Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a666666653a3a2f34382d3438203d3e203634313334.roa
File:                     323830333a383931303a666666653a3a2f34382d3438203d3e203634313334.roa (raw, json)
Hash identifier:          +DZhfZO0fhY+dwlSDqjGjuGH2qJDYmlbvTK+xJebfFw=
Subject key identifier:   AA:F9:B6:D6:2E:83:F4:C9:36:12:70:90:40:2A:CE:D9:E4:33:8B:9D
Certificate issuer:       /CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
Certificate serial:       77CD8AEDB015A974BAB71EECE88E10082528B540
Authority key identifier: 5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a666666653a3a2f34382d3438203d3e203634313334.roa
Signing time:             Sat 25 Jan 2025 18:20:00 +0000
ROA not before:           Sat 25 Jan 2025 18:15:00 +0000
ROA not after:            Sat 24 Jan 2026 18:20:00 +0000
asID:                     64134
IP address blocks:        2803:8910:fffe::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:cd:8a:ed:b0:15:a9:74:ba:b7:1e:ec:e8:8e:10:08:25:28:b5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E04FF1D1502CAA08A7AD24783C2E137D6AFC709
        Validity
            Not Before: Jan 25 18:15:00 2025 GMT
            Not After : Jan 24 18:20:00 2026 GMT
        Subject: CN=AAF9B6D62E83F4C936127090402ACED9E4338B9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7e:dc:01:09:4d:36:97:41:18:46:c6:76:3f:
                    6d:ed:85:89:0a:82:db:c7:6e:ee:61:94:64:98:ca:
                    32:64:93:32:fc:b7:e6:ca:6e:b8:c2:13:ff:4a:8a:
                    d8:f7:c5:0d:51:75:8f:51:e7:ce:2b:12:3d:12:84:
                    19:97:3f:18:1d:c1:60:b4:69:29:08:23:b3:9b:3b:
                    06:64:aa:de:92:1d:d9:d9:c7:a3:63:b5:3c:8c:2b:
                    b9:9a:23:0c:87:5c:5a:de:eb:d3:bf:b5:d0:f7:28:
                    dc:23:f5:3f:27:e4:ad:4c:9b:d1:89:a9:6c:13:a8:
                    ce:8f:2f:2f:05:53:0a:76:df:32:46:df:aa:cf:87:
                    61:9d:40:d8:83:75:30:b7:b1:3b:f2:7c:cf:4f:a0:
                    aa:41:2f:d0:b5:e2:94:e6:c2:af:07:a5:18:d6:3c:
                    f6:78:db:1a:77:eb:b3:b7:0a:ed:1d:8d:87:22:b5:
                    1f:32:6a:7d:a3:06:15:3b:af:3d:84:f9:8d:c9:82:
                    47:3e:05:1d:c1:97:7c:bf:21:69:78:69:42:ba:ad:
                    49:eb:60:a9:72:65:3f:b8:ff:cf:18:71:b9:b1:be:
                    3f:9b:67:66:60:73:0b:d5:e5:76:84:f2:19:e9:ab:
                    68:80:7f:cf:5b:ed:9b:28:32:f6:18:db:df:f1:9b:
                    df:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F9:B6:D6:2E:83:F4:C9:36:12:70:90:40:2A:CE:D9:E4:33:8B:9D
            X509v3 Authority Key Identifier:
                keyid:5E:04:FF:1D:15:02:CA:A0:8A:7A:D2:47:83:C2:E1:37:D6:AF:C7:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E04FF1D1502CAA08A7AD24783C2E137D6AFC709.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/25E66E6E20579163B502223B71B9DA3511AD417FEC7D054C5C9E8825E7DCD7EA/0/323830333a383931303a666666653a3a2f34382d3438203d3e203634313334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8910:fffe::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:20:01:dc:24:a5:53:e8:8f:01:b8:30:1f:8d:64:c6:af:40:
         af:ea:b0:28:6a:0c:6a:6a:89:4b:cd:7f:33:df:2a:44:a8:e8:
         49:ba:8a:cb:c0:cf:03:5b:57:d1:f3:0b:a2:4b:63:f6:4a:5b:
         35:4f:52:e2:94:13:1e:55:d7:f7:92:7f:30:a3:00:c3:5f:99:
         9a:8f:83:92:e9:d1:f3:11:1e:b6:4b:bb:80:3b:ae:15:10:01:
         a0:48:9d:e8:c1:0b:dc:7c:47:4b:c4:3d:60:73:06:3b:ce:ba:
         eb:6a:e1:84:cd:c7:49:42:6f:8d:49:7c:bb:d0:43:e3:21:ba:
         c8:e3:45:78:00:d7:d4:11:8c:72:51:fa:fd:15:42:d1:e6:ac:
         40:81:5f:f0:8f:a4:82:d2:4c:82:7f:eb:e9:f7:16:24:2b:fa:
         37:97:09:b1:8c:11:2e:ca:28:ed:f2:2f:3e:76:fa:5a:0c:8d:
         8f:42:70:f5:46:8d:a0:70:6a:ce:52:16:ba:dd:1b:70:1d:fd:
         ec:bb:28:96:fa:92:df:82:11:a4:f3:f3:3b:a2:31:24:29:1b:
         25:fa:0c:76:9f:0c:23:8d:0c:3f:e1:69:37:cf:4c:ec:63:ba:
         d7:7d:f0:42:d9:54:08:31:a8:12:f9:7f:24:1a:63:8a:6a:e2:
         d4:bd:4f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----