Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/323830333a323636303a3a2f33322d3332203d3e20323637383934.roa
File:                     323830333a323636303a3a2f33322d3332203d3e20323637383934.roa (raw, json)
Hash identifier:          dazRQa01NlCuVCHkq5vW3DrzzQEh6UIs69R7nwQXvRY=
Subject key identifier:   72:F4:D9:09:29:91:15:C3:27:38:3A:98:AD:E3:72:81:A2:BF:23:38
Certificate issuer:       /CN=AF5961CE89F38C3B4D8403327DF504436CE78585
Certificate serial:       3AC393C63FC457C2555E79B9F0373D68CE82551E
Authority key identifier: AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/323830333a323636303a3a2f33322d3332203d3e20323637383934.roa
Signing time:             Tue 04 Feb 2025 19:59:39 +0000
ROA not before:           Tue 04 Feb 2025 19:54:39 +0000
ROA not after:            Tue 03 Feb 2026 19:59:39 +0000
asID:                     267894
IP address blocks:        2803:2660::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c3:93:c6:3f:c4:57:c2:55:5e:79:b9:f0:37:3d:68:ce:82:55:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF5961CE89F38C3B4D8403327DF504436CE78585
        Validity
            Not Before: Feb  4 19:54:39 2025 GMT
            Not After : Feb  3 19:59:39 2026 GMT
        Subject: CN=72F4D909299115C327383A98ADE37281A2BF2338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ca:d4:93:a7:68:6b:71:ea:fb:2c:7c:e4:9f:
                    cd:c8:82:61:ba:b0:b0:c5:b6:b3:86:88:98:e7:46:
                    9b:86:8a:0a:fb:50:8b:9d:a2:b1:df:9c:dc:84:ae:
                    57:95:31:4e:15:50:b8:69:f1:18:5a:b4:64:9f:54:
                    72:f9:fe:85:2a:3d:93:20:0d:ba:9a:57:f5:01:22:
                    a3:5f:ee:48:3b:36:c7:ec:e8:f9:1b:f6:8b:a4:1d:
                    70:d5:c8:d6:a9:32:2f:11:75:a5:65:bd:46:98:b5:
                    df:fa:af:83:7e:4f:fa:dc:e4:2a:76:05:5d:47:ae:
                    18:99:f5:13:44:65:99:cf:4e:fc:97:a9:eb:03:62:
                    32:af:88:12:1e:3a:48:3f:32:e6:95:e7:4f:6d:00:
                    e1:09:5e:37:f2:52:fc:bc:2f:d2:18:e4:1e:37:6d:
                    37:11:1e:47:a1:ae:cf:1a:96:a0:23:aa:c6:27:86:
                    aa:8a:45:35:39:39:26:c6:7a:48:d4:14:55:4e:d4:
                    aa:1d:d8:d1:41:c2:2f:90:c6:87:c5:a9:11:b0:b6:
                    87:4f:34:0b:8b:d8:03:a9:cd:95:a8:81:a7:30:5f:
                    52:4b:97:d6:16:b3:10:3f:a6:fa:bf:6e:0c:89:38:
                    b0:ce:14:dc:19:62:36:93:98:3e:55:a1:51:1f:f2:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F4:D9:09:29:91:15:C3:27:38:3A:98:AD:E3:72:81:A2:BF:23:38
            X509v3 Authority Key Identifier:
                keyid:AF:59:61:CE:89:F3:8C:3B:4D:84:03:32:7D:F5:04:43:6C:E7:85:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/AF5961CE89F38C3B4D8403327DF504436CE78585.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AF5961CE89F38C3B4D8403327DF504436CE78585.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/048FD601FAB1C192DDE27CD3AF21B7D17FFA0EB92648088807F42C070D4DB109/0/323830333a323636303a3a2f33322d3332203d3e20323637383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2660::/32

    Signature Algorithm: sha256WithRSAEncryption
         b5:36:26:a2:d9:97:78:76:7d:3f:c2:34:65:90:cf:d6:93:cd:
         79:9c:2f:12:4c:6e:b4:8e:dd:40:6a:5a:97:b5:17:4c:e1:c0:
         4a:70:3c:13:fa:36:63:e3:04:e7:13:8f:48:b8:92:17:d1:54:
         87:3f:b1:e8:06:6e:04:ef:fb:d9:ce:c8:8f:1c:0b:c3:73:a2:
         a7:ce:25:ed:7f:f7:64:29:a9:48:73:b0:dd:6d:61:78:1d:b4:
         7b:08:e0:ac:c1:04:e2:b0:11:ca:d3:b9:37:e0:58:2f:1a:a4:
         c8:90:34:bc:39:e9:3b:2a:72:0f:8f:69:ac:35:53:8c:31:1e:
         15:8b:27:72:fe:f6:4c:68:65:33:0c:92:45:8d:e8:ed:8a:62:
         2c:99:3e:18:d7:a1:5d:70:d2:ab:a4:3f:79:fa:c5:ce:d2:be:
         15:84:d7:1b:2b:b1:71:48:07:97:59:ea:02:f1:2d:00:55:a5:
         8b:e7:0c:1c:34:68:a4:7a:53:4e:0c:a4:f2:81:ec:12:49:a7:
         e9:61:9c:87:35:9f:8d:77:c7:69:39:7b:93:42:fb:8a:bc:a8:
         a9:4c:51:84:6c:63:e6:19:c1:5d:e9:8f:ae:01:76:37:3c:0f:
         64:b8:17:4c:dc:6a:f7:ef:7d:97:12:8b:d3:3e:64:71:d4:c3:
         38:6c:8b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----