Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/323830333a363936303a3a2f33322d3332203d3e20323639373432.roa
File:                     323830333a363936303a3a2f33322d3332203d3e20323639373432.roa (raw, json)
Hash identifier:          YACZ+cqdjyUvLkaI2fsi3bJtdx8cj+f199H5Enypru8=
Subject key identifier:   00:AA:5B:0D:40:D3:C6:BE:11:53:10:07:C2:7B:67:FA:F5:38:70:C0
Certificate issuer:       /CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
Certificate serial:       5B7630464BC7B72AEC3886B271C01479158E032E
Authority key identifier: C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/323830333a363936303a3a2f33322d3332203d3e20323639373432.roa
Signing time:             Tue 04 Feb 2025 18:01:27 +0000
ROA not before:           Tue 04 Feb 2025 17:56:27 +0000
ROA not after:            Tue 03 Feb 2026 18:01:27 +0000
asID:                     269742
IP address blocks:        2803:6960::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:76:30:46:4b:c7:b7:2a:ec:38:86:b2:71:c0:14:79:15:8e:03:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6532B6E8DFB9C6CF073D8E4E153CAF65F174764
        Validity
            Not Before: Feb  4 17:56:27 2025 GMT
            Not After : Feb  3 18:01:27 2026 GMT
        Subject: CN=00AA5B0D40D3C6BE11531007C27B67FAF53870C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bd:a2:31:0a:62:e8:cb:ac:1e:9f:dd:f5:31:
                    e5:ed:b5:e6:11:38:b2:69:d1:23:5f:29:e7:f7:56:
                    3c:84:cb:85:87:6a:da:b6:fb:23:11:77:5b:90:a6:
                    b9:79:ff:5b:7d:7f:23:f4:03:ce:3a:88:82:1b:d8:
                    0d:6a:31:6f:73:58:01:f5:84:4f:74:71:ab:0d:a1:
                    eb:89:27:94:7f:27:ca:f2:8d:c7:14:a5:3a:4b:5f:
                    8c:45:be:8e:93:1b:6b:23:9f:c4:ae:d4:89:7b:58:
                    a4:56:c7:d1:a2:e5:2d:17:11:93:1d:13:d2:04:cb:
                    6c:a6:23:cc:ac:af:8f:66:82:9a:c1:6d:e2:fa:6b:
                    61:c2:7a:6a:2c:c3:22:91:44:c3:3d:f9:bb:35:53:
                    c8:08:16:16:d9:14:17:4b:ce:08:31:5c:ca:c6:95:
                    01:cb:ed:f9:a4:89:c1:7c:99:7c:5f:ea:69:8a:eb:
                    69:a6:df:f8:c4:bf:0a:35:e3:fd:b6:7f:db:5c:8f:
                    a9:cf:c5:77:a1:94:2d:0f:bc:ea:8e:91:de:17:60:
                    ed:26:2e:6b:a9:97:a6:b3:4e:5c:a8:93:d5:9a:ba:
                    30:e2:a7:5f:fb:3a:35:5c:28:a4:cd:73:2b:13:ef:
                    cd:4d:81:95:89:a2:24:2b:82:9d:d1:6a:de:88:25:
                    e9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AA:5B:0D:40:D3:C6:BE:11:53:10:07:C2:7B:67:FA:F5:38:70:C0
            X509v3 Authority Key Identifier:
                keyid:C6:53:2B:6E:8D:FB:9C:6C:F0:73:D8:E4:E1:53:CA:F6:5F:17:47:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6532B6E8DFB9C6CF073D8E4E153CAF65F174764.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34309B69AFB8B3B06FF6DAB9A2DF931CAF361352AE8B800BE7C46F0BAB6740A9/0/323830333a363936303a3a2f33322d3332203d3e20323639373432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6960::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:e8:8c:5f:5f:48:fd:42:2a:d6:48:c9:1e:e6:a0:2b:e1:bf:
         ca:a0:79:eb:f7:b7:49:98:91:bb:fc:29:0d:8d:25:d8:22:c8:
         3e:07:06:a1:70:e8:75:ad:ac:43:12:0c:54:50:5c:f9:ff:ad:
         65:4f:82:3a:a3:6e:2d:25:89:83:c4:07:02:cc:a1:c4:cd:00:
         3f:63:1d:24:48:85:e0:22:57:0e:5c:78:10:62:c5:5c:2a:f7:
         31:a3:a0:0b:ed:fe:c0:d8:19:32:ac:6a:ee:c1:2a:fa:e8:6e:
         87:9d:f1:0c:d2:12:b5:67:68:ba:75:f8:94:09:62:1b:4a:e2:
         cb:34:73:b7:e9:89:66:fa:62:ac:70:78:ca:64:60:12:98:96:
         9d:0e:f3:0b:25:4d:9e:b8:84:2a:d3:ed:42:35:de:a3:e3:36:
         c8:2c:51:96:51:da:00:82:4f:56:07:01:f3:0d:51:a5:0e:24:
         05:3d:49:14:4e:c1:18:ff:b7:0d:7e:7d:8f:9d:3f:d8:6d:a3:
         20:d3:5b:de:16:89:79:28:d5:0f:17:76:8c:b4:49:00:13:74:
         cc:52:ce:b0:86:36:e5:80:99:9c:32:b4:62:d7:6b:7f:46:cf:
         49:1f:8b:6d:f7:af:2d:65:bd:04:cf:40:80:3e:a4:08:7e:dc:
         76:4b:a3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----