Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/323830333a3465303a3a2f33322d3335203d3e20323632323133.roa
File:                     323830333a3465303a3a2f33322d3335203d3e20323632323133.roa (raw, json)
Hash identifier:          AC/m95tcdXd0ChvruS8w2KSV8+5h8PfJjD6Y2xO4RDU=
Subject key identifier:   B8:0F:D5:0D:06:9D:52:0F:93:14:67:2B:50:7D:5A:23:9A:C4:1E:2A
Certificate issuer:       /CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
Certificate serial:       30C30DA1B5410EFB3EBE95749CD011BD217E4220
Authority key identifier: 5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/323830333a3465303a3a2f33322d3335203d3e20323632323133.roa
Signing time:             Tue 04 Feb 2025 18:44:11 +0000
ROA not before:           Tue 04 Feb 2025 18:39:11 +0000
ROA not after:            Tue 03 Feb 2026 18:44:11 +0000
asID:                     262213
IP address blocks:        2803:4e0::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:c3:0d:a1:b5:41:0e:fb:3e:be:95:74:9c:d0:11:bd:21:7e:42:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D
        Validity
            Not Before: Feb  4 18:39:11 2025 GMT
            Not After : Feb  3 18:44:11 2026 GMT
        Subject: CN=B80FD50D069D520F9314672B507D5A239AC41E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:71:1b:c8:e2:a6:c4:4c:ba:e5:dc:1f:6c:
                    9c:fa:78:e2:33:3e:d8:d8:1c:94:ac:3d:4e:8b:5b:
                    5d:6a:60:e3:b5:94:dc:1e:eb:ac:79:ea:f4:4f:db:
                    75:2f:54:53:79:a1:d5:8a:2c:e2:5f:5d:8d:2d:c6:
                    d6:3e:40:0d:a0:ba:ee:2c:f8:e0:07:f9:f7:7a:ca:
                    ea:65:06:ed:b3:e8:56:a5:b6:cf:4f:cb:19:7b:62:
                    83:6f:23:4f:37:dd:7a:bc:97:27:c4:99:c6:de:6e:
                    ac:74:ef:44:3c:7c:cf:5e:0b:d7:cc:8c:f7:c5:08:
                    c8:7f:bd:b6:9b:48:3d:72:3c:9a:03:45:db:bb:e5:
                    34:2a:80:49:45:b3:4a:8f:92:e9:d3:c8:8a:b7:8a:
                    ca:4e:f8:fc:b1:64:e9:61:67:fb:cc:7f:17:ea:25:
                    5d:d9:e6:49:89:b3:1c:72:42:dc:ef:cf:ed:40:88:
                    de:5a:81:1e:f1:12:67:eb:1b:c2:9f:4e:e6:ac:db:
                    9f:dc:60:22:93:6b:69:69:b3:4f:7c:a8:37:b9:6d:
                    de:b7:c3:85:09:f4:58:cf:54:07:35:a9:d5:cd:ed:
                    1d:77:96:81:b8:e5:88:5b:6e:80:61:8f:20:7f:c0:
                    27:2b:c9:3f:ea:5e:00:99:b5:8d:53:d6:b4:65:97:
                    8e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0F:D5:0D:06:9D:52:0F:93:14:67:2B:50:7D:5A:23:9A:C4:1E:2A
            X509v3 Authority Key Identifier:
                keyid:5E:20:38:E8:41:92:BA:FB:E7:BC:D3:AC:CA:5B:C5:B4:3E:61:DA:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E2038E84192BAFBE7BCD3ACCA5BC5B43E61DA2D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3D08C1E06ADE72FB8092DD3A617DAD405FE9F7A3D2CB30D96BADFE802A409CD0/0/323830333a3465303a3a2f33322d3335203d3e20323632323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:0b:d4:fa:f8:23:3e:44:7e:e6:a2:ef:ec:41:b2:8b:7c:b6:
         69:ff:46:57:42:34:68:7b:f0:5c:dd:58:2c:18:41:09:bc:f1:
         d1:ed:13:9b:7d:ae:81:03:9f:84:d2:fe:44:78:60:5b:5e:6c:
         c6:2a:cd:72:d1:b2:6d:1b:fc:34:0c:7b:7b:a9:41:7c:dd:14:
         ad:25:70:a7:06:f9:c2:6a:34:3d:92:17:aa:16:c3:15:b1:5d:
         a6:f8:6f:c1:55:b4:b2:42:0f:ce:df:74:73:cb:8c:7a:42:0c:
         30:12:b9:f0:1f:11:44:c7:21:55:78:11:fe:4d:7f:7b:bc:04:
         c6:ad:0f:0b:44:3f:a1:eb:8d:ee:5e:6e:21:17:65:06:47:5e:
         af:66:a2:98:bd:5e:7c:e7:f6:8b:66:24:aa:5d:6c:d9:a6:3c:
         d8:8e:df:45:a7:f1:b8:76:89:e0:0b:e7:7d:e4:12:bf:9c:fb:
         cb:d1:f4:46:3a:20:28:f8:43:03:e2:11:d1:3a:a3:b2:86:c6:
         c7:4c:ee:79:6c:79:41:3f:5c:97:1a:38:a3:89:1f:d6:b8:7b:
         ba:29:42:28:dc:b9:e1:33:f8:91:35:8b:bf:0a:3d:39:ad:a1:
         eb:69:1f:7c:09:35:6a:a3:09:74:6c:e6:0f:23:3c:41:ec:14:
         d2:b8:b5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----