Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/323830333a6234303a3a2f33322d3438203d3e20323634373032.roa
File:                     323830333a6234303a3a2f33322d3438203d3e20323634373032.roa (raw, json)
Hash identifier:          /g5OJ1neY/Tu6t2+QHWk22lrI/Ti61leRWmKBsZ4Pn4=
Subject key identifier:   F7:31:1C:76:A7:D6:59:2F:8F:F2:0D:19:DA:C3:2C:97:C6:04:85:2B
Certificate issuer:       /CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
Certificate serial:       0186105480D3EB611062D623FE88FAD3A07AE751
Authority key identifier: 9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/323830333a6234303a3a2f33322d3438203d3e20323634373032.roa
Signing time:             Tue 04 Feb 2025 18:12:34 +0000
ROA not before:           Tue 04 Feb 2025 18:07:34 +0000
ROA not after:            Tue 03 Feb 2026 18:12:34 +0000
asID:                     264702
IP address blocks:        2803:b40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:10:54:80:d3:eb:61:10:62:d6:23:fe:88:fa:d3:a0:7a:e7:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B15149013FBA3D5703129A72BE8B0E44426BC8F
        Validity
            Not Before: Feb  4 18:07:34 2025 GMT
            Not After : Feb  3 18:12:34 2026 GMT
        Subject: CN=F7311C76A7D6592F8FF20D19DAC32C97C604852B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1f:a1:02:f7:ab:cb:6b:48:53:19:18:0e:c1:
                    ed:50:cd:55:0b:aa:ff:cf:20:85:3c:fa:5d:cb:e1:
                    9b:de:6f:18:25:4c:5d:2e:6b:7a:83:23:9b:b8:82:
                    3d:fc:49:01:5b:f4:b5:38:f8:4a:d0:21:f1:16:dc:
                    2e:1f:7e:9c:90:61:18:9d:d0:c2:f3:42:6b:8a:b6:
                    ed:8b:b8:17:17:84:40:58:46:3b:7f:40:62:5d:8a:
                    82:3c:98:44:92:47:2e:52:94:5e:9e:16:9c:e6:9a:
                    05:b1:0d:02:06:c6:33:aa:67:23:44:5e:3e:cf:43:
                    10:d9:d4:3d:75:d3:9b:f6:6a:58:5b:f1:a1:f4:1b:
                    56:84:a5:e7:20:71:7d:ef:b8:87:47:72:e5:83:2d:
                    a1:49:1b:f0:f8:40:56:8b:a4:39:85:e5:cd:1e:d7:
                    50:dd:72:c0:73:a2:7f:69:47:42:3c:ee:e5:2e:00:
                    78:05:3e:6a:ff:8d:bc:f9:c9:fa:93:d9:ab:22:94:
                    a1:64:55:c0:5e:2b:20:8e:6e:c5:3d:87:a1:fb:89:
                    f4:b7:e3:46:cf:c0:6b:62:be:41:3b:a7:05:d9:51:
                    3d:11:de:5e:28:2e:91:31:cd:08:67:28:f0:b9:ee:
                    29:b5:3b:96:0f:ca:a3:0e:19:bd:d8:a9:e1:ca:f6:
                    7d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:31:1C:76:A7:D6:59:2F:8F:F2:0D:19:DA:C3:2C:97:C6:04:85:2B
            X509v3 Authority Key Identifier:
                keyid:9B:15:14:90:13:FB:A3:D5:70:31:29:A7:2B:E8:B0:E4:44:26:BC:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B15149013FBA3D5703129A72BE8B0E44426BC8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/369AE922C81225CBAF0BBD90DF5C5DD6EB408090095513D3326EDEED8B9A305C/0/323830333a6234303a3a2f33322d3438203d3e20323634373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b40::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:09:26:9d:8b:f1:3e:88:57:62:0a:50:39:ca:a0:1e:c2:5d:
         06:98:0f:2d:a4:41:6b:2e:4e:8b:06:15:65:bc:88:23:04:9f:
         fe:40:f1:fe:d5:74:1e:63:53:32:b6:c0:28:24:9b:e0:94:f8:
         91:77:4d:99:0a:07:f3:46:da:67:11:a9:35:03:72:18:a4:41:
         7e:e9:ba:c3:0a:e2:38:a9:2b:42:58:e1:7e:e4:2a:16:af:4f:
         1c:72:33:c6:d5:ad:e1:3f:61:63:b3:18:8b:ca:fe:33:35:1f:
         fc:53:f6:6b:22:d9:c7:bd:d4:a0:d6:cd:a8:25:b6:9a:73:29:
         b3:30:f2:b9:4f:e6:71:0b:91:bb:5e:ad:e5:8b:d2:c0:73:e7:
         65:7f:ca:f0:12:4a:21:8b:76:38:b6:67:71:58:b2:6a:f8:c4:
         1f:4f:9f:2b:35:3e:17:09:41:6f:bd:5a:fa:41:35:7e:01:6a:
         79:fd:ea:6f:5c:d8:48:f6:25:8b:6b:7f:76:60:bf:f6:81:62:
         3e:7f:f2:d3:1c:41:fb:08:8d:d0:26:fc:4f:a5:5c:d5:c8:10:
         4e:d1:c7:e9:c0:43:fd:8e:07:fd:1e:c7:39:e7:10:c6:11:62:
         ff:15:cc:2a:6e:44:af:ce:a0:43:b9:53:27:6e:44:8a:c2:32:
         31:a1:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----