Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/323830333a393536303a3a2f33322d3332203d3e20323639373539.roa
File:                     323830333a393536303a3a2f33322d3332203d3e20323639373539.roa (raw, json)
Hash identifier:          zTXhMmY9PCRs5ycourgbMtQpFVAeEWz/ezfHfb7lJvs=
Subject key identifier:   3C:C0:7A:1B:0B:4E:F9:7D:35:8A:2D:AF:C2:C4:56:7A:ED:72:58:EB
Certificate issuer:       /CN=FD653B1E827221FC7B80694271984B30114955E0
Certificate serial:       0AE13C499D7512C4037B8170F48BDA8DF9CA79A7
Authority key identifier: FD:65:3B:1E:82:72:21:FC:7B:80:69:42:71:98:4B:30:11:49:55:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/323830333a393536303a3a2f33322d3332203d3e20323639373539.roa
Signing time:             Tue 04 Feb 2025 18:33:19 +0000
ROA not before:           Tue 04 Feb 2025 18:28:19 +0000
ROA not after:            Tue 03 Feb 2026 18:33:19 +0000
asID:                     269759
IP address blocks:        2803:9560::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:e1:3c:49:9d:75:12:c4:03:7b:81:70:f4:8b:da:8d:f9:ca:79:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD653B1E827221FC7B80694271984B30114955E0
        Validity
            Not Before: Feb  4 18:28:19 2025 GMT
            Not After : Feb  3 18:33:19 2026 GMT
        Subject: CN=3CC07A1B0B4EF97D358A2DAFC2C4567AED7258EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6e:0a:12:20:7c:b4:67:bc:44:c2:41:de:98:
                    ab:15:aa:b0:06:96:20:df:4a:4d:7a:78:77:69:14:
                    32:eb:89:6c:0b:e6:12:0d:10:b3:85:49:ae:98:cd:
                    01:91:97:a9:0d:dc:d3:43:cb:03:37:d9:e0:05:a2:
                    37:b6:cd:b0:81:b4:a1:7c:a8:60:f4:1d:a8:fb:b6:
                    2a:28:fe:6a:24:9e:5b:89:92:fe:c5:77:08:2a:cc:
                    70:7d:18:69:53:01:82:c8:7c:48:db:18:44:87:39:
                    8c:4b:58:c6:88:d9:7e:af:54:df:93:3f:c9:9c:ba:
                    01:91:5f:8d:dd:4a:49:63:21:3b:ad:c3:7e:71:e2:
                    5e:cf:97:42:b7:8c:56:06:65:c8:86:e2:fb:7e:d9:
                    47:63:cf:e2:85:1a:b5:11:2e:62:a8:81:63:9b:d7:
                    d0:91:fa:f5:d7:89:4d:af:5b:08:a7:eb:5a:e9:19:
                    e7:bd:9b:8e:f4:db:e2:ef:07:e1:07:57:a2:c6:05:
                    1e:1a:a2:a3:c9:ff:1c:c1:b8:f2:b6:f0:77:35:86:
                    c7:bb:2a:7f:26:d3:58:b0:ff:d0:f7:67:02:c1:c9:
                    ce:e7:05:59:c0:1e:fc:2d:91:6c:f2:4e:56:b5:cf:
                    2b:fc:00:79:32:0b:0e:36:91:4b:7d:02:d5:e3:12:
                    e3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C0:7A:1B:0B:4E:F9:7D:35:8A:2D:AF:C2:C4:56:7A:ED:72:58:EB
            X509v3 Authority Key Identifier:
                keyid:FD:65:3B:1E:82:72:21:FC:7B:80:69:42:71:98:4B:30:11:49:55:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/FD653B1E827221FC7B80694271984B30114955E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FD653B1E827221FC7B80694271984B30114955E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/329012A48232FBBB07A151204AAF34A9280DA5EC07736C549D287FDAA0831713/0/323830333a393536303a3a2f33322d3332203d3e20323639373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9560::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:4a:0c:75:c9:85:92:03:1e:66:e3:25:bd:1c:0c:e4:c4:eb:
         fb:61:69:ba:61:2b:16:4f:a7:2b:04:38:0a:a9:ad:80:32:ef:
         cb:8b:65:e4:ff:74:e4:a2:dc:ae:bf:11:2e:21:aa:dd:d6:be:
         8c:24:49:92:78:0a:18:ab:0e:26:0e:6c:7a:d2:77:37:d6:4d:
         de:ed:db:31:97:b8:1b:ed:94:f2:77:2f:f7:e4:2d:30:d9:c9:
         e9:d9:d0:5c:0e:90:71:b9:10:5f:c1:fc:b7:c2:ff:85:35:dd:
         0d:ae:34:cd:d6:88:ce:2d:92:1a:39:91:d6:d1:2c:8e:90:39:
         91:21:a4:4b:8d:45:c3:b8:16:ec:2c:f1:10:93:d9:33:f7:06:
         82:8d:71:db:91:c7:1f:de:4d:dd:57:63:4f:c1:d1:19:97:bc:
         b9:90:b4:9b:a0:6b:05:69:91:e0:5f:52:cc:ca:97:3f:96:b9:
         b4:47:38:8e:bc:d8:88:53:39:4d:b5:43:e1:02:d1:f6:26:02:
         d5:88:95:d0:a0:0a:13:29:64:fa:8f:c1:10:50:6f:a7:c8:31:
         2e:00:f7:3e:52:28:13:f6:cf:f9:c5:ab:8e:bb:c1:fb:e1:8a:
         56:2b:1c:c7:b6:11:f3:e4:7b:4e:e7:fc:bb:07:35:93:73:3d:
         9d:7b:08:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----