Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323030303a3a2f33372d3430203d3e20323730303335.roa
File:                     323830333a653565303a323030303a3a2f33372d3430203d3e20323730303335.roa (raw, json)
Hash identifier:          TLukiyNoW9V8mdUEd3W8Hw4vYPSOzngofxbZbr1JGSk=
Subject key identifier:   7B:7B:A0:80:FA:72:31:DC:B9:EE:63:F1:7F:DF:3E:74:C6:D1:6D:CE
Certificate issuer:       /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
Certificate serial:       73D540D214699CF954C2CBCFE6D12A7FE315A17C
Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323030303a3a2f33372d3430203d3e20323730303335.roa
Signing time:             Wed 26 Feb 2025 14:35:01 +0000
ROA not before:           Wed 26 Feb 2025 14:30:01 +0000
ROA not after:            Wed 25 Feb 2026 14:35:01 +0000
asID:                     270035
IP address blocks:        2803:e5e0:2000::/37 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d5:40:d2:14:69:9c:f9:54:c2:cb:cf:e6:d1:2a:7f:e3:15:a1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
        Validity
            Not Before: Feb 26 14:30:01 2025 GMT
            Not After : Feb 25 14:35:01 2026 GMT
        Subject: CN=7B7BA080FA7231DCB9EE63F17FDF3E74C6D16DCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5a:66:24:a3:af:a0:68:38:76:df:8b:2f:e0:
                    26:95:ae:e8:07:4d:71:9f:b4:e1:22:42:5b:bf:08:
                    4b:6c:d1:9c:14:bc:a6:19:e7:5c:d1:7e:8c:94:0f:
                    81:c3:2b:62:ae:6a:2e:7f:85:ca:cf:b0:f3:23:99:
                    72:8a:cc:29:b4:8f:f3:50:2e:ba:19:23:95:61:cd:
                    2d:62:37:62:07:a1:48:35:40:86:1a:95:74:3d:c2:
                    71:7a:95:7c:7e:53:86:92:9d:17:5d:6a:ac:5a:79:
                    97:c0:58:d9:92:2a:eb:dd:65:ba:b5:e0:2d:51:e4:
                    fe:c9:fa:3e:0d:cd:77:1f:db:b7:54:46:27:0f:2c:
                    eb:e7:d6:d1:d3:3b:d8:1a:1c:80:5f:aa:41:da:4a:
                    0d:8a:2e:3d:ff:0f:89:a6:19:1a:54:eb:cb:2c:3c:
                    4f:07:7f:ff:13:71:6c:6d:87:56:29:20:b7:8a:97:
                    ca:b1:1a:b5:e7:c4:2b:13:0e:2f:dc:6e:2b:be:38:
                    f9:05:58:be:ff:ec:50:76:81:07:50:56:b1:bf:a5:
                    d0:97:4d:e9:d3:15:0b:05:53:11:5e:43:83:33:db:
                    17:e4:0e:ab:8a:ed:29:ac:0a:93:02:b6:e7:27:ab:
                    5e:7e:18:26:ca:ba:c0:37:ff:e9:43:98:15:8c:dc:
                    89:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7B:A0:80:FA:72:31:DC:B9:EE:63:F1:7F:DF:3E:74:C6:D1:6D:CE
            X509v3 Authority Key Identifier:
                keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323030303a3a2f33372d3430203d3e20323730303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5e0:2000::/37

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:03:99:af:7b:ea:c6:1d:bb:7f:2f:a4:3d:48:3a:b8:18:
         f8:bb:5f:0e:fa:57:54:4a:29:2a:06:12:e6:be:23:27:dd:cc:
         50:cb:b7:54:a0:5e:c3:16:40:f7:fe:30:be:2e:52:1b:31:2e:
         99:e8:55:e0:d2:c5:7e:33:2c:a9:2c:ec:a4:de:59:c3:e6:ed:
         74:3a:7a:fa:a4:58:bc:77:28:e1:24:b7:c9:e1:2c:3c:43:d9:
         5d:5d:9f:08:80:91:f4:de:af:77:e1:55:ba:fd:a9:d9:23:f2:
         93:a2:1a:2a:57:e1:d5:59:c8:49:14:2d:ed:90:ef:d5:13:92:
         38:c8:43:64:9e:2f:42:c8:27:5c:63:78:c8:80:35:7a:28:6c:
         12:d9:b0:dc:0d:6e:3a:38:1e:10:1e:45:df:46:6d:a7:ec:16:
         32:60:be:12:21:25:bf:c3:34:59:91:1d:4f:40:a7:a8:27:8b:
         3f:99:14:68:96:51:12:73:14:e8:e9:15:06:66:84:48:b7:e0:
         23:e5:4b:a8:69:2a:d2:e3:98:03:f1:9b:37:98:06:b3:3e:3b:
         64:7b:e6:79:8a:37:f5:e1:4e:15:c8:59:f8:6a:6f:66:da:99:
         3c:a7:3a:2d:7a:a8:0d:cc:60:ec:87:fb:55:96:bc:57:6f:76:
         2c:f4:10:5c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----