Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e20323033.roa
File:                     323830333a396232303a3a2f33322d3634203d3e20323033.roa (raw, json)
Hash identifier:          KbeTHnqj1wsuja6H4gmVjBKKjo4NJOLJI5/sf1KaaJo=
Subject key identifier:   0C:FF:BD:B8:3F:8C:76:EA:6B:A6:6B:9E:0A:11:F2:E0:79:E5:5F:9D
Certificate issuer:       /CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
Certificate serial:       275EE3660EED69F5897A7F21E7213E236CBEAFB9
Authority key identifier: DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e20323033.roa
Signing time:             Tue 04 Feb 2025 18:36:37 +0000
ROA not before:           Tue 04 Feb 2025 18:31:37 +0000
ROA not after:            Tue 03 Feb 2026 18:36:37 +0000
asID:                     203
IP address blocks:        2803:9b20::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:5e:e3:66:0e:ed:69:f5:89:7a:7f:21:e7:21:3e:23:6c:be:af:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2
        Validity
            Not Before: Feb  4 18:31:37 2025 GMT
            Not After : Feb  3 18:36:37 2026 GMT
        Subject: CN=0CFFBDB83F8C76EA6BA66B9E0A11F2E079E55F9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:99:0c:b1:84:a6:8c:8f:5d:d5:e0:bd:81:ee:
                    c1:f4:eb:52:74:ac:31:65:8b:82:c1:8d:e2:b6:82:
                    cc:94:61:e5:e3:7c:e1:96:89:2e:92:6e:85:3c:05:
                    98:7d:76:12:5d:53:8b:68:a4:01:eb:e7:c4:ad:a4:
                    4f:14:2c:b6:65:62:7b:86:bc:0d:fe:d3:af:0d:cf:
                    cf:dd:8a:a3:0f:6e:1a:43:0c:e6:0e:a2:2d:2b:fc:
                    42:33:7f:ba:78:c3:1a:c6:6d:8e:be:03:10:28:96:
                    c0:e0:7c:e9:c9:07:05:36:9a:ef:a2:b3:80:3a:ec:
                    e5:28:64:ff:27:57:e8:6b:38:ad:34:a8:0b:66:5f:
                    56:1a:2c:1d:03:27:bb:00:83:46:42:75:f6:79:9d:
                    61:07:6c:18:a2:d1:5c:31:17:c5:bf:0f:ea:64:d2:
                    8b:3e:59:02:84:c3:68:f2:ce:9e:14:c6:2d:ae:09:
                    4c:5a:10:bc:c2:41:b1:2b:a4:00:8c:91:1e:ed:a8:
                    65:48:37:3c:19:88:5a:2f:6f:9c:1e:1b:db:f1:7c:
                    03:a4:63:31:fd:b6:13:c2:eb:0a:f7:ae:26:89:dc:
                    9d:d3:82:f5:c0:f4:e3:19:2f:00:6f:a3:d4:98:ad:
                    0b:75:f2:02:50:69:e9:85:17:51:0d:51:db:bc:f7:
                    3c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FF:BD:B8:3F:8C:76:EA:6B:A6:6B:9E:0A:11:F2:E0:79:E5:5F:9D
            X509v3 Authority Key Identifier:
                keyid:DE:D9:DD:B6:E0:5D:26:D9:3F:76:D4:43:4C:06:0C:7E:1D:26:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/DED9DDB6E05D26D93F76D4434C060C7E1D26E6C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/23C75C911B352DF0BC9691D4FFEA0118290A296B48618F95A0D7BBF42C21BB43/0/323830333a396232303a3a2f33322d3634203d3e20323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:85:67:db:29:8d:43:db:77:91:bc:3b:36:f0:e5:ba:0a:7b:
         0a:e5:5d:ea:ec:fa:37:78:d4:62:49:ab:94:1c:51:51:fd:81:
         78:ac:32:83:45:6b:45:12:34:6c:8f:f4:83:77:5e:4c:f6:72:
         72:0d:26:d3:a3:df:0c:8e:72:64:44:cd:e5:5c:b9:45:53:fb:
         84:0a:55:c4:a9:7f:04:cb:7f:e6:fb:39:85:ba:14:08:3e:7e:
         79:54:ed:67:6e:03:00:84:0d:c0:95:d6:90:96:4c:7e:ec:ad:
         e5:b1:97:54:68:08:d4:63:72:d7:01:c1:0d:88:b7:66:e4:d1:
         2b:02:ed:12:13:e1:cc:f3:63:ed:7a:c4:88:bd:5f:5d:99:47:
         f5:40:7d:45:51:12:30:96:e8:fa:0f:ca:4e:19:f3:0c:e1:f4:
         56:30:34:f1:4c:f3:99:f4:3b:23:4d:84:93:03:53:fd:42:2b:
         6f:2b:18:97:29:1e:b0:e0:01:fe:ce:98:50:de:94:c8:7e:3d:
         99:84:0e:00:76:08:e3:87:41:4e:ab:99:b0:d8:1a:e2:8a:5a:
         44:c3:95:20:f7:69:02:3b:97:7a:a8:9e:b8:03:eb:b8:62:6c:
         5b:ce:c9:68:0c:a1:c2:13:1f:d8:df:33:b2:1a:63:c5:db:48:
         30:72:c9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----