Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a333030303a3a2f33372d3430203d3e20323730303335.roa
File:                     323830333a653565303a333030303a3a2f33372d3430203d3e20323730303335.roa (raw, json)
Hash identifier:          /2H8SP98HvOspNanCMcu8q8NBKqTAAl2ngOiAYEgPkM=
Subject key identifier:   FD:85:42:68:8B:99:BA:05:55:59:0D:8E:3C:87:40:C1:E1:1D:25:F2
Certificate issuer:       /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
Certificate serial:       1DFF244DE2345F37EF3EE2C63D8F8920065BD5BD
Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a333030303a3a2f33372d3430203d3e20323730303335.roa
Signing time:             Wed 26 Feb 2025 14:35:02 +0000
ROA not before:           Wed 26 Feb 2025 14:30:02 +0000
ROA not after:            Wed 25 Feb 2026 14:35:02 +0000
asID:                     270035
IP address blocks:        2803:e5e0:3000::/37 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ff:24:4d:e2:34:5f:37:ef:3e:e2:c6:3d:8f:89:20:06:5b:d5:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
        Validity
            Not Before: Feb 26 14:30:02 2025 GMT
            Not After : Feb 25 14:35:02 2026 GMT
        Subject: CN=FD8542688B99BA0555590D8E3C8740C1E11D25F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:66:da:fc:43:ed:7e:cd:f5:88:cb:88:93:
                    a4:d0:7a:66:c3:da:67:0a:ba:70:af:73:b8:f0:da:
                    b7:6b:7f:ba:2b:4b:61:8d:01:ff:13:ec:b6:d1:82:
                    43:d1:74:f1:53:bf:36:70:64:93:87:db:e3:1a:83:
                    ce:20:58:9b:10:cf:71:b9:1d:86:3b:b4:f9:66:e1:
                    9b:0a:3f:37:44:99:6d:30:1f:b7:d1:15:e6:ab:0a:
                    ce:79:a6:ba:fa:ca:cb:a1:7a:02:fd:fb:b6:70:ce:
                    25:69:a6:4f:9c:e1:46:e6:60:a2:0e:ef:13:9a:35:
                    18:1f:ea:a6:98:a9:35:b4:4a:2c:55:87:8c:1f:73:
                    1c:a1:5d:c9:7b:fa:4d:76:7f:cf:84:99:a4:58:75:
                    eb:82:ce:80:53:aa:46:6b:38:e9:c3:ee:35:75:41:
                    d7:ee:28:0d:c6:90:d2:c6:97:77:64:1a:f3:c8:a7:
                    3f:73:4c:d1:14:e2:11:72:82:b9:02:aa:14:dd:60:
                    40:52:db:fc:d8:d0:ec:75:41:32:4f:63:9c:26:78:
                    aa:59:70:3f:4e:ec:38:c6:fe:cf:d6:b6:e9:4c:f2:
                    16:51:e7:fb:bd:d5:76:aa:af:81:b1:f2:06:ea:2f:
                    3a:73:2b:ac:1c:77:e8:49:06:0d:f5:61:b0:47:02:
                    cc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:85:42:68:8B:99:BA:05:55:59:0D:8E:3C:87:40:C1:E1:1D:25:F2
            X509v3 Authority Key Identifier:
                keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565303a333030303a3a2f33372d3430203d3e20323730303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5e0:3000::/37

    Signature Algorithm: sha256WithRSAEncryption
         25:3d:b5:57:5f:4e:cb:8a:97:f8:ba:e6:91:c3:41:0b:0f:8d:
         02:48:1f:07:48:18:6d:ff:ab:f2:2b:0b:b2:51:90:0b:c6:32:
         76:3f:a1:a4:0b:c8:de:96:2b:eb:a6:fb:9d:e9:d2:0d:87:91:
         5d:26:0b:d8:b8:07:e9:95:90:49:23:23:1d:86:2a:9b:4e:6e:
         63:29:8a:ea:95:8a:2c:06:9a:92:78:d6:22:a8:91:4f:dc:55:
         17:60:9f:ab:1a:9c:79:50:87:b3:6d:57:8d:09:e2:d7:23:f5:
         ca:eb:d5:f9:4e:5e:a7:a0:82:72:28:8b:69:42:38:18:d0:7f:
         d6:b2:5d:ee:2e:7f:19:ee:2e:9c:06:bc:97:e8:13:04:08:3e:
         7c:88:69:5e:f1:47:ff:95:f6:ed:d5:98:8b:e4:c4:3b:b4:8d:
         da:71:1b:27:00:23:3b:2d:b7:0d:74:58:2d:3e:b1:fe:90:de:
         44:af:ee:62:cd:f3:44:7a:bf:08:e1:98:7b:ce:5e:13:ee:e4:
         4c:c6:c9:17:12:72:99:3b:d1:59:10:f6:97:b2:4b:4f:4d:3c:
         dd:88:51:c0:eb:4f:b6:34:d7:0b:fb:a1:96:6e:51:a2:54:dd:
         94:01:f8:37:e3:d7:df:5c:fe:56:9f:f7:b2:9e:d4:68:5e:15:
         bb:c3:02:a9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----