b8:
         d1:df:bc:44:8f:79:49:70:cc:a3:96:0a:46:ed:e8:8c:bd:48:
         c7:d2:56:24:59:74:82:44:af:ec:51:85:72:e9:0b:a0:52:f0:
         99:6b:4f:04:19:a1:34:87:8c:35:d3:67:f7:bb:ef:0e:f6:fa:
         e5:1c:c7:61:3d:bd:35:5f:6a:6f:fc:81:8a:1d:a9:6f:35:b5:
         19:93:d2:1c:85:23:9d:7e:1d:85:16:c9:04:3a:df:20:38:6d:
         c9:da:f7:fe:b7:09:21:2e:97:75:cf:c8:e2:9a:f0:48:30:d4:
         c0:99:bf:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----