Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/323830333a386432303a3a2f33322d3438203d3e20333934363834.roa
File:                     323830333a386432303a3a2f33322d3438203d3e20333934363834.roa (raw, json)
Hash identifier:          62GYAgtZ6mXuZ4CzbSWHZpDuDoubeMI4W5J0n0L0bjo=
Subject key identifier:   98:15:16:CE:66:3F:5F:5D:6E:78:2B:D5:E3:C9:6F:16:BF:7E:2D:77
Certificate issuer:       /CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
Certificate serial:       2FF786833661B78FE0F3EC7AF54DD6E8D4FD6419
Authority key identifier: F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/323830333a386432303a3a2f33322d3438203d3e20333934363834.roa
Signing time:             Tue 04 Feb 2025 18:27:46 +0000
ROA not before:           Tue 04 Feb 2025 18:22:46 +0000
ROA not after:            Tue 03 Feb 2026 18:27:46 +0000
asID:                     394684
IP address blocks:        2803:8d20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:f7:86:83:36:61:b7:8f:e0:f3:ec:7a:f5:4d:d6:e8:d4:fd:64:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F5689FBCDF9A30610BE707A1430F2B1478CF34
        Validity
            Not Before: Feb  4 18:22:46 2025 GMT
            Not After : Feb  3 18:27:46 2026 GMT
        Subject: CN=981516CE663F5F5D6E782BD5E3C96F16BF7E2D77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:1a:82:56:e5:be:9d:eb:06:a6:ab:9e:98:
                    83:a3:8a:18:d7:b8:9c:4f:b3:72:7e:f6:04:cf:3f:
                    48:d1:b7:ad:05:6e:b7:ec:7f:72:ce:04:53:0d:4c:
                    81:c6:fb:89:84:4f:a3:1c:c4:ea:9f:d8:0d:2b:db:
                    80:0f:07:76:55:5c:12:7b:19:1a:d6:3d:91:e3:81:
                    a7:a7:2f:a3:01:55:12:bc:58:e0:c4:44:35:98:6a:
                    dc:18:5e:0b:d1:d1:95:82:28:18:72:43:86:83:4e:
                    9f:3a:3b:9c:ba:0b:ff:dd:a6:a5:37:78:f9:05:cb:
                    a5:e2:71:7c:75:a7:cc:f3:bc:20:0b:bd:aa:4e:ca:
                    13:59:dd:e6:a5:fa:15:60:de:f7:ea:54:d1:1d:a5:
                    f0:bb:c0:fb:f8:9a:58:69:3b:99:3b:35:43:98:15:
                    9c:0d:f9:48:92:43:6a:28:3c:90:08:09:ec:8b:14:
                    9a:47:36:fe:43:22:08:7d:21:53:c6:66:ab:34:3a:
                    6b:0d:31:df:56:96:71:bd:a1:d5:fb:fb:1c:55:ab:
                    05:89:db:92:a4:3f:20:37:c3:b7:6e:37:b4:7d:c2:
                    17:12:1a:7b:bc:61:fd:a8:48:e6:11:e2:b7:9c:50:
                    1f:fb:6b:7b:c6:1f:b0:5f:b4:77:cf:52:d3:0a:23:
                    ff:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:15:16:CE:66:3F:5F:5D:6E:78:2B:D5:E3:C9:6F:16:BF:7E:2D:77
            X509v3 Authority Key Identifier:
                keyid:F9:F5:68:9F:BC:DF:9A:30:61:0B:E7:07:A1:43:0F:2B:14:78:CF:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F9F5689FBCDF9A30610BE707A1430F2B1478CF34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4CEEE0FFE2EBBF33612BC0BDD3719D1E9BF936D963852F94917F42671184DE54/0/323830333a386432303a3a2f33322d3438203d3e20333934363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8d20::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:60:9a:9d:f1:a4:1b:f3:f2:a8:3e:6f:6a:d0:c5:af:ca:7f:
         4c:6f:fb:9b:5a:fa:c8:8f:5a:a8:60:1b:f9:55:76:fd:bc:70:
         4a:dc:91:df:7c:41:41:62:c2:ed:42:bf:0d:2e:3b:0e:c4:49:
         c0:45:d3:98:bc:0d:a3:d0:c6:c7:17:c8:81:b1:ca:cd:62:af:
         fd:af:75:ff:bd:06:c4:61:66:47:e3:7e:f0:88:9f:ed:02:cb:
         0f:d1:ef:3f:9d:ed:64:5f:58:20:4a:6f:f9:e0:6f:96:21:39:
         ae:46:60:43:15:66:f4:5f:8c:90:46:a2:6d:06:51:7e:f7:48:
         a6:8f:3c:23:91:35:9e:e2:7e:fd:10:d7:f6:73:d4:7c:d2:04:
         bf:09:79:a4:a0:c8:b8:74:a3:6e:8e:47:9c:6f:e8:1d:fd:48:
         da:91:b9:1a:89:bb:d2:87:77:48:61:5f:26:77:69:b9:e8:5d:
         53:83:aa:7c:3b:98:02:e7:9d:e2:56:11:f5:57:52:36:62:ad:
         e4:1d:ab:09:17:83:a2:df:d3:2f:80:a6:ef:a5:65:b1:a9:15:
         00:73:0f:d0:17:ee:ed:70:66:e3:c1:d8:fc:b0:39:26:32:c4:
         e8:06:27:64:26:d3:7d:1d:4d:15:cf:f3:7e:14:c4:29:de:5d:
         d8:0f:fb:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----