Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/323830333a6239303a3a2f33322d3332203d3e20383030.roa
File:                     323830333a6239303a3a2f33322d3332203d3e20383030.roa (raw, json)
Hash identifier:          UFAVpvA/Mojb0WHNwZrLsw2lKkN7f+fkg9ZCkTgKEmo=
Subject key identifier:   EA:A7:3B:C7:55:EC:2B:CB:4F:DC:5B:6E:49:42:93:2C:D4:9F:C7:5D
Certificate issuer:       /CN=A08DDD76E947B9C9F721B78022D9A4EAADAE46B1
Certificate serial:       66D5C5ADA5D0E31930BAFF6160FD4547BA8AEC30
Authority key identifier: A0:8D:DD:76:E9:47:B9:C9:F7:21:B7:80:22:D9:A4:EA:AD:AE:46:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/323830333a6239303a3a2f33322d3332203d3e20383030.roa
Signing time:             Tue 04 Feb 2025 17:59:23 +0000
ROA not before:           Tue 04 Feb 2025 17:54:23 +0000
ROA not after:            Tue 03 Feb 2026 17:59:23 +0000
asID:                     800
IP address blocks:        2803:b90::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:d5:c5:ad:a5:d0:e3:19:30:ba:ff:61:60:fd:45:47:ba:8a:ec:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A08DDD76E947B9C9F721B78022D9A4EAADAE46B1
        Validity
            Not Before: Feb  4 17:54:23 2025 GMT
            Not After : Feb  3 17:59:23 2026 GMT
        Subject: CN=EAA73BC755EC2BCB4FDC5B6E4942932CD49FC75D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:46:fa:8b:4c:28:11:2e:cb:a7:eb:7c:87:
                    9e:12:d6:5b:a3:c0:58:26:17:56:a3:8d:57:29:59:
                    df:79:7f:73:a7:19:63:14:4a:90:e5:b2:50:5b:ae:
                    23:f4:6c:e8:2c:5c:5b:c5:b1:0f:b5:59:e6:3e:1e:
                    29:db:b6:58:67:7a:fd:e5:36:fa:f8:ba:e1:54:65:
                    9a:97:78:e4:b4:4b:89:51:5e:08:6d:32:74:a4:93:
                    f6:f0:78:df:f7:ea:4d:0d:20:2f:a6:30:57:39:b5:
                    63:04:22:2c:1e:54:10:12:d7:e8:6a:fc:53:bf:85:
                    dd:69:93:ea:4b:f6:98:7d:a0:f2:5f:32:76:b1:1c:
                    c9:6a:34:f0:01:b7:1c:9f:85:38:8b:fc:81:35:f0:
                    ff:03:a9:66:b7:23:ba:ff:13:67:42:a6:96:d8:3b:
                    a6:fd:0a:a8:1d:1b:a4:65:41:e0:58:13:19:2e:49:
                    f7:48:00:08:83:20:4e:17:b4:ad:be:72:38:96:b2:
                    f2:a8:86:78:94:dc:ff:ec:af:b5:1b:3a:38:8c:fe:
                    7d:89:e5:41:f6:2b:fb:22:24:1b:73:a4:df:db:db:
                    26:44:0e:1b:4b:c2:18:12:42:4d:79:cd:37:5d:e5:
                    60:26:cb:45:ba:61:c1:8a:1f:0c:59:7f:32:c0:e9:
                    ad:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A7:3B:C7:55:EC:2B:CB:4F:DC:5B:6E:49:42:93:2C:D4:9F:C7:5D
            X509v3 Authority Key Identifier:
                keyid:A0:8D:DD:76:E9:47:B9:C9:F7:21:B7:80:22:D9:A4:EA:AD:AE:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A08DDD76E947B9C9F721B78022D9A4EAADAE46B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8FE6774259BB8C2E48459EF0D058B488FE900FB382E72F125D7D51579F2FE2C4/0/323830333a6239303a3a2f33322d3332203d3e20383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b90::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:6e:0c:be:cd:0c:88:2b:83:02:1c:09:b9:b7:2a:44:d5:c5:
         b2:8c:b6:f9:23:b5:ec:15:f9:79:23:c3:ff:10:4f:27:af:c1:
         72:27:e5:57:ca:4a:35:9d:8c:86:f6:de:a2:c3:5a:6c:de:3b:
         f0:43:84:f6:d1:4a:35:80:42:b0:4b:80:d7:71:8e:b2:a5:ea:
         de:f3:d5:ec:2e:dc:44:d0:bf:02:28:0e:61:58:8f:38:ac:c6:
         c4:94:7b:94:50:84:5b:8b:9e:f3:58:26:ac:78:63:9e:39:3b:
         87:fd:0a:58:23:d6:e9:9a:bd:3c:e8:43:8d:40:10:b0:58:cc:
         19:c8:c3:58:f2:a6:39:13:a0:68:56:96:71:2f:88:91:98:9c:
         89:7d:e8:9a:8c:aa:ac:69:bf:3a:db:15:1b:41:6c:f8:e7:2e:
         f3:de:5a:5c:51:37:d3:9c:c6:f5:cf:cf:4c:fe:1a:0a:16:a6:
         1a:02:5a:85:9c:cc:7f:97:6f:39:b4:00:4c:46:8f:b4:18:3a:
         09:07:df:4a:1f:79:d1:69:76:a0:67:94:d3:ba:b6:e4:3f:02:
         b9:4d:b5:b4:a7:03:a9:25:dd:ac:c7:95:78:22:af:91:f5:21:
         40:7e:f6:b8:f3:4b:f6:80:a2:a4:68:9a:db:26:31:ce:29:c5:
         63:62:53:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----