Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/323830333a343732303a3a2f33322d3438203d3e203532333431.roa
File:                     323830333a343732303a3a2f33322d3438203d3e203532333431.roa (raw, json)
Hash identifier:          7fKYf9fGXfkMyb9UuHT+BPA1yPfYF0hOrxcYWzGHtBI=
Subject key identifier:   7D:AB:41:D9:4A:A9:E8:FA:EA:63:61:BA:11:E8:ED:40:D9:FA:CE:58
Certificate issuer:       /CN=31F3439B94DD2FA758654AE121FAFA811BA0BC06
Certificate serial:       2F83FFB368234BDFEB210422A26E35285D11F112
Authority key identifier: 31:F3:43:9B:94:DD:2F:A7:58:65:4A:E1:21:FA:FA:81:1B:A0:BC:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/323830333a343732303a3a2f33322d3438203d3e203532333431.roa
Signing time:             Tue 04 Feb 2025 18:21:16 +0000
ROA not before:           Tue 04 Feb 2025 18:16:16 +0000
ROA not after:            Tue 03 Feb 2026 18:21:16 +0000
asID:                     52341
IP address blocks:        2803:4720::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:83:ff:b3:68:23:4b:df:eb:21:04:22:a2:6e:35:28:5d:11:f1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F3439B94DD2FA758654AE121FAFA811BA0BC06
        Validity
            Not Before: Feb  4 18:16:16 2025 GMT
            Not After : Feb  3 18:21:16 2026 GMT
        Subject: CN=7DAB41D94AA9E8FAEA6361BA11E8ED40D9FACE58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5c:d8:0b:e2:99:be:89:ed:bf:9d:b4:f1:10:
                    f0:19:c3:43:93:40:d8:22:5e:be:23:dd:01:93:e0:
                    ab:77:65:67:c4:05:c5:66:ad:b0:df:af:d8:eb:19:
                    9a:39:2b:b1:16:b6:97:2d:b7:03:3f:70:72:20:ad:
                    b2:5f:86:2e:75:ad:13:59:18:b2:26:12:a7:a4:4b:
                    05:9c:00:03:83:19:75:c7:1a:39:11:d9:1b:f5:65:
                    cd:ce:2a:00:3f:d9:8a:ca:7c:8d:c5:e7:8d:8a:71:
                    51:56:20:01:e1:71:a5:fa:00:22:bf:93:95:59:16:
                    28:48:a0:c9:92:b6:6e:1c:4f:6c:04:fe:40:16:c5:
                    ac:1b:15:2d:c2:d2:d1:1b:98:41:9d:b4:ff:5c:d2:
                    14:01:9d:25:db:6c:1d:89:92:9b:9d:53:13:12:3a:
                    ba:dc:51:d5:7e:19:7d:35:dc:61:3a:f8:2f:a4:59:
                    81:a3:24:49:c3:e8:c2:cc:64:43:97:bb:38:85:ac:
                    90:ab:e8:85:7f:85:d2:f4:3d:34:e3:bf:b0:f2:44:
                    2d:37:1e:5f:f4:c5:4d:5f:8b:01:74:dc:4e:81:ca:
                    56:71:d8:7e:bb:19:b6:55:33:26:4a:33:f4:fc:70:
                    8c:08:b8:d8:25:2d:9a:83:88:c4:7e:e0:f6:f7:e8:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AB:41:D9:4A:A9:E8:FA:EA:63:61:BA:11:E8:ED:40:D9:FA:CE:58
            X509v3 Authority Key Identifier:
                keyid:31:F3:43:9B:94:DD:2F:A7:58:65:4A:E1:21:FA:FA:81:1B:A0:BC:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/31F3439B94DD2FA758654AE121FAFA811BA0BC06.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2B77382DDADECADABC84153EA4D4F9C48D8F3561DD125E0CCE6E43D5950A8E34/0/323830333a343732303a3a2f33322d3438203d3e203532333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4720::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:f2:28:1d:69:ff:27:ce:44:a8:91:c0:af:15:d1:b7:cf:9b:
         9a:b8:ab:a7:e0:59:a8:a0:4c:3c:83:50:2d:5c:e7:f2:08:8c:
         ae:aa:05:d9:63:18:df:55:53:c6:45:b8:74:62:2f:8f:06:f8:
         e4:17:01:b6:80:14:b4:0a:fa:44:37:6e:e1:df:14:7f:e1:7b:
         4b:ee:6a:64:2f:19:6f:fd:5c:84:47:8f:9f:b3:82:e1:e3:66:
         70:4c:d0:86:6e:8a:ca:b8:19:1f:5f:ce:74:a8:3d:cf:9e:91:
         13:a3:8c:db:dd:9c:e3:76:84:f2:b8:60:22:e3:d8:64:c7:71:
         79:6f:69:a4:4e:87:cb:a0:fe:4c:cb:32:b7:1a:8c:fc:d2:92:
         a9:56:3f:53:0d:32:aa:cb:35:02:2c:08:4c:83:85:f6:5b:e7:
         e1:39:cc:51:8d:67:1b:cd:a3:99:64:cf:28:f9:48:6f:23:66:
         f2:93:cf:5a:eb:e6:af:b6:47:35:ff:b0:0d:89:da:85:92:45:
         2f:79:15:e5:08:e5:76:ee:e4:54:2a:e2:e9:64:cb:89:cb:01:
         d1:90:cb:7f:49:76:1f:b0:e0:b1:fc:e6:0b:ce:3a:f5:e0:79:
         ce:2f:93:0f:94:51:56:56:b4:fc:77:eb:3a:5c:64:7b:d7:db:
         d1:4d:d6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----