Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/323830333a316161303a3a2f33322d3438203d3e20323636383733.roa
File:                     323830333a316161303a3a2f33322d3438203d3e20323636383733.roa (raw, json)
Hash identifier:          03nuM6AAf+zul51ig/ktlD1AADHWyXgbuXIWfFaBwkY=
Subject key identifier:   E5:10:52:6B:48:83:C8:19:12:B9:09:E4:39:29:77:22:94:DC:2A:AC
Certificate issuer:       /CN=792FCE054FD71DD6FC1999AD96B878769A102C50
Certificate serial:       52DA7CC374DEC6BB2AFD2FA415B579367736C734
Authority key identifier: 79:2F:CE:05:4F:D7:1D:D6:FC:19:99:AD:96:B8:78:76:9A:10:2C:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/323830333a316161303a3a2f33322d3438203d3e20323636383733.roa
Signing time:             Tue 04 Feb 2025 18:07:15 +0000
ROA not before:           Tue 04 Feb 2025 18:02:15 +0000
ROA not after:            Tue 03 Feb 2026 18:07:15 +0000
asID:                     266873
IP address blocks:        2803:1aa0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:da:7c:c3:74:de:c6:bb:2a:fd:2f:a4:15:b5:79:36:77:36:c7:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792FCE054FD71DD6FC1999AD96B878769A102C50
        Validity
            Not Before: Feb  4 18:02:15 2025 GMT
            Not After : Feb  3 18:07:15 2026 GMT
        Subject: CN=E510526B4883C81912B909E43929772294DC2AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:21:4a:3c:69:fa:eb:a2:38:f5:ae:a0:6f:b8:
                    04:99:01:b7:f2:bf:86:ce:87:b8:e1:86:b7:32:2d:
                    01:f5:96:13:c6:42:9f:74:19:b1:f6:4d:bc:fb:9a:
                    54:7f:d6:b6:8c:63:7f:79:05:ba:f2:29:35:1c:e0:
                    a4:ad:a5:ed:3e:b5:8c:3e:13:78:41:dc:24:39:fb:
                    e8:cc:32:bb:3d:24:6e:a5:a3:61:cd:17:50:ef:17:
                    62:f1:45:a7:4d:78:fc:31:6b:74:22:94:40:59:46:
                    64:d7:66:50:4e:8a:5b:64:8e:3b:28:79:98:71:16:
                    38:66:16:45:e8:7d:32:d8:96:9d:7a:58:26:69:b3:
                    ba:e5:76:71:43:97:2e:9f:81:88:33:cc:c7:bb:65:
                    bb:ba:f7:7e:8f:be:58:a5:8e:8f:f3:de:e1:f2:f4:
                    f8:21:25:1c:17:30:22:90:95:b3:e0:19:8a:c8:32:
                    45:39:9a:5c:0b:9b:37:98:b9:53:80:5b:b2:aa:a2:
                    42:17:ae:a4:8e:56:1f:3c:b8:02:cc:92:91:c2:77:
                    67:70:ab:a5:5d:c5:b9:da:5a:5c:ca:da:64:4e:5b:
                    35:a3:0b:d3:7a:00:d7:2b:2a:63:f8:82:6c:ec:5b:
                    a5:9f:e4:9e:c7:61:a5:82:21:c3:67:46:89:9c:d7:
                    a9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:10:52:6B:48:83:C8:19:12:B9:09:E4:39:29:77:22:94:DC:2A:AC
            X509v3 Authority Key Identifier:
                keyid:79:2F:CE:05:4F:D7:1D:D6:FC:19:99:AD:96:B8:78:76:9A:10:2C:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/792FCE054FD71DD6FC1999AD96B878769A102C50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/792FCE054FD71DD6FC1999AD96B878769A102C50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/34ABBC6AB6D41D02D5103803E24C8CE787F8E49AFD8F5359015DF889C43AF5E5/0/323830333a316161303a3a2f33322d3438203d3e20323636383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1aa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:dc:f5:d3:a5:2f:b8:88:1d:6a:ca:13:a0:73:d7:9c:91:70:
         32:1b:56:ba:6c:6e:f8:17:e4:29:56:1c:53:3a:cb:fc:6a:bc:
         ea:a8:ac:9b:0c:c8:ef:23:89:ab:d5:71:eb:9c:85:7e:90:25:
         e7:86:3a:65:e0:f0:ee:d9:72:4a:70:83:75:28:81:32:38:c6:
         74:86:0a:f8:42:ac:43:9c:a5:d6:56:78:32:b8:7c:d8:89:68:
         86:f1:36:57:b2:14:1b:e9:fe:6c:9b:50:2d:c8:31:14:11:0e:
         5c:7f:09:83:71:e7:8c:bc:9d:b8:45:d6:b8:2f:7e:1d:ee:22:
         47:13:2a:98:62:03:49:cc:63:79:f3:a2:c3:ac:97:79:48:f2:
         d0:d1:7b:08:e2:e6:0b:a2:2f:9b:96:ad:b9:48:9d:cb:2c:0c:
         6f:ae:68:02:95:d8:33:73:3b:f7:34:8c:d7:49:06:bd:4f:f0:
         16:8f:c4:db:47:60:49:5c:f6:ef:62:03:43:c7:80:e0:eb:22:
         1f:3e:9e:5d:37:62:ae:70:20:0a:c8:e7:1d:2c:18:82:74:d2:
         b7:53:a0:4d:aa:91:9b:66:fe:7f:6b:2f:a3:72:0f:ad:5b:ca:
         fd:87:b6:2a:62:36:49:3c:c9:62:4a:e1:54:27:46:9d:5c:df:
         75:ac:5e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----