Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323830303a3a2f33372d3430203d3e20323730303335.roa
File:                     323830333a653565303a323830303a3a2f33372d3430203d3e20323730303335.roa (raw, json)
Hash identifier:          HWmhksbPY2NEf30DzerSqt9RT3ZKGJJlEzQv6xv5H1g=
Subject key identifier:   D8:39:A7:BD:68:C1:2B:4A:F6:03:EF:96:CA:A8:A1:2E:46:CD:A6:8F
Certificate issuer:       /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
Certificate serial:       1BC70EE8C587423FBFBF3A0E5F2C9E9072AA07E9
Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323830303a3a2f33372d3430203d3e20323730303335.roa
Signing time:             Wed 26 Feb 2025 14:35:00 +0000
ROA not before:           Wed 26 Feb 2025 14:30:00 +0000
ROA not after:            Wed 25 Feb 2026 14:35:00 +0000
asID:                     270035
IP address blocks:        2803:e5e0:2800::/37 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c7:0e:e8:c5:87:42:3f:bf:bf:3a:0e:5f:2c:9e:90:72:aa:07:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
        Validity
            Not Before: Feb 26 14:30:00 2025 GMT
            Not After : Feb 25 14:35:00 2026 GMT
        Subject: CN=D839A7BD68C12B4AF603EF96CAA8A12E46CDA68F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5c:14:b3:ba:77:bd:ca:72:54:14:2c:81:93:
                    3c:09:1c:40:17:08:b1:71:bb:8d:1f:1b:6d:be:cc:
                    4e:71:44:3c:81:81:62:d0:c4:59:6d:ef:fb:21:81:
                    cc:45:05:b4:86:e3:27:5d:f7:2b:70:ec:da:39:5b:
                    b4:9b:c4:96:fb:0f:38:0a:f7:4c:f2:fe:6c:e3:47:
                    60:9b:4d:4a:e3:f4:22:cc:36:b2:07:18:4c:50:52:
                    5d:98:26:49:1f:59:0a:e4:11:6a:e1:d8:6d:34:dc:
                    27:ec:1d:13:da:c2:c1:ba:e9:a4:51:0c:e8:51:c2:
                    7b:dc:0e:cd:80:dc:bc:3f:5d:94:0b:a3:10:7c:d3:
                    8a:de:95:df:40:c5:82:12:8b:94:11:cd:35:0a:cd:
                    16:6b:c8:25:c9:f2:88:af:52:77:e9:fc:31:57:d0:
                    51:92:1b:1f:be:65:df:7a:53:0c:90:42:f2:47:57:
                    6c:50:61:d8:92:bc:6d:74:24:e8:04:d4:e6:43:25:
                    25:85:9d:fe:61:b6:ad:68:74:2d:1d:8b:eb:a7:40:
                    ba:07:0a:80:db:14:78:36:0d:ac:d4:00:c6:66:26:
                    9b:e7:e5:04:71:ba:e7:38:52:14:a8:b4:a2:e8:77:
                    c6:cb:5d:30:1c:04:0c:99:c8:75:6f:65:cb:29:87:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:39:A7:BD:68:C1:2B:4A:F6:03:EF:96:CA:A8:A1:2E:46:CD:A6:8F
            X509v3 Authority Key Identifier:
                keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a323830303a3a2f33372d3430203d3e20323730303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5e0:2800::/37

    Signature Algorithm: sha256WithRSAEncryption
         13:77:e2:37:30:37:2e:d7:e9:cf:fe:4f:50:6e:f4:36:61:6f:
         bc:24:e1:32:6b:c4:11:b8:e2:5c:ec:4a:3e:f8:c1:f3:44:fa:
         29:d3:cb:78:e8:80:1b:25:6e:38:d5:71:da:b4:36:49:a6:35:
         c6:4d:b3:c0:64:eb:92:0a:1d:5d:e7:38:7e:b4:9f:0d:1d:6c:
         8d:9d:30:1c:de:5d:c3:f4:b4:40:75:64:c9:d7:63:52:01:50:
         c5:ef:a5:d2:2b:fd:b9:c4:ee:dd:1e:f5:bb:fe:e4:2f:dc:5d:
         01:2b:8b:45:72:7f:4c:11:78:55:dc:de:a6:9b:bd:05:88:d1:
         a8:47:cd:2a:1d:fd:5c:5c:09:40:e3:03:7b:c1:2f:d0:be:3c:
         49:b1:4a:06:d9:09:10:f3:a9:e2:49:c5:92:75:c5:71:8e:c4:
         a6:29:01:a4:49:01:81:a8:ec:c8:ec:64:b3:b6:02:ae:93:7b:
         1b:6b:73:c7:7a:0f:5e:71:58:b2:2d:9d:e8:6f:c7:42:e6:f1:
         f9:38:a0:de:48:3f:ac:1d:38:75:15:93:32:fd:4c:90:e1:f4:
         c5:b6:73:6f:1f:b5:2e:cb:e3:b4:07:74:65:7f:31:ab:54:a6:
         93:32:51:5d:24:76:74:ca:63:e7:e4:84:b4:6f:62:b8:a7:13:
         60:d9:ef:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----