Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323033.roa
File:                     323030313a313333303a3a2f32392d3634203d3e20323033.roa (raw, json)
Hash identifier:          y5RWsgx7QPIguomfhuCbvBEEXFacpAdS0U4RfHS4oxs=
Subject key identifier:   D3:B1:40:F0:38:21:DB:F5:A6:4B:FF:DA:B8:E8:A4:BB:9E:7A:4C:2E
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       320C7038A4DC2BCEDA67CC560666CAF7BC7533E3
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323033.roa
Signing time:             Tue 04 Feb 2025 18:36:36 +0000
ROA not before:           Tue 04 Feb 2025 18:31:36 +0000
ROA not after:            Tue 03 Feb 2026 18:36:36 +0000
asID:                     203
IP address blocks:        2001:1330::/29 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:0c:70:38:a4:dc:2b:ce:da:67:cc:56:06:66:ca:f7:bc:75:33:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:36 2025 GMT
            Not After : Feb  3 18:36:36 2026 GMT
        Subject: CN=D3B140F03821DBF5A64BFFDAB8E8A4BB9E7A4C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8f:ec:eb:0d:4c:1b:b2:08:ea:8d:31:9e:56:
                    c1:90:2c:65:1b:71:a5:0c:05:0c:71:68:16:84:1f:
                    67:29:76:9b:49:db:d2:68:fc:e3:b4:5d:39:62:09:
                    ac:eb:04:c6:8e:bb:f4:d4:c9:31:47:a6:c9:9f:25:
                    b6:c2:80:8f:e3:6a:6f:f9:a2:08:60:ec:e1:f4:95:
                    c7:bb:35:99:05:0b:f4:87:23:18:02:56:ba:96:db:
                    e6:63:f5:ce:cb:cc:3b:9b:51:0d:c5:99:11:24:56:
                    e6:47:cb:0a:39:41:7c:1b:05:b3:7c:70:0d:af:66:
                    51:7e:da:a4:f9:28:58:55:0a:29:33:49:b1:99:fd:
                    ed:f0:06:a3:33:62:91:49:ff:25:ad:d7:fe:d6:59:
                    8a:e1:05:53:0f:36:77:25:3e:2a:17:a6:a6:45:8a:
                    ce:90:63:31:3b:6c:92:97:6e:51:e4:bb:fe:c2:66:
                    17:48:00:f7:22:e8:3d:79:88:c5:82:2f:37:4b:4c:
                    01:12:5d:04:b2:aa:10:bb:02:d3:53:09:4f:5c:0b:
                    55:fe:2e:69:11:de:59:8f:42:b2:e2:c9:78:f8:14:
                    58:ad:48:e7:09:b7:c7:60:d1:5e:97:2d:0f:7b:23:
                    44:8a:77:47:de:29:8f:5f:bb:e4:30:04:88:a4:de:
                    b4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B1:40:F0:38:21:DB:F5:A6:4B:FF:DA:B8:E8:A4:BB:9E:7A:4C:2E
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323030313a313333303a3a2f32392d3634203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:1330::/29

    Signature Algorithm: sha256WithRSAEncryption
         14:3d:04:71:56:72:03:e2:59:93:7c:36:52:fb:b1:d0:93:57:
         aa:9a:cd:b4:46:d2:09:8a:a7:67:d2:fc:73:d6:6a:07:55:94:
         82:65:09:ff:d9:ba:73:18:bc:30:06:81:8a:39:53:18:a5:06:
         9f:5d:fd:5f:6c:f5:46:85:ac:95:5e:f6:22:69:4a:73:97:8f:
         0d:b8:24:06:71:67:8d:88:ae:e8:5f:9b:f5:80:49:dc:f6:95:
         90:04:4f:9d:f7:ab:b2:d0:81:65:30:40:75:04:0a:9d:15:39:
         4a:92:1f:31:3a:8f:ee:d9:22:07:0d:31:43:b3:7d:d7:92:38:
         74:45:79:25:66:de:29:3e:03:d0:09:a2:77:2c:0c:a1:a9:64:
         83:b8:95:7f:6b:9b:be:d3:80:e0:20:c0:4a:af:31:04:35:7b:
         6c:47:8d:23:92:3d:8a:07:4c:73:62:05:23:60:66:9f:67:11:
         6b:11:94:03:1e:4c:70:11:1f:e1:f3:ff:1a:41:56:39:87:c7:
         80:a2:7a:29:5c:9c:89:c7:3c:16:3b:44:37:1a:3f:16:5e:ba:
         04:d0:78:1f:f8:4e:2d:5c:83:a9:b2:8c:a2:ca:b5:1e:4d:af:
         70:bb:1d:4d:33:ac:b4:cf:09:a4:59:32:b4:b9:23:35:e3:b1:
         59:67:5e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----