Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a363030303a3a2f33352d3335203d3e203532323738.roa
File:                     323830333a653939303a363030303a3a2f33352d3335203d3e203532323738.roa (raw, json)
Hash identifier:          7/MLDVajk6/2OXQ1hf4lpu2gXv3uB7BWPPWIILUtLqA=
Subject key identifier:   CC:CC:4B:9E:44:31:3C:58:99:A3:C9:29:D0:B6:4C:FF:79:6F:CC:0C
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       027A56101E67EA90F78B3BB678599EBF7694222E
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a363030303a3a2f33352d3335203d3e203532323738.roa
Signing time:             Fri 21 Feb 2025 22:40:01 +0000
ROA not before:           Fri 21 Feb 2025 22:35:01 +0000
ROA not after:            Fri 20 Feb 2026 22:40:01 +0000
asID:                     52278
IP address blocks:        2803:e990:6000::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:7a:56:10:1e:67:ea:90:f7:8b:3b:b6:78:59:9e:bf:76:94:22:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb 21 22:35:01 2025 GMT
            Not After : Feb 20 22:40:01 2026 GMT
        Subject: CN=CCCC4B9E44313C5899A3C929D0B64CFF796FCC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:04:f2:96:ea:6e:8a:c1:e8:4a:5c:c7:ec:c5:
                    34:f7:df:f5:b5:a1:f0:30:99:d4:2f:cb:1c:71:f2:
                    c2:72:1e:d4:c4:be:9e:12:fa:41:9f:ff:b8:6a:78:
                    1f:5b:1b:1b:f8:dd:77:a1:ba:28:39:14:a5:63:af:
                    3e:d5:c6:1b:88:1e:83:39:e8:85:12:c9:a2:86:14:
                    a5:43:3a:52:01:1f:48:e3:1a:2a:cc:e0:45:25:fe:
                    13:64:4a:c8:a1:1e:da:a1:56:da:c8:bc:8e:8c:e3:
                    4b:42:60:26:98:6d:fa:46:d0:3e:b9:ed:36:89:4e:
                    ad:fb:e9:f3:a6:cf:e9:99:6e:21:8e:12:cf:fe:3f:
                    cc:c2:e6:ae:64:c9:8e:40:ac:8e:c2:56:68:93:a7:
                    39:5e:a7:ff:3f:ad:4e:53:a5:2d:ff:41:a8:9c:48:
                    2c:28:f2:13:dc:0c:e4:7f:61:3e:4c:4b:de:dd:90:
                    a1:4a:16:38:73:52:e1:e9:72:7c:6d:05:b8:4b:c1:
                    3a:0b:85:ab:d2:13:13:40:98:f1:e1:9d:a7:ca:48:
                    0f:6f:6f:cd:0d:9c:5e:96:bf:58:71:63:d4:2a:6f:
                    36:1e:3b:65:d4:f0:76:6a:1c:00:03:42:5f:dc:7d:
                    fe:82:f3:f7:17:21:10:82:16:77:ae:e2:63:9c:73:
                    1c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:CC:4B:9E:44:31:3C:58:99:A3:C9:29:D0:B6:4C:FF:79:6F:CC:0C
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a363030303a3a2f33352d3335203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e990:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         76:82:d6:36:f5:eb:32:2b:c0:67:83:9a:ec:e6:bc:ef:5c:17:
         07:59:d7:ed:fa:0c:e3:f4:fb:38:9f:c4:ae:85:44:a5:a0:e6:
         dd:05:55:12:98:25:e9:1f:0d:0c:37:75:f2:71:3c:7e:36:8e:
         6b:e6:c8:3f:65:37:86:4a:80:57:41:26:74:12:d4:ff:d8:4f:
         4e:d3:a6:c8:17:3b:1a:aa:82:7b:a2:9a:63:73:a1:c9:d8:6a:
         7d:d1:3d:dd:5e:48:c2:59:7e:35:ff:a9:a3:17:e5:24:ea:3a:
         e0:b5:28:66:85:ce:62:46:4b:f2:38:73:ff:2c:d2:60:4e:a0:
         33:b0:dc:cf:c3:91:78:90:6f:a9:91:c6:04:ad:fc:55:7d:6b:
         53:e4:93:b9:6d:e2:3b:0d:52:43:77:bc:ca:a2:09:b7:93:cf:
         83:f4:7c:db:57:a1:2e:a0:18:26:31:eb:88:5c:4a:08:42:29:
         88:ca:f3:55:70:98:ce:54:ef:16:2b:e0:0f:77:1d:f2:07:6f:
         80:1d:68:d3:ca:1f:e9:1d:2d:8a:30:87:84:ee:7d:a7:ef:28:
         87:4c:f0:a3:e5:63:62:2b:cf:44:be:44:10:52:b4:6c:05:1f:
         21:81:7d:99:5a:42:3a:15:4a:3d:ca:54:89:b4:6c:17:7d:3d:
         43:7b:c3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----