Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e20323032.roa
File:                     323830333a396232303a3a2f33322d3634203d3e20323032.roa (raw, json)
Hash identifier:          J0NSe5MOgVvUCvNtR+pIflbH+NKnCmW6HKN7WkO8zzc=
Subject key identifier:   72:7E:1D:A5:D4:3A:CA:AB:A9:6B:99:70:F3:26:95:91:28:F2:2C:CE
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       3FEBD2D2D647092BCFDD179402E11B276CEE2A8D
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e20323032.roa
Signing time:             Tue 04 Feb 2025 18:36:42 +0000
ROA not before:           Tue 04 Feb 2025 18:31:42 +0000
ROA not after:            Tue 03 Feb 2026 18:36:42 +0000
asID:                     202
IP address blocks:        2803:9b20::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:eb:d2:d2:d6:47:09:2b:cf:dd:17:94:02:e1:1b:27:6c:ee:2a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:42 2025 GMT
            Not After : Feb  3 18:36:42 2026 GMT
        Subject: CN=727E1DA5D43ACAABA96B9970F326959128F22CCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:6c:1b:64:b5:29:46:55:57:83:3d:a2:e2:
                    2d:2d:6b:51:f1:20:22:d4:78:60:cf:ad:48:ee:70:
                    d2:40:cb:15:15:7f:30:a0:a6:5d:9d:d2:97:a5:0c:
                    d6:da:67:02:4a:38:88:a3:57:20:dc:8c:c6:cb:91:
                    39:6f:cc:17:a0:26:da:71:c3:b4:79:9b:78:53:0a:
                    0c:6e:b8:41:4e:87:af:1c:34:1b:8b:cf:0a:98:36:
                    14:04:14:b8:79:31:ba:29:61:3a:65:22:26:75:d2:
                    de:0e:18:72:29:54:93:13:e5:b4:fc:eb:7c:b8:87:
                    18:23:81:19:eb:a7:f1:62:d9:cf:f5:bf:83:96:47:
                    88:56:6c:ec:97:ad:7c:6e:7c:78:11:e3:86:71:27:
                    c2:fe:34:fa:38:99:d6:9c:cc:3e:2c:1a:71:cd:9c:
                    87:87:9b:d0:79:f7:83:8f:fc:d0:4a:7e:03:40:2b:
                    38:f9:9b:7c:f0:a0:33:40:74:2f:fe:d2:70:41:99:
                    8c:12:24:10:4c:46:30:7f:c1:2b:69:6d:9e:1a:9d:
                    07:2e:bd:1a:4d:ed:83:27:70:fb:7d:9d:c2:44:7d:
                    aa:9e:15:90:2c:89:70:57:60:f8:10:d1:47:61:c5:
                    37:b7:38:ce:d4:4f:07:f1:c4:ac:8d:3d:b2:e5:68:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7E:1D:A5:D4:3A:CA:AB:A9:6B:99:70:F3:26:95:91:28:F2:2C:CE
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:70:5e:65:ba:7b:08:45:31:44:91:89:c5:97:27:5a:89:52:
         cd:0f:f4:e5:b9:a2:aa:6c:81:a0:57:70:19:f1:85:05:78:d8:
         46:79:b3:91:d5:cf:2a:cb:b6:b3:2a:ef:18:26:b3:40:38:26:
         26:9c:8d:da:ea:c1:b6:e3:1d:73:4d:74:e4:18:0b:5e:6f:86:
         62:bd:46:9c:10:1e:cd:c2:42:e9:69:e1:70:07:5a:61:fa:33:
         10:83:b2:94:43:3a:f4:86:d0:35:ab:be:ee:86:3f:52:2f:60:
         b6:96:47:ca:4e:36:c5:fe:6f:7d:da:ad:80:02:10:a1:05:ab:
         7c:8c:7a:66:61:90:2f:d6:57:14:f2:26:77:37:cf:35:6f:06:
         74:7f:a2:b5:e3:36:dc:15:69:b5:94:56:6a:83:5c:17:54:b5:
         92:53:c1:89:ac:e2:e5:8f:e9:cf:b7:84:64:29:2c:97:9e:63:
         ca:da:a0:6e:fc:27:9f:36:d1:49:61:ba:8c:8f:22:67:57:cc:
         80:24:53:8e:fd:0f:b5:ab:14:45:27:1c:d5:a6:36:d0:47:45:
         2e:d3:08:37:e7:e1:c1:b8:da:cb:78:1a:66:e2:6c:bb:a9:09:
         bb:bb:f1:50:2e:35:4e:05:8b:8e:ed:79:f6:6f:8f:48:c7:4f:
         ce:45:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----