Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/323830333a646535303a3a2f33322d3332203d3e20323733323331.roa
File:                     323830333a646535303a3a2f33322d3332203d3e20323733323331.roa (raw, json)
Hash identifier:          Plpod58hnWHaNL2xxYlb4sQH/pib0L/dUsk0dVUqEU8=
Subject key identifier:   1A:07:40:C9:15:91:00:C2:1A:FE:DD:E9:9F:E3:15:31:0D:7D:ED:2A
Certificate issuer:       /CN=BE11DC902A11374D255BCF14105B08B7CBA0B69A
Certificate serial:       742A0F9B4C85D43C055708A3DA5C7FDBF1BB1CEC
Authority key identifier: BE:11:DC:90:2A:11:37:4D:25:5B:CF:14:10:5B:08:B7:CB:A0:B6:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/323830333a646535303a3a2f33322d3332203d3e20323733323331.roa
Signing time:             Mon 24 Mar 2025 15:12:49 +0000
ROA not before:           Mon 24 Mar 2025 15:07:49 +0000
ROA not after:            Mon 23 Mar 2026 15:12:49 +0000
asID:                     273231
IP address blocks:        2803:de50::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:2a:0f:9b:4c:85:d4:3c:05:57:08:a3:da:5c:7f:db:f1:bb:1c:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE11DC902A11374D255BCF14105B08B7CBA0B69A
        Validity
            Not Before: Mar 24 15:07:49 2025 GMT
            Not After : Mar 23 15:12:49 2026 GMT
        Subject: CN=1A0740C9159100C21AFEDDE99FE315310D7DED2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:aa:3d:f3:4c:09:38:c0:98:30:56:67:a4:91:
                    89:68:21:7c:50:39:d7:c5:c0:48:10:86:60:7b:38:
                    3b:fa:ad:41:6b:9f:3c:6f:ab:54:18:18:ae:c5:c4:
                    f4:ea:af:4c:d9:0d:ac:b0:ac:4e:68:73:ff:19:bb:
                    55:50:e5:d7:38:02:b4:8a:64:38:c2:0d:51:6e:ff:
                    0d:57:71:ca:10:27:59:a1:f1:e7:be:ce:28:64:f9:
                    fb:d5:30:27:b9:47:0f:6d:50:7a:25:b1:72:8a:b2:
                    68:9a:7b:cd:34:01:19:ca:39:95:06:b0:7f:f8:08:
                    de:f7:ce:ed:fe:5b:26:9f:a0:69:33:26:40:2f:8a:
                    7c:46:1d:9e:99:48:00:b5:fa:59:83:6d:52:74:21:
                    ec:32:4d:87:38:f0:f1:f1:29:04:5d:d2:52:20:6e:
                    29:83:b3:8a:9e:2c:c4:d0:0e:f3:ec:3b:f2:65:5d:
                    21:09:fa:1f:61:f6:c1:e4:4b:58:58:18:23:4a:d7:
                    83:52:dc:6b:b8:8c:65:cf:9a:5d:aa:47:4f:28:d6:
                    43:b3:64:2e:b3:16:5b:00:fa:fd:e6:89:3e:73:56:
                    4c:86:9b:b2:b4:81:19:61:4f:fc:91:9b:43:31:1a:
                    71:44:67:c8:36:a3:61:f7:6b:03:0d:78:43:2f:7e:
                    85:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:07:40:C9:15:91:00:C2:1A:FE:DD:E9:9F:E3:15:31:0D:7D:ED:2A
            X509v3 Authority Key Identifier:
                keyid:BE:11:DC:90:2A:11:37:4D:25:5B:CF:14:10:5B:08:B7:CB:A0:B6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE11DC902A11374D255BCF14105B08B7CBA0B69A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24C52B9B79BC4671ECC497889151B32B039A37195C094FA20346B8790EE9D431/0/323830333a646535303a3a2f33322d3332203d3e20323733323331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:de50::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:87:0b:20:0e:15:c0:0c:2a:aa:73:3b:6e:1a:3b:ee:5f:2f:
         18:51:80:c1:a7:a8:21:83:92:a4:7f:7f:33:a0:72:0f:cd:f3:
         28:86:de:12:05:1a:50:f2:a8:4c:b9:d7:05:e5:34:f1:24:19:
         e5:2f:2c:a2:b8:e1:5e:d3:57:e9:e5:48:16:60:1a:10:ef:90:
         8f:35:73:6c:4e:c5:f1:10:a9:0c:10:5f:d0:fb:a5:c8:35:a4:
         47:b7:57:f6:e2:3f:32:1f:ca:4a:af:25:96:54:95:4c:9b:b1:
         05:54:d2:55:82:00:2f:ba:cd:fb:b6:a1:70:1e:c4:f1:06:3c:
         8f:df:c1:72:12:4f:61:aa:89:32:ac:ff:41:15:53:df:6e:b8:
         1c:83:c9:4a:31:36:d8:df:13:6d:97:1a:02:00:e8:0c:e4:f5:
         3d:37:96:d4:17:a5:72:41:d4:9e:82:f6:a3:41:2d:13:bf:d8:
         d0:11:53:8a:c1:1c:77:24:18:e3:8e:ee:81:d5:db:e7:1c:62:
         03:93:1e:03:1b:8f:ff:19:dc:ba:49:c5:2c:39:02:29:55:23:
         73:ee:b8:27:99:58:92:aa:17:31:88:8a:c2:1f:14:42:71:84:
         f0:ba:ac:0c:d0:2f:ee:1f:b0:67:f5:e5:7e:59:04:39:41:0e:
         69:37:0a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----