Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a666666643a3a2f34382d3438203d3e203634313334.roa
File:                     323830333a383931303a666666643a3a2f34382d3438203d3e203634313334.roa (raw, json)
Hash identifier:          ANCUOjzis41im0GrQYWMP7BFHvKUfTr5NWoKwFlrIeU=
Subject key identifier:   BA:7F:59:DD:26:0A:73:8C:69:CE:98:EA:AD:28:56:02:E2:F7:D5:38
Certificate issuer:       /CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
Certificate serial:       1A47FBF798C6115A6B023DB447FB821CE659EEBE
Authority key identifier: 5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a666666643a3a2f34382d3438203d3e203634313334.roa
Signing time:             Sat 25 Jan 2025 18:20:01 +0000
ROA not before:           Sat 25 Jan 2025 18:15:01 +0000
ROA not after:            Sat 24 Jan 2026 18:20:01 +0000
asID:                     64134
IP address blocks:        2803:8910:fffd::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:47:fb:f7:98:c6:11:5a:6b:02:3d:b4:47:fb:82:1c:e6:59:ee:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
        Validity
            Not Before: Jan 25 18:15:01 2025 GMT
            Not After : Jan 24 18:20:01 2026 GMT
        Subject: CN=BA7F59DD260A738C69CE98EAAD285602E2F7D538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:73:9c:72:24:4f:2f:fe:d6:33:de:0b:68:07:
                    98:e8:ea:9a:c1:4b:76:16:97:61:a4:0a:37:4c:47:
                    7d:b8:9f:de:82:c9:e1:b6:b7:66:9a:cf:6a:6e:13:
                    ae:e4:c6:dc:37:72:ab:f8:27:df:28:d7:e3:6b:05:
                    bc:ae:f7:af:da:80:91:a2:9e:0d:01:25:2f:4d:55:
                    91:65:31:04:90:12:c7:99:ed:af:89:a1:88:75:e1:
                    52:70:72:cc:63:0c:4e:4b:26:dd:d5:26:8d:04:2f:
                    a8:90:23:4a:a0:90:f0:0b:1d:63:bf:1f:28:50:da:
                    cf:44:86:e9:69:fd:7d:87:b4:87:6f:18:03:db:89:
                    ed:e6:79:7c:a3:85:ef:71:72:f8:44:38:5d:89:81:
                    8f:bd:54:62:80:5e:db:95:38:0b:3e:0f:46:2e:65:
                    7f:a7:8c:12:ec:b2:d5:bf:47:ef:e5:e1:99:2f:cd:
                    14:6f:4b:93:ea:75:c5:9f:eb:29:4d:67:30:ce:70:
                    58:ca:c7:61:e8:9e:b4:31:80:86:8b:11:d0:7b:dc:
                    4f:04:7a:a7:17:f5:49:d7:3f:23:76:09:c0:03:27:
                    f2:a2:d7:51:0e:97:5f:74:c2:64:d9:04:eb:92:f2:
                    ed:10:19:4c:59:b6:69:9b:5c:ee:6c:8b:7c:91:bf:
                    ee:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7F:59:DD:26:0A:73:8C:69:CE:98:EA:AD:28:56:02:E2:F7:D5:38
            X509v3 Authority Key Identifier:
                keyid:5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a666666643a3a2f34382d3438203d3e203634313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8910:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:69:a2:a2:07:a3:a8:16:12:4e:41:62:37:24:de:56:18:ee:
         98:ca:09:00:d3:02:0c:d7:a9:05:82:32:a4:87:17:c4:e0:8a:
         b4:28:72:d9:4d:4e:85:84:ff:73:bc:bd:5b:2b:15:31:ec:e9:
         81:9c:3a:a1:f4:d1:a6:31:d8:80:4b:ac:de:a5:8c:b8:ed:19:
         0a:09:60:0f:a8:db:5c:66:a5:91:bd:3f:e6:73:58:9d:45:ab:
         de:00:b8:5e:f9:b4:84:15:31:d5:38:22:9e:e1:71:c4:de:53:
         57:0e:b3:2f:e8:a3:46:8a:86:c9:27:9a:b8:53:11:6e:ed:2e:
         93:ae:04:85:a9:95:13:92:e9:4d:3a:c0:07:65:33:c1:d3:e8:
         a6:10:d3:7b:ca:99:b0:7d:af:10:31:e1:08:e9:a5:60:4d:ca:
         68:79:93:76:8f:bf:d9:da:03:b4:f7:ea:bc:99:de:31:d6:26:
         2e:fd:33:6d:a4:76:1c:ab:b3:f3:c5:4d:7c:af:11:fe:4a:6a:
         06:9f:a9:29:b0:c6:d1:09:59:40:22:6a:56:5b:d6:94:a2:c5:
         05:0e:0d:b7:48:2c:8b:93:b2:cf:93:ed:43:ee:6c:73:31:e5:
         f2:ab:33:ee:a3:ba:45:05:9f:74:d8:43:75:bd:d8:9e:13:84:
         17:52:b4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----