Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/068FA99099377A83F1A405C8C9A75E172C1F7D41A6E81EE440ADF349816EE831/0/323830333a356235303a3a2f33322d3332203d3e20323733393136.roa
File:                     323830333a356235303a3a2f33322d3332203d3e20323733393136.roa (raw, json)
Hash identifier:          v4qjD/eaF1SD7FCpE7H65DCeviuPGEQWSzaXFGvAlCQ=
Subject key identifier:   E7:AD:24:51:53:B5:D7:26:42:84:3C:4B:8B:CC:1A:B2:04:47:8B:6E
Certificate issuer:       /CN=A9174FB67BCF4A99D852C6D9E621E43BC9CBF8D2
Certificate serial:       73F207E59DD307CD959AA06BB2F5769DB73DE8D5
Authority key identifier: A9:17:4F:B6:7B:CF:4A:99:D8:52:C6:D9:E6:21:E4:3B:C9:CB:F8:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9174FB67BCF4A99D852C6D9E621E43BC9CBF8D2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/068FA99099377A83F1A405C8C9A75E172C1F7D41A6E81EE440ADF349816EE831/0/323830333a356235303a3a2f33322d3332203d3e20323733393136.roa
Signing time:             Thu 20 Mar 2025 02:50:00 +0000
ROA not before:           Thu 20 Mar 2025 02:45:00 +0000
ROA not after:            Thu 19 Mar 2026 02:50:00 +0000
asID:                     273916
IP address blocks:        2803:5b50::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f2:07:e5:9d:d3:07:cd:95:9a:a0:6b:b2:f5:76:9d:b7:3d:e8:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174FB67BCF4A99D852C6D9E621E43BC9CBF8D2
        Validity
            Not Before: Mar 20 02:45:00 2025 GMT
            Not After : Mar 19 02:50:00 2026 GMT
        Subject: CN=E7AD245153B5D72642843C4B8BCC1AB204478B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9b:f9:c8:fe:c9:c7:83:70:f6:68:f5:de:aa:
                    93:be:6e:1c:b3:12:62:24:4e:dd:5d:36:42:47:d7:
                    fc:74:51:95:b5:e3:1f:83:8b:85:61:54:d6:34:41:
                    cc:0a:eb:1d:d1:6f:2c:51:25:12:a7:ce:d1:07:eb:
                    24:54:29:f5:94:5c:80:94:1e:29:33:48:b8:5f:16:
                    64:d8:33:79:dd:fd:f3:63:f6:30:39:ed:56:60:e3:
                    83:5a:3b:d9:29:30:e7:7f:37:18:31:10:c1:6e:35:
                    b9:56:23:10:78:ee:3b:dd:f3:78:c6:2d:cb:bd:27:
                    01:f1:84:29:8b:05:a7:79:7f:e4:c4:82:33:e7:96:
                    77:cb:dc:46:2c:12:72:f9:9d:4e:7f:0d:d2:15:e5:
                    c0:3f:77:33:26:de:a2:ff:ae:2c:0b:92:51:c7:8c:
                    1f:1e:e1:e2:bd:dd:10:f1:03:09:0c:ce:34:2a:1f:
                    6d:2b:ab:9b:56:ec:26:5c:af:e6:34:c4:71:30:04:
                    29:dd:19:a4:fc:20:06:05:e7:f3:e0:3b:85:8f:4e:
                    25:f6:4c:7c:60:e2:ee:3e:9e:01:da:71:16:bf:c7:
                    0f:44:e5:63:e8:9d:01:c2:f7:f9:e4:83:74:5f:90:
                    80:c6:5b:83:5d:c6:e9:cc:ee:4c:c8:a4:0b:81:73:
                    2a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:AD:24:51:53:B5:D7:26:42:84:3C:4B:8B:CC:1A:B2:04:47:8B:6E
            X509v3 Authority Key Identifier:
                keyid:A9:17:4F:B6:7B:CF:4A:99:D8:52:C6:D9:E6:21:E4:3B:C9:CB:F8:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/068FA99099377A83F1A405C8C9A75E172C1F7D41A6E81EE440ADF349816EE831/0/A9174FB67BCF4A99D852C6D9E621E43BC9CBF8D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A9174FB67BCF4A99D852C6D9E621E43BC9CBF8D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/068FA99099377A83F1A405C8C9A75E172C1F7D41A6E81EE440ADF349816EE831/0/323830333a356235303a3a2f33322d3332203d3e20323733393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5b50::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:33:e5:67:89:19:76:a2:fd:82:12:8e:f8:94:42:2c:e1:55:
         0b:57:68:83:c9:e5:60:f9:72:d9:18:bb:a2:6f:65:48:07:26:
         b0:9f:15:39:d6:b2:5e:60:0c:95:3a:65:7e:4a:30:02:83:88:
         06:28:d8:95:cf:a2:93:76:8c:7c:0a:c1:f4:49:b7:c2:5b:76:
         20:18:59:41:1b:1f:7c:f7:dd:d5:18:db:04:25:0d:85:a9:bc:
         80:59:c7:28:87:f9:74:89:67:c9:8b:2b:1e:da:81:de:7c:4f:
         6b:7a:3b:c4:dc:8d:1e:15:81:70:5e:39:16:a2:fb:54:26:2d:
         05:dc:ad:4c:18:99:e2:60:d5:1e:a4:d7:f6:54:8a:b0:c3:9d:
         d6:b9:3f:eb:6f:01:a7:f0:10:94:b5:77:81:57:21:f3:43:7b:
         71:a4:d9:78:47:55:a7:d5:41:41:c0:34:23:af:91:81:06:b0:
         f9:e2:31:be:f9:63:16:8e:49:0a:63:8b:48:de:a1:62:6a:1a:
         ac:eb:f9:97:94:bf:df:d5:f2:0e:b0:c9:ee:bb:b3:97:d4:26:
         d1:87:bd:98:42:30:70:4d:d7:d8:6f:b2:61:0d:62:fd:16:de:
         1d:2f:29:40:01:be:85:cb:9f:2b:3b:8b:d6:b2:17:ce:6a:45:
         63:5e:37:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----