Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/202F0B917726011A2AE7012B20550C853DFD3269BC1DB45FEFA04E7D33ED5799/0/323830333a666135303a3a2f33322d3438203d3e20323733313931.roa
File:                     323830333a666135303a3a2f33322d3438203d3e20323733313931.roa (raw, json)
Hash identifier:          7u3L1HuFRTPnRkdum0ooUaagFjh/42odSWaIgNTvDQ0=
Subject key identifier:   09:5F:2E:24:9F:2E:1C:02:9D:77:61:D6:8E:53:22:EF:7D:43:1C:00
Certificate issuer:       /CN=A6F541BCC9A324941892CFCEF5F26D014398ABCF
Certificate serial:       6364A4EB208109327326C481F7BB4F8CE1FA27CF
Authority key identifier: A6:F5:41:BC:C9:A3:24:94:18:92:CF:CE:F5:F2:6D:01:43:98:AB:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6F541BCC9A324941892CFCEF5F26D014398ABCF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/202F0B917726011A2AE7012B20550C853DFD3269BC1DB45FEFA04E7D33ED5799/0/323830333a666135303a3a2f33322d3438203d3e20323733313931.roa
Signing time:             Tue 18 Feb 2025 21:10:09 +0000
ROA not before:           Tue 18 Feb 2025 21:05:09 +0000
ROA not after:            Tue 17 Feb 2026 21:10:09 +0000
asID:                     273191
IP address blocks:        2803:fa50::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:64:a4:eb:20:81:09:32:73:26:c4:81:f7:bb:4f:8c:e1:fa:27:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6F541BCC9A324941892CFCEF5F26D014398ABCF
        Validity
            Not Before: Feb 18 21:05:09 2025 GMT
            Not After : Feb 17 21:10:09 2026 GMT
        Subject: CN=095F2E249F2E1C029D7761D68E5322EF7D431C00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bc:21:bf:e6:7b:06:27:54:f7:51:b7:e1:ff:
                    6c:00:f5:16:a4:29:1e:d1:fa:8f:de:c8:67:d5:89:
                    d0:b6:2b:e4:d3:33:e9:69:5d:4b:56:71:8f:54:0a:
                    a8:a8:7c:1e:6c:3a:26:0d:4b:06:39:02:e3:15:3d:
                    37:2f:2a:80:30:aa:28:59:68:36:5c:37:fc:90:ee:
                    9e:8b:1e:3d:c4:29:fe:c8:cc:f4:96:02:33:ea:d4:
                    d9:7b:0d:55:e2:6c:de:d2:36:cb:19:f7:cd:4f:20:
                    f5:d6:43:4e:88:83:c4:dc:12:e1:91:ac:58:d5:73:
                    8b:7c:a9:23:95:82:5f:86:f8:1e:cd:91:bd:dd:43:
                    57:b1:07:1d:b0:81:d4:1e:77:39:bb:83:f8:8b:bd:
                    60:44:5a:f8:3a:79:ae:6b:c9:fd:d7:19:d4:b8:45:
                    4f:2e:18:bf:f8:02:36:6c:26:09:6f:44:87:9e:4d:
                    59:e8:04:a0:2e:b6:76:7c:e0:ee:e0:62:7e:83:37:
                    e0:41:eb:ce:08:8a:41:3a:af:e7:24:68:1c:0a:3d:
                    c7:d6:1e:f6:2f:15:2c:cc:25:da:34:6f:df:c3:11:
                    53:a4:30:a7:ba:ef:2c:0b:fa:5c:9b:06:b2:b0:09:
                    29:12:8d:24:22:04:33:2b:27:6b:8e:d9:0c:1d:d6:
                    57:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:2E:24:9F:2E:1C:02:9D:77:61:D6:8E:53:22:EF:7D:43:1C:00
            X509v3 Authority Key Identifier:
                keyid:A6:F5:41:BC:C9:A3:24:94:18:92:CF:CE:F5:F2:6D:01:43:98:AB:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/202F0B917726011A2AE7012B20550C853DFD3269BC1DB45FEFA04E7D33ED5799/0/A6F541BCC9A324941892CFCEF5F26D014398ABCF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A6F541BCC9A324941892CFCEF5F26D014398ABCF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/202F0B917726011A2AE7012B20550C853DFD3269BC1DB45FEFA04E7D33ED5799/0/323830333a666135303a3a2f33322d3438203d3e20323733313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa50::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:58:b8:e3:f0:67:9f:4d:fc:63:7a:6d:57:e4:ba:93:7f:30:
         f8:32:b7:3e:9b:83:79:65:73:09:e3:4b:11:19:56:5e:90:2d:
         63:af:20:ee:1a:58:74:3e:bb:07:0a:18:4c:a9:55:6e:87:d8:
         4b:cc:bd:fc:26:b5:4a:56:bf:ab:8c:8f:e6:25:06:07:61:ea:
         8f:03:9e:0a:a6:e7:fa:19:5e:13:1e:d6:76:2a:33:a1:0d:e2:
         e7:7d:9d:2b:6b:4c:a3:63:5b:5e:fb:25:84:a2:d4:f4:4c:11:
         ce:2e:ee:00:b0:e9:fa:65:b2:3a:96:f2:73:a3:c8:90:fc:1b:
         76:4e:b7:e7:93:47:68:72:f8:04:68:3f:46:4b:93:ef:ff:96:
         9e:1c:ee:93:c3:c0:a0:78:e3:ae:e1:9b:3f:fd:f0:a7:f8:b2:
         a4:aa:59:e7:0a:34:6c:b6:2e:f4:39:02:44:50:b0:7c:2a:dc:
         ca:13:ce:78:02:20:5b:d3:5f:23:08:30:74:82:89:2f:22:82:
         18:b2:e9:61:16:b3:d5:36:0e:f5:4c:1f:67:cc:cc:54:0b:3f:
         56:03:09:40:4e:49:c8:7d:75:04:a2:41:83:47:fb:9a:5c:78:
         0a:45:b2:9f:ba:45:ab:37:a3:b0:a8:0d:60:0c:9e:a2:67:eb:
         f7:67:56:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----