Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/323830333a663265303a3a2f33322d3438203d3e20323639393331.roa
File:                     323830333a663265303a3a2f33322d3438203d3e20323639393331.roa (raw, json)
Hash identifier:          Bh81OFsPAKlAdfs/PFOPKAsw+x7+blvRwfdFnq0Bjvs=
Subject key identifier:   5E:B3:3A:83:F8:71:38:A3:DD:98:0B:25:3B:85:0F:FA:14:FA:47:55
Certificate issuer:       /CN=D681AAE92F798D2EE5D99FE645FC038051698473
Certificate serial:       08CBAF4C31D4F2E420FD06C0B990E149633B4722
Authority key identifier: D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/323830333a663265303a3a2f33322d3438203d3e20323639393331.roa
Signing time:             Tue 04 Feb 2025 18:02:51 +0000
ROA not before:           Tue 04 Feb 2025 17:57:51 +0000
ROA not after:            Tue 03 Feb 2026 18:02:51 +0000
asID:                     269931
IP address blocks:        2803:f2e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:cb:af:4c:31:d4:f2:e4:20:fd:06:c0:b9:90:e1:49:63:3b:47:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681AAE92F798D2EE5D99FE645FC038051698473
        Validity
            Not Before: Feb  4 17:57:51 2025 GMT
            Not After : Feb  3 18:02:51 2026 GMT
        Subject: CN=5EB33A83F87138A3DD980B253B850FFA14FA4755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:db:fa:dd:a6:96:5c:dc:19:63:71:53:40:55:
                    26:d6:6c:ec:7c:6e:43:3b:bc:a4:71:06:8f:33:36:
                    a4:2f:d1:f0:c6:c7:98:a6:96:78:82:df:89:bc:ed:
                    ce:42:7f:02:d5:b6:56:ee:5d:53:8a:e2:ed:54:eb:
                    b3:e8:ae:47:79:ad:e7:3e:f7:c4:6e:bc:14:0d:5a:
                    65:e4:5d:ba:e2:bd:f8:22:29:ae:0a:06:16:47:44:
                    2d:82:40:ad:75:1a:8c:c5:5f:9d:ac:ed:ea:a9:19:
                    53:d4:fe:d0:f2:35:5f:b8:7e:d0:7c:43:63:cf:e3:
                    ee:37:93:33:53:d1:38:12:38:a8:5d:41:f2:d8:9a:
                    8a:b9:93:4b:cf:16:b8:44:73:83:2d:a2:8b:a4:60:
                    b6:6c:46:b4:30:9e:b5:44:33:55:0f:51:7d:bc:18:
                    21:22:86:1b:ca:24:46:ef:f6:7c:41:84:66:2a:1d:
                    b3:69:a9:95:bb:24:d2:21:01:7f:10:b9:25:b3:2d:
                    2a:70:e3:d1:0a:cc:78:41:ae:31:68:50:bf:1f:8e:
                    b4:75:de:35:ac:07:01:92:35:ef:ee:3a:76:97:2c:
                    86:6c:1c:fb:a8:a3:a5:f7:0e:79:e3:a4:cb:ea:7f:
                    8b:af:57:8d:8c:fd:00:86:8c:60:43:3e:ad:fe:4e:
                    1f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B3:3A:83:F8:71:38:A3:DD:98:0B:25:3B:85:0F:FA:14:FA:47:55
            X509v3 Authority Key Identifier:
                keyid:D6:81:AA:E9:2F:79:8D:2E:E5:D9:9F:E6:45:FC:03:80:51:69:84:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/D681AAE92F798D2EE5D99FE645FC038051698473.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D681AAE92F798D2EE5D99FE645FC038051698473.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1B51554D142CCC9C1732862BB50E43FA1615E79A46DD610C54A0F38301C75519/0/323830333a663265303a3a2f33322d3438203d3e20323639393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f2e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:7c:c0:af:1e:c1:85:b4:92:aa:3d:68:3a:1c:65:9f:09:da:
         71:e9:1b:b4:5a:27:7e:1f:bb:48:7f:74:3d:a9:59:fc:3b:4c:
         2c:eb:a9:b6:77:86:45:65:4d:47:3c:17:70:cc:3a:b0:55:1a:
         c9:0f:0f:41:94:83:c7:ba:56:2b:c7:26:2c:61:9f:cd:0f:7e:
         aa:1a:e6:b0:9d:03:83:78:8f:66:f8:2c:b2:7e:a3:4e:e4:93:
         70:e1:74:0f:66:c9:9e:c8:ef:83:9c:3d:e9:3d:85:8a:85:37:
         fc:0e:00:0d:77:04:1f:d5:5e:c8:a1:53:08:74:dd:08:e3:30:
         7b:b3:80:b0:b8:17:b9:f4:24:25:cd:e1:80:54:3c:3f:1b:ef:
         5b:13:b1:6f:b6:63:10:87:d1:05:8c:4a:30:6a:67:17:7e:2b:
         d9:03:e8:c5:6e:ad:dc:dc:2e:4c:69:72:17:e6:e9:24:e0:05:
         4e:57:4e:8b:ab:7c:6a:f1:1e:b0:f5:b5:3f:94:da:75:5d:41:
         a4:35:d1:7a:86:7f:fa:04:df:c1:69:1d:4c:16:cb:90:78:63:
         55:26:5e:78:59:a6:d6:8b:2d:9e:9b:44:bd:69:e5:45:13:43:
         38:7f:f2:0d:ae:72:2b:3b:fe:2c:50:36:1d:a7:ac:70:d9:77:
         9a:1c:29:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----