Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/323830333a373930303a3a2f33322d3334203d3e203238303934.roa
File:                     323830333a373930303a3a2f33322d3334203d3e203238303934.roa (raw, json)
Hash identifier:          KEHQbynBWifkyRplZNyukqAtR4+tJffu4esU0x1kM1Q=
Subject key identifier:   D7:3B:CC:CB:03:68:FB:7C:6A:AC:9D:79:80:50:19:A2:98:B0:13:7B
Certificate issuer:       /CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
Certificate serial:       5A87CD0CA881ACD81DE7C8108915E62A6C93BE63
Authority key identifier: E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/323830333a373930303a3a2f33322d3334203d3e203238303934.roa
Signing time:             Tue 04 Feb 2025 18:40:58 +0000
ROA not before:           Tue 04 Feb 2025 18:35:58 +0000
ROA not after:            Tue 03 Feb 2026 18:40:58 +0000
asID:                     28094
IP address blocks:        2803:7900::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:87:cd:0c:a8:81:ac:d8:1d:e7:c8:10:89:15:e6:2a:6c:93:be:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6643CD2835B8AF96C10248E2382CB3BA81EA12A
        Validity
            Not Before: Feb  4 18:35:58 2025 GMT
            Not After : Feb  3 18:40:58 2026 GMT
        Subject: CN=D73BCCCB0368FB7C6AAC9D79805019A298B0137B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f4:f1:58:ac:fc:d4:6f:d9:b0:0e:ef:ba:f1:
                    c5:85:3a:ac:63:39:1f:e4:fa:7b:4f:d1:b0:9a:5f:
                    01:22:19:9b:db:4a:72:92:d7:26:0e:25:28:43:59:
                    b4:9a:6e:8a:ad:ba:f9:fa:3d:cd:3d:46:a9:d2:fa:
                    3a:56:d8:50:10:f1:0b:b3:47:39:f6:d7:4d:17:cb:
                    d2:ad:34:a0:52:0c:09:e5:c3:6c:ca:2d:37:e8:44:
                    12:01:d0:66:25:26:b6:df:23:3e:83:c2:23:46:bd:
                    4c:41:7a:f8:4d:f7:7b:1d:18:74:a8:57:38:d5:ae:
                    a5:c8:93:29:50:b3:50:b3:9f:56:6c:db:99:37:5d:
                    e7:94:67:1e:d2:c8:31:e6:77:7c:69:cc:cd:5e:0f:
                    57:a1:94:ce:44:78:7e:0b:c7:09:53:72:32:ce:37:
                    e2:14:e1:49:12:39:de:58:7c:cf:14:d2:c3:d4:da:
                    74:17:40:d1:fb:6e:31:a5:40:8c:55:12:18:b1:06:
                    8e:50:01:4b:c4:9c:96:c3:04:1a:e9:c3:39:5d:1e:
                    53:ec:7c:94:5d:01:9e:48:3e:7e:98:4a:76:f4:f4:
                    31:eb:38:eb:e3:3c:be:88:79:6e:97:21:2f:36:24:
                    c8:78:f1:22:87:3e:96:68:4e:33:2c:98:21:9c:e7:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3B:CC:CB:03:68:FB:7C:6A:AC:9D:79:80:50:19:A2:98:B0:13:7B
            X509v3 Authority Key Identifier:
                keyid:E6:64:3C:D2:83:5B:8A:F9:6C:10:24:8E:23:82:CB:3B:A8:1E:A1:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E6643CD2835B8AF96C10248E2382CB3BA81EA12A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0129EADEA55C0DB9B01F203B91B293F8CBDEBFF436658383D13DFBB350A0CA55/0/323830333a373930303a3a2f33322d3334203d3e203238303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7900::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:55:0f:b0:28:6e:59:fa:b3:de:49:22:37:14:c5:3f:70:26:
         01:a4:bc:7f:bc:d2:2e:84:79:fd:ec:86:75:21:ed:9f:f0:ed:
         87:dd:c4:1a:6e:f4:00:80:99:e8:3e:14:a5:50:29:e0:29:1d:
         82:93:6b:c9:b9:7c:f8:25:fc:ee:39:58:21:5f:84:f4:7f:e4:
         72:1f:45:6f:b4:a6:f3:ae:5f:1c:0d:fa:b0:21:d0:4c:d6:7c:
         eb:06:7a:33:a9:1f:fc:a8:df:4d:58:47:07:ea:c2:41:2f:f8:
         e4:a2:29:50:73:f0:d5:0f:ca:75:c2:59:11:e9:9e:b7:6d:84:
         61:84:a1:1c:94:d7:3d:89:75:d9:39:13:2f:0f:fd:21:66:1d:
         48:6f:9d:8f:ce:20:e5:cc:90:41:e6:d5:3c:45:ca:f5:ec:0a:
         72:64:51:00:ea:f7:e1:a8:ab:f3:5b:9d:3f:9c:67:64:62:ef:
         56:af:61:e4:1e:1e:5e:44:33:ac:e9:eb:5e:4d:36:4f:a4:5d:
         a0:6c:b3:56:d4:86:e2:be:82:5e:a8:c4:c1:d0:44:85:e6:31:
         14:f6:84:ef:dd:0a:f8:28:e8:f7:8f:ff:91:2c:82:35:87:e4:
         cc:7e:be:d9:57:71:80:3a:16:40:c1:80:ae:b9:6e:3e:1d:f0:
         d3:e0:9b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----