Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/323830333a356565303a3a2f33322d3438203d3e20323639393836.roa
File:                     323830333a356565303a3a2f33322d3438203d3e20323639393836.roa (raw, json)
Hash identifier:          3rF72RN306LwBeySqrmP+WebqAu2lI8rz/6PBvkgh+A=
Subject key identifier:   47:5C:6F:C1:3B:B8:AE:D5:84:24:33:B4:67:AF:8E:96:48:92:90:E5
Certificate issuer:       /CN=172635E11B9F8AA76EFCB8104AD5A4078D472DBD
Certificate serial:       296E54BFAE83A573D1A397C5D406B9747C23E260
Authority key identifier: 17:26:35:E1:1B:9F:8A:A7:6E:FC:B8:10:4A:D5:A4:07:8D:47:2D:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172635E11B9F8AA76EFCB8104AD5A4078D472DBD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/323830333a356565303a3a2f33322d3438203d3e20323639393836.roa
Signing time:             Tue 04 Feb 2025 18:22:07 +0000
ROA not before:           Tue 04 Feb 2025 18:17:07 +0000
ROA not after:            Tue 03 Feb 2026 18:22:07 +0000
asID:                     269986
IP address blocks:        2803:5ee0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:6e:54:bf:ae:83:a5:73:d1:a3:97:c5:d4:06:b9:74:7c:23:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172635E11B9F8AA76EFCB8104AD5A4078D472DBD
        Validity
            Not Before: Feb  4 18:17:07 2025 GMT
            Not After : Feb  3 18:22:07 2026 GMT
        Subject: CN=475C6FC13BB8AED5842433B467AF8E96489290E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:46:8a:73:21:25:97:12:53:bc:93:27:1e:7b:
                    f6:dc:bf:a6:56:2d:03:05:46:87:3f:ca:0d:1d:7d:
                    19:d3:74:95:7c:72:5a:38:2d:1b:99:72:d6:05:7e:
                    7a:b4:16:4d:6c:3d:47:e1:14:3a:11:ad:69:9b:4b:
                    e0:23:da:b4:86:d5:21:b5:ab:16:10:41:6b:2f:a9:
                    5d:20:5a:1e:9c:79:a4:b1:4a:4a:d0:55:04:83:75:
                    b9:33:03:26:0c:55:3b:5a:7c:83:79:b1:a3:00:90:
                    4f:d2:61:c3:61:25:c6:c5:2c:f1:5d:4a:cb:a2:1d:
                    03:ee:54:af:53:cb:77:72:bb:64:ff:4c:d5:3f:2b:
                    93:e1:4f:8f:b6:2c:c5:f6:b3:6a:ba:94:14:f4:98:
                    19:0f:86:b5:ca:4b:87:4f:99:17:6a:03:2a:dc:f1:
                    6b:1f:91:36:50:5f:c1:a3:a1:a2:e0:17:0b:fe:d4:
                    b4:9a:e4:56:b0:9c:c6:d7:3c:a7:14:f0:64:4f:ae:
                    6b:55:38:8b:d3:d0:62:aa:ec:02:2d:ec:3e:30:9f:
                    5f:02:f5:f9:4b:38:59:bf:e8:4d:d0:d4:70:d8:8b:
                    39:4c:61:38:cb:dc:24:61:04:cb:ef:1b:26:e9:d7:
                    45:71:fc:44:d7:8f:10:fc:bf:b5:2a:ab:7e:fb:41:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5C:6F:C1:3B:B8:AE:D5:84:24:33:B4:67:AF:8E:96:48:92:90:E5
            X509v3 Authority Key Identifier:
                keyid:17:26:35:E1:1B:9F:8A:A7:6E:FC:B8:10:4A:D5:A4:07:8D:47:2D:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/172635E11B9F8AA76EFCB8104AD5A4078D472DBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/172635E11B9F8AA76EFCB8104AD5A4078D472DBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1722531E78F42B2214CD871B42E5A4AE0BA7CEF9F568FC9C14CEF0CD7538649D/0/323830333a356565303a3a2f33322d3438203d3e20323639393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:cb:82:29:08:d2:fb:54:ae:f3:71:70:01:c3:26:6b:14:3b:
         7a:b7:7c:01:1a:1e:e4:12:8b:13:03:0a:e6:df:17:a3:21:da:
         6e:f8:c5:e2:55:05:ef:32:d3:85:fa:b3:15:b8:e2:a7:3d:36:
         9f:f1:36:de:c2:7c:98:27:1a:74:17:10:e2:29:7e:b1:2b:1b:
         52:21:21:14:9c:70:a9:f8:87:59:4f:e5:38:9f:7e:8f:50:86:
         2c:01:61:5c:78:69:9f:ea:7c:4a:68:4f:ec:40:28:02:52:08:
         1b:76:13:da:57:35:fe:5b:3c:10:a1:a9:da:e4:ab:de:87:be:
         ff:8e:29:12:a7:1c:45:45:11:b9:39:a3:0e:a6:59:0b:36:93:
         75:8a:93:10:dd:0e:96:19:ce:bc:d4:6d:86:d7:58:1a:4c:a9:
         6c:01:c1:ef:90:46:d8:2f:31:68:91:15:59:e5:ff:93:01:c8:
         fa:f8:4e:fc:f1:8c:ae:b6:7a:c2:42:97:27:34:fe:84:56:cb:
         40:86:d9:d0:e3:30:6a:b9:8f:96:96:f9:c2:12:6d:66:20:30:
         fc:6b:f3:49:09:53:ab:63:43:6f:bb:30:74:74:0e:1c:aa:3c:
         7a:a0:5b:87:0d:19:e0:1b:4e:b5:bb:76:8f:ca:24:3d:ba:e7:
         38:b0:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----