Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/323830333a646638303a3a2f33322d3438203d3e20323633373337.roa
File:                     323830333a646638303a3a2f33322d3438203d3e20323633373337.roa (raw, json)
Hash identifier:          MxkOIGvK7ZhymMXPl96BHyWslZInCIb98H56RM8b1fc=
Subject key identifier:   57:C7:D7:1E:7D:AC:83:4B:43:23:1B:53:40:BA:B9:69:1C:B9:F6:9A
Certificate issuer:       /CN=869E74EC658810B8C74561739A32C426E77C2A2F
Certificate serial:       02B37A22AADBA292B97C98427A73BFC5CACA4E62
Authority key identifier: 86:9E:74:EC:65:88:10:B8:C7:45:61:73:9A:32:C4:26:E7:7C:2A:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/869E74EC658810B8C74561739A32C426E77C2A2F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/323830333a646638303a3a2f33322d3438203d3e20323633373337.roa
Signing time:             Tue 04 Feb 2025 18:42:21 +0000
ROA not before:           Tue 04 Feb 2025 18:37:21 +0000
ROA not after:            Tue 03 Feb 2026 18:42:21 +0000
asID:                     263737
IP address blocks:        2803:df80::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b3:7a:22:aa:db:a2:92:b9:7c:98:42:7a:73:bf:c5:ca:ca:4e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=869E74EC658810B8C74561739A32C426E77C2A2F
        Validity
            Not Before: Feb  4 18:37:21 2025 GMT
            Not After : Feb  3 18:42:21 2026 GMT
        Subject: CN=57C7D71E7DAC834B43231B5340BAB9691CB9F69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:26:15:d2:f5:2b:37:f9:16:f7:24:00:1f:
                    d9:96:34:b7:27:03:ed:b9:d9:81:b0:f1:ec:49:da:
                    3c:df:9c:15:7a:2c:e0:04:12:f4:35:d8:8b:cb:a0:
                    43:60:e8:97:ea:7d:af:8a:95:bb:f5:22:11:bf:c4:
                    e8:6a:2c:72:65:5c:83:5c:48:8b:11:52:c1:d2:53:
                    87:9a:00:a3:29:34:5d:c6:77:7d:ea:9b:40:cb:3f:
                    ed:4f:02:a7:17:f6:2d:bd:ee:ff:57:f7:a5:51:a9:
                    66:3b:ca:55:1d:50:a5:78:2e:54:e3:28:b1:50:01:
                    59:3c:6b:c1:ab:4d:d6:25:fe:5a:b1:0c:bd:5e:08:
                    96:c6:6e:7f:f0:a4:18:9e:79:18:7a:58:9d:27:8d:
                    4a:97:98:35:0a:23:0d:e7:01:db:77:dc:42:05:96:
                    aa:db:56:ef:4f:e5:0b:41:e9:7b:51:f0:2d:4f:44:
                    18:9c:58:04:97:86:60:e7:7b:9f:73:af:d3:0c:ce:
                    cb:cb:f7:3e:e7:ad:83:7b:aa:9d:07:d7:d0:a3:4d:
                    b4:2a:39:72:a0:6b:89:ba:d4:82:d4:da:0c:35:8b:
                    96:cb:d2:46:5a:f8:3f:0d:f7:b2:ea:74:84:43:24:
                    a0:e1:32:d5:b7:45:21:ba:3d:02:12:38:c0:3b:db:
                    dd:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C7:D7:1E:7D:AC:83:4B:43:23:1B:53:40:BA:B9:69:1C:B9:F6:9A
            X509v3 Authority Key Identifier:
                keyid:86:9E:74:EC:65:88:10:B8:C7:45:61:73:9A:32:C4:26:E7:7C:2A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/869E74EC658810B8C74561739A32C426E77C2A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/869E74EC658810B8C74561739A32C426E77C2A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/301F196C3EC034EE5857625AFA5548C3F8774A3CE0D5511EA9019F1A3E4E6515/0/323830333a646638303a3a2f33322d3438203d3e20323633373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:df80::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:29:99:7a:67:2b:f7:77:3a:59:1f:76:20:79:3f:2c:93:56:
         c2:48:dc:db:75:03:38:b7:3a:6d:c7:87:18:98:01:26:b5:3a:
         a7:af:14:f7:06:b3:a6:a5:db:1e:2d:9c:23:d2:1c:d4:3b:18:
         50:d0:74:7e:4e:e8:5f:50:b5:22:c9:99:fa:72:2f:5d:95:bd:
         8b:83:f8:f0:c4:5c:b8:67:9c:83:29:d5:9c:eb:68:84:80:22:
         73:41:03:b6:56:92:ea:70:c2:89:31:56:73:e4:1a:3a:99:d3:
         24:b3:d3:2e:05:00:1d:16:8f:30:4b:be:0a:8f:58:b7:24:f2:
         66:f8:6f:da:81:3b:43:f2:49:c7:f6:d3:c1:ba:b7:1f:24:40:
         f4:af:70:43:82:5d:bc:15:b4:64:1c:1c:36:e0:b8:75:fb:0a:
         d9:88:21:ff:74:99:ae:12:59:4d:c4:8d:38:76:78:7e:a9:12:
         9a:c8:e3:4a:63:e4:31:d4:ac:f6:71:40:f5:a2:20:b7:1c:37:
         ce:c4:e8:09:b8:ee:09:d7:10:67:a8:b0:20:57:3a:46:44:0f:
         56:00:92:1a:4a:5f:d8:cf:06:b4:57:34:61:bf:35:e2:cf:7f:
         cf:15:c1:f2:3b:ef:cd:61:19:bb:73:cd:23:b4:39:41:dc:d8:
         4d:21:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----