Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a333030303a3a2f33372d3430203d3e20323730303335.roa
File:                     323830333a653565333a333030303a3a2f33372d3430203d3e20323730303335.roa (raw, json)
Hash identifier:          W+5MHkqBVl1CuSTWgDuV8e032ufWoaKD9AxoPiQkqpk=
Subject key identifier:   4D:5F:79:E1:5F:57:A9:F3:5F:67:B6:51:40:15:E6:F3:AC:B0:92:8B
Certificate issuer:       /CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
Certificate serial:       33538BAEC489FA521FDF25E658C3795101FAC0CF
Authority key identifier: C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a333030303a3a2f33372d3430203d3e20323730303335.roa
Signing time:             Wed 26 Feb 2025 14:35:01 +0000
ROA not before:           Wed 26 Feb 2025 14:30:01 +0000
ROA not after:            Wed 25 Feb 2026 14:35:01 +0000
asID:                     270035
IP address blocks:        2803:e5e3:3000::/37 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:53:8b:ae:c4:89:fa:52:1f:df:25:e6:58:c3:79:51:01:fa:c0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49B3EB85EBAEC5AE7373A6398C425068DE4257A
        Validity
            Not Before: Feb 26 14:30:01 2025 GMT
            Not After : Feb 25 14:35:01 2026 GMT
        Subject: CN=4D5F79E15F57A9F35F67B6514015E6F3ACB0928B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:0a:c1:2e:32:a8:85:3c:d6:d5:74:ab:34:
                    d2:d5:a8:bf:62:a5:2d:7a:cb:87:66:21:03:0e:9d:
                    62:f9:33:47:41:54:a5:75:79:2e:a4:5b:40:77:de:
                    e7:74:70:1e:06:ee:6e:bb:34:c4:fe:da:12:74:4e:
                    c5:ae:8d:c8:74:61:32:3f:47:b1:f6:f2:d7:21:2b:
                    35:d9:51:88:43:1c:dc:5b:1e:b1:79:a9:0f:2a:9f:
                    fd:02:07:ce:ba:01:f2:14:9f:68:f1:99:4b:68:2f:
                    2f:0e:c5:60:7d:1c:19:c2:a3:c9:6d:1c:93:ec:db:
                    49:0c:44:82:a7:4b:42:ed:68:29:ca:5e:fa:62:02:
                    4f:4e:ca:90:61:2a:27:b1:d9:cd:6a:45:8b:27:4e:
                    f7:ea:2c:1f:5b:e1:b1:96:b8:c2:ca:fd:26:fe:6b:
                    2b:78:44:39:26:f9:b5:7b:d6:ae:ea:b4:16:d5:c6:
                    01:a1:2f:4c:0a:71:11:bc:7d:52:74:67:dc:ac:96:
                    cf:2c:e3:49:ed:b2:d0:57:60:7e:dd:62:6b:5e:0b:
                    79:15:10:a1:1b:bb:52:ed:1b:df:57:45:23:56:06:
                    2f:66:6f:7f:22:16:9b:35:3d:18:9b:75:44:72:e7:
                    d2:88:61:f5:58:38:9b:50:41:de:7f:6a:98:4d:95:
                    14:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5F:79:E1:5F:57:A9:F3:5F:67:B6:51:40:15:E6:F3:AC:B0:92:8B
            X509v3 Authority Key Identifier:
                keyid:C4:9B:3E:B8:5E:BA:EC:5A:E7:37:3A:63:98:C4:25:06:8D:E4:25:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C49B3EB85EBAEC5AE7373A6398C425068DE4257A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1950988E5AEEEF1FE876BFD8B0F24D5600C40D2B053A1BD786FD5A8AD3EBA56C/0/323830333a653565333a333030303a3a2f33372d3430203d3e20323730303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e5e3:3000::/37

    Signature Algorithm: sha256WithRSAEncryption
         37:27:29:91:63:4f:eb:5d:bf:d2:36:bc:b1:17:03:1d:de:54:
         82:ab:14:b2:a8:9e:d7:94:a8:18:32:9d:cb:eb:5d:1c:1f:4e:
         c8:0f:9c:15:03:c5:de:55:9d:ff:06:7d:e4:55:96:69:46:33:
         ea:8b:f1:0f:34:92:6c:1b:62:9e:73:f2:9c:ff:e8:7a:61:99:
         fb:3b:82:94:53:2e:60:83:da:b0:ea:04:1a:2f:ab:40:3f:21:
         5c:e0:e4:2b:cd:fd:03:51:9d:53:b8:b0:32:d3:b2:fd:10:74:
         6f:21:c5:42:5e:36:a6:92:f4:5a:8a:e6:5e:fe:51:97:bb:a1:
         6a:56:68:8b:01:5d:52:55:39:68:ba:fc:e9:d9:ca:1d:33:ef:
         93:35:46:8b:32:c7:f7:1e:c8:a3:52:bf:b7:2a:62:9b:c3:68:
         a0:5d:71:16:47:f8:4b:ea:48:4e:64:d5:0f:f4:da:ed:87:85:
         95:ab:e5:d0:63:84:b4:bf:03:13:d9:4b:17:16:4b:93:0d:c7:
         bf:81:5f:04:83:22:47:d5:89:c4:90:88:81:fd:31:39:da:01:
         14:1f:8c:05:c5:27:aa:7a:97:c0:a4:50:c0:d2:38:aa:9b:2d:
         23:b1:1c:84:0e:d0:4b:17:dc:e5:17:52:f0:b7:ec:38:4d:d7:
         39:6b:6c:7f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----