Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1C31FE4DA96AF79F9E89D40B7CB303F49A080CBF7BCF13424BE169C2CEE7B16B/0/323830333a353135303a3a2f33322d3332203d3e20323733383235.roa
File:                     323830333a353135303a3a2f33322d3332203d3e20323733383235.roa (raw, json)
Hash identifier:          VGfC4lw1Ku8n7FYCw4O77IzPClikqvJenuEQDqdTHPE=
Subject key identifier:   4D:3C:63:16:94:62:FD:89:66:71:EE:C4:58:C9:4C:4F:6C:D8:04:DD
Certificate issuer:       /CN=45C93445C2DABCED4ADB703CA46669354722F471
Certificate serial:       1FE9414EFAC4A12A3992EDEEBBFF9D3CEA0DB283
Authority key identifier: 45:C9:34:45:C2:DA:BC:ED:4A:DB:70:3C:A4:66:69:35:47:22:F4:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45C93445C2DABCED4ADB703CA46669354722F471.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1C31FE4DA96AF79F9E89D40B7CB303F49A080CBF7BCF13424BE169C2CEE7B16B/0/323830333a353135303a3a2f33322d3332203d3e20323733383235.roa
Signing time:             Thu 10 Apr 2025 23:14:29 +0000
ROA not before:           Thu 10 Apr 2025 23:09:29 +0000
ROA not after:            Thu 09 Apr 2026 23:14:29 +0000
asID:                     273825
IP address blocks:        2803:5150::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e9:41:4e:fa:c4:a1:2a:39:92:ed:ee:bb:ff:9d:3c:ea:0d:b2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C93445C2DABCED4ADB703CA46669354722F471
        Validity
            Not Before: Apr 10 23:09:29 2025 GMT
            Not After : Apr  9 23:14:29 2026 GMT
        Subject: CN=4D3C63169462FD896671EEC458C94C4F6CD804DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:6d:9c:3f:5b:c4:de:31:9f:ac:63:d2:53:
                    da:78:66:4f:e9:62:c7:4b:60:60:cc:ad:01:f6:cb:
                    01:f6:5b:6b:7d:4f:88:a2:cd:eb:17:40:eb:b5:dc:
                    07:53:0a:f8:a7:6d:10:40:c9:c9:74:93:59:ca:af:
                    16:a8:c2:56:11:cf:51:c0:d9:7e:ed:e1:bd:cf:77:
                    b7:10:82:66:f1:60:5a:18:f2:18:b8:46:74:c1:2e:
                    98:86:bc:9c:a9:4b:49:67:72:e9:c7:fc:85:a0:09:
                    6e:bb:a5:64:1a:0f:bb:77:a7:40:28:af:28:70:e6:
                    5b:e2:4c:c9:8a:01:fa:3d:80:55:52:be:5d:f1:7e:
                    77:37:ef:24:c6:ec:42:d3:97:75:db:4b:da:f5:bb:
                    a0:f8:57:7a:ba:21:68:3e:0a:b6:4d:7b:90:48:5f:
                    c0:b0:e6:ff:6e:b2:07:c2:6a:37:25:52:69:46:32:
                    63:5a:a3:f0:c4:57:f7:b8:d8:1c:89:2b:a9:f6:ac:
                    76:d3:0a:8d:f7:6f:d2:90:ee:e9:e3:da:5d:b2:9e:
                    d8:d1:c1:fd:37:5b:36:09:39:d8:d2:be:91:51:83:
                    ea:16:4f:ac:7b:eb:54:97:78:70:ac:50:02:47:8f:
                    a0:f8:c6:b0:b5:5d:2d:48:6c:62:b7:96:af:ea:e4:
                    22:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:3C:63:16:94:62:FD:89:66:71:EE:C4:58:C9:4C:4F:6C:D8:04:DD
            X509v3 Authority Key Identifier:
                keyid:45:C9:34:45:C2:DA:BC:ED:4A:DB:70:3C:A4:66:69:35:47:22:F4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1C31FE4DA96AF79F9E89D40B7CB303F49A080CBF7BCF13424BE169C2CEE7B16B/0/45C93445C2DABCED4ADB703CA46669354722F471.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/45C93445C2DABCED4ADB703CA46669354722F471.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1C31FE4DA96AF79F9E89D40B7CB303F49A080CBF7BCF13424BE169C2CEE7B16B/0/323830333a353135303a3a2f33322d3332203d3e20323733383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5150::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:69:04:13:60:3a:58:c0:29:97:83:f0:ff:22:d3:10:43:ce:
         23:92:2f:82:a8:92:9a:3b:d5:fb:b9:f4:66:52:2a:65:49:db:
         c3:c6:3e:e9:8c:fb:74:4e:ad:7b:d0:96:9b:cd:80:83:b9:69:
         ab:da:df:f0:86:4b:d6:54:99:c7:c9:d5:ca:54:ce:82:57:e1:
         f3:ed:1d:b2:75:94:3c:62:56:0a:ca:53:05:c0:aa:8b:5a:3f:
         10:fa:d2:0b:6f:b8:0f:2a:ec:db:00:a2:17:6e:70:58:f2:41:
         79:b1:11:fe:80:5d:93:17:ea:f2:c9:59:f3:74:fc:c2:ad:c0:
         1f:8d:96:f0:89:d6:9f:28:1a:40:75:61:15:8d:1a:ed:e3:f4:
         63:b8:dc:13:10:3b:b8:99:d1:16:21:74:96:89:10:11:ea:0b:
         f0:e5:c1:d9:74:9e:f4:9e:d6:ec:ec:52:87:4c:f9:b2:6d:02:
         a2:25:02:0b:2f:db:a8:7a:a8:cb:f2:e5:e5:fc:09:ea:ca:53:
         7c:8c:65:1d:8a:28:4d:46:63:e6:39:36:39:37:0e:2c:b8:d8:
         3e:7a:19:4a:47:3a:cc:1a:58:9d:f1:63:0c:69:6c:90:5f:76:
         24:ca:a9:a4:df:ec:73:ff:29:c0:dc:ce:18:b5:0b:d3:8d:92:
         eb:70:76:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----