Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a3a2f33352d3335203d3e203532323738.roa
File:                     323830333a653939303a3a2f33352d3335203d3e203532323738.roa (raw, json)
Hash identifier:          tsve/AGL2TCkC1C39M2bCw/C38mTzpZw8A7V6VIRC9o=
Subject key identifier:   45:6B:F8:31:76:95:61:88:BF:B3:F8:64:2D:B1:73:36:A7:F1:07:64
Certificate issuer:       /CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
Certificate serial:       668307653320413BCC91377A2926E923D149BC87
Authority key identifier: E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a3a2f33352d3335203d3e203532323738.roa
Signing time:             Fri 21 Feb 2025 22:40:01 +0000
ROA not before:           Fri 21 Feb 2025 22:35:01 +0000
ROA not after:            Fri 20 Feb 2026 22:40:01 +0000
asID:                     52278
IP address blocks:        2803:e990::/35 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:83:07:65:33:20:41:3b:cc:91:37:7a:29:26:e9:23:d1:49:bc:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742
        Validity
            Not Before: Feb 21 22:35:01 2025 GMT
            Not After : Feb 20 22:40:01 2026 GMT
        Subject: CN=456BF83176956188BFB3F8642DB17336A7F10764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:b6:ad:c9:85:b1:1a:5f:f8:cd:c3:db:f6:
                    8f:a3:cf:7e:5e:30:6b:71:6b:f5:66:cd:6b:bd:8a:
                    a5:3a:d1:5d:93:39:e1:c6:9b:21:57:64:2c:ce:82:
                    4e:3b:ca:8d:d9:74:43:e4:8e:51:63:3b:18:91:67:
                    5c:4c:16:27:c6:ec:60:ae:7f:f0:69:88:70:b6:3e:
                    41:92:74:c6:20:4e:bd:32:60:45:51:3a:9a:19:b5:
                    f4:55:31:b2:16:c0:71:a1:82:d5:05:1a:eb:07:f2:
                    28:a4:9c:08:c2:4a:0a:a2:7f:4c:80:9d:24:dc:ba:
                    22:c9:62:bc:ae:fb:4d:c7:75:98:ec:55:22:5e:67:
                    b5:06:81:2c:48:09:b1:e4:7c:d5:f3:3b:a1:75:af:
                    ba:d9:c0:13:df:f6:d6:30:f2:b8:68:13:89:48:e1:
                    e6:84:d5:54:c8:50:7a:18:cf:4e:f8:75:6f:7b:8b:
                    b1:30:1a:8a:03:35:0f:ec:c8:ac:bf:e8:bd:65:a0:
                    3f:92:53:54:58:a8:21:52:31:7a:16:96:e5:cd:3f:
                    05:5f:1e:48:85:7a:9a:89:d3:1e:03:cc:56:d2:45:
                    3d:7e:d0:0a:8b:3a:10:aa:a0:14:e3:2a:08:e3:36:
                    ae:2a:64:1e:19:d2:0d:0c:f0:a4:56:b3:1b:2e:40:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:6B:F8:31:76:95:61:88:BF:B3:F8:64:2D:B1:73:36:A7:F1:07:64
            X509v3 Authority Key Identifier:
                keyid:E2:8F:E6:6E:1D:DF:87:A3:5B:E0:9D:E7:EA:DE:96:A9:EE:6C:07:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E28FE66E1DDF87A35BE09DE7EADE96A9EE6C0742.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3F3BC4DA56A4C939F4211023F45386BEB5FC420694ADBB924733B87E27973726/0/323830333a653939303a3a2f33352d3335203d3e203532323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e990::/35

    Signature Algorithm: sha256WithRSAEncryption
         0e:f5:63:47:aa:54:e9:d3:90:d6:47:e1:ba:b6:ec:04:f5:23:
         88:5a:d3:4e:df:5b:dc:45:91:02:be:2e:fb:0f:53:d5:12:9f:
         2e:72:48:b6:a1:1f:51:da:c2:3f:23:5e:cf:b2:78:89:f7:d9:
         58:e9:06:af:e8:6e:fb:1f:10:5a:36:93:52:a4:cb:e7:50:7c:
         26:32:f1:57:f3:85:d6:c3:50:2b:fe:24:cf:30:c7:12:81:32:
         2e:42:df:ef:33:f9:11:5e:fd:c5:43:57:d1:93:4b:fe:41:3a:
         5d:34:16:d5:69:cb:cf:67:74:ca:5b:ca:0e:b4:a5:07:01:83:
         2d:96:24:d0:30:4f:a5:f3:c2:2a:8b:57:75:49:9f:e4:07:4d:
         ad:12:36:cf:4b:a3:07:c9:b1:20:0c:c7:9a:7f:da:84:c2:5b:
         ae:5b:17:38:5e:87:c0:45:33:62:29:f2:27:fe:da:fd:69:6a:
         ae:58:08:8e:f8:18:5a:58:46:15:69:82:73:84:9a:00:3d:56:
         3d:21:aa:ee:d2:1d:61:8d:34:4c:c5:ce:f4:1a:04:4b:ba:be:
         14:54:b1:fa:6f:fb:48:69:74:b1:eb:56:17:61:46:71:86:ec:
         c1:f0:1b:ad:a6:92:41:e9:7c:e7:11:45:c5:65:3c:69:75:5e:
         2e:0e:56:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----