Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/323830333a323530303a3a2f33322d3332203d3e20323632323533.roa
File:                     323830333a323530303a3a2f33322d3332203d3e20323632323533.roa (raw, json)
Hash identifier:          t6N1A134/vp7x9VyuVng+uMgI0zXovrI6/MpgiVrF9o=
Subject key identifier:   F4:C9:50:3A:EA:EB:EB:0A:8E:25:91:10:9F:01:1D:9F:DF:6E:5E:A5
Certificate issuer:       /CN=072F0118796B0975DCD1B820B34352373FC08F65
Certificate serial:       7522126FA28E1C25D0690ED4FE22547018799644
Authority key identifier: 07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/323830333a323530303a3a2f33322d3332203d3e20323632323533.roa
Signing time:             Tue 04 Feb 2025 18:49:38 +0000
ROA not before:           Tue 04 Feb 2025 18:44:38 +0000
ROA not after:            Tue 03 Feb 2026 18:49:38 +0000
asID:                     262253
IP address blocks:        2803:2500::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:22:12:6f:a2:8e:1c:25:d0:69:0e:d4:fe:22:54:70:18:79:96:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=072F0118796B0975DCD1B820B34352373FC08F65
        Validity
            Not Before: Feb  4 18:44:38 2025 GMT
            Not After : Feb  3 18:49:38 2026 GMT
        Subject: CN=F4C9503AEAEBEB0A8E2591109F011D9FDF6E5EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:02:9a:84:58:b7:ee:83:a1:eb:5b:61:de:33:
                    4e:11:82:72:1b:2a:47:8e:2d:6e:6f:43:30:4a:74:
                    21:04:fc:79:21:80:67:5b:da:a0:ed:06:ad:14:bf:
                    29:5b:54:ae:85:4b:2b:fe:33:49:e1:14:6f:0d:76:
                    c5:9d:c7:5d:03:c4:d4:b3:5d:06:49:61:53:ce:d6:
                    73:f3:6b:cd:92:69:da:1a:d8:94:70:f4:0b:dc:47:
                    52:43:1d:b8:04:e5:9c:d0:db:55:6a:46:1d:19:db:
                    16:7e:ff:dc:18:53:6a:e4:dd:d4:27:1a:a7:86:f1:
                    f6:2a:c4:ba:26:a1:0d:4f:07:ad:66:08:f1:f9:45:
                    6c:d1:01:b9:ea:f9:a2:db:82:a3:db:e6:0f:ea:03:
                    76:3c:b5:95:88:a6:d9:5c:bb:2c:c5:c4:28:f8:3b:
                    51:1f:17:85:44:0f:74:2e:e8:d5:d9:e6:a8:c1:57:
                    2b:a3:7e:72:3a:c4:02:70:f6:aa:9a:12:f5:9e:2a:
                    c2:52:2d:07:a7:f0:16:6c:3a:ac:29:2c:9c:7c:d3:
                    0c:82:2e:35:c5:2c:e4:f0:62:8e:05:d2:38:cc:57:
                    78:9b:60:3e:43:f8:1b:f0:be:06:39:25:75:43:5b:
                    2f:b3:f8:1e:99:5b:5f:03:6c:bf:e2:ba:e5:da:93:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C9:50:3A:EA:EB:EB:0A:8E:25:91:10:9F:01:1D:9F:DF:6E:5E:A5
            X509v3 Authority Key Identifier:
                keyid:07:2F:01:18:79:6B:09:75:DC:D1:B8:20:B3:43:52:37:3F:C0:8F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/072F0118796B0975DCD1B820B34352373FC08F65.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/072F0118796B0975DCD1B820B34352373FC08F65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15798E2E0A04156279B2D74BA84094AA721F79AC907BD4730DDD3E02315D8794/0/323830333a323530303a3a2f33322d3332203d3e20323632323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2500::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:06:b0:62:f9:27:82:fd:89:06:63:79:66:1c:43:d7:ce:7b:
         e7:08:7f:fe:41:3e:6b:56:37:eb:83:6c:06:7a:f9:a6:a5:cc:
         eb:82:84:12:58:f3:e9:24:0c:bd:8f:6c:d9:ce:c5:b6:ea:f6:
         35:65:c9:a5:6c:80:7e:0f:af:e2:fb:76:e2:cf:f7:74:77:99:
         7a:c0:80:58:f5:7c:26:4f:0f:41:16:b9:86:71:7e:65:d1:07:
         b4:8b:b4:96:71:18:95:91:c6:1a:50:39:79:21:cc:43:76:ad:
         aa:d2:f9:15:71:15:8c:7d:3e:97:8d:f1:1c:50:65:e0:49:bd:
         af:62:da:0e:61:28:2d:fa:78:4f:c6:49:53:bd:9d:f7:a2:97:
         63:0e:df:45:6b:02:9e:13:6e:47:44:d3:fc:1f:fb:77:6e:6e:
         7d:9f:d3:fa:6f:4e:25:18:39:f9:a9:62:9f:48:50:a1:61:b5:
         0b:2f:b0:5c:c7:6f:50:65:cb:83:a0:74:25:02:09:f0:81:9c:
         c6:c9:73:c3:dd:2a:3d:29:86:c3:10:33:97:4d:3d:61:b1:73:
         cb:ea:e5:f4:3a:2f:c4:1d:39:2c:e5:55:16:b5:73:ad:11:36:
         45:ac:26:af:35:65:a3:6b:8a:9d:bd:45:a8:71:eb:d3:90:f7:
         43:69:44:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----