Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/323830333a313538303a3a2f33322d3332203d3e20323632313931.roa
File:                     323830333a313538303a3a2f33322d3332203d3e20323632313931.roa (raw, json)
Hash identifier:          JrMHjW8TOklAnuaOGRrzezgoaXT0V2M8VFjI00VaHPQ=
Subject key identifier:   63:5F:50:13:1E:9B:E8:19:B9:8F:AE:0E:21:95:01:AE:4C:77:42:11
Certificate issuer:       /CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
Certificate serial:       73366EF0BAF8E8667693AD8E23F4784C1C12AC94
Authority key identifier: E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/323830333a313538303a3a2f33322d3332203d3e20323632313931.roa
Signing time:             Tue 04 Feb 2025 18:27:39 +0000
ROA not before:           Tue 04 Feb 2025 18:22:39 +0000
ROA not after:            Tue 03 Feb 2026 18:27:39 +0000
asID:                     262191
IP address blocks:        2803:1580::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:36:6e:f0:ba:f8:e8:66:76:93:ad:8e:23:f4:78:4c:1c:12:ac:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8
        Validity
            Not Before: Feb  4 18:22:39 2025 GMT
            Not After : Feb  3 18:27:39 2026 GMT
        Subject: CN=635F50131E9BE819B98FAE0E219501AE4C774211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:40:e7:ab:8a:3a:3b:6d:92:c6:d5:c1:d8:
                    40:57:ed:c3:10:ba:03:6f:69:26:64:27:60:59:ba:
                    e1:8a:45:8f:41:2c:64:1a:0e:cc:08:34:63:8e:54:
                    b0:6a:3a:4c:ad:78:88:93:aa:3a:bb:f0:25:5b:a8:
                    8b:c7:45:d9:2e:a6:56:8e:3e:87:11:e9:b0:45:98:
                    ea:1a:da:10:f3:a4:5b:c3:20:a0:53:fc:55:b4:f1:
                    78:0d:41:d0:02:d0:0a:8b:e0:81:63:6d:0d:7b:34:
                    23:98:db:7e:4f:c3:1c:2c:07:6d:5e:9c:72:db:63:
                    0c:cb:b0:2f:79:e9:78:6a:b1:99:d0:59:35:3f:7c:
                    9c:61:7f:fe:f3:67:59:0f:a3:d6:ba:88:30:3d:2c:
                    3a:5f:5d:21:6e:d7:f6:08:41:3f:d9:98:d8:ec:4f:
                    a2:7d:3d:19:48:98:71:05:4e:b2:33:0f:e1:0d:fa:
                    bf:15:75:e8:c8:95:45:85:ff:af:f8:af:c6:0d:71:
                    71:73:f3:6a:73:fb:a0:de:78:d3:59:7f:8c:d4:d5:
                    a7:31:22:54:b6:5d:8d:b3:e4:38:98:8d:4a:97:b3:
                    cc:66:ad:49:52:4d:ad:17:ba:a0:b0:a4:dd:c0:ec:
                    2d:ee:fc:3e:22:a3:4a:e4:73:6a:ee:34:73:63:2d:
                    93:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5F:50:13:1E:9B:E8:19:B9:8F:AE:0E:21:95:01:AE:4C:77:42:11
            X509v3 Authority Key Identifier:
                keyid:E2:29:89:8B:6E:7F:B7:F3:04:8E:BD:4F:8C:DB:9F:88:94:D2:52:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E229898B6E7FB7F3048EBD4F8CDB9F8894D252A8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/52BBC48C2A0C5597C3459E86DCE8C62DC6FE1760E0C94E49CDA031A817F62B8B/0/323830333a313538303a3a2f33322d3332203d3e20323632313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1580::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:c1:ad:f0:2a:de:4d:49:15:8e:4c:f9:93:39:bc:72:36:31:
         f9:5a:66:42:37:dd:6e:99:22:7f:f5:13:46:ab:d3:99:6b:b8:
         b8:c0:8d:f5:76:e9:58:54:73:c2:13:61:d5:d1:d7:07:23:64:
         e7:64:56:a3:4d:82:10:2e:10:05:b5:9e:2f:2b:5d:19:ad:df:
         5d:96:7e:9b:db:76:31:65:aa:d7:c7:89:0d:cb:ab:56:e2:df:
         98:e5:57:75:26:94:29:d9:df:94:5a:ce:bf:a8:0e:3b:04:d9:
         03:25:37:02:c8:73:00:f0:71:56:00:d2:15:85:97:a9:7f:1f:
         43:6d:08:14:e3:a1:d4:88:4b:73:91:4a:51:af:85:32:dc:a1:
         0f:36:4f:e0:91:10:1a:47:0b:3a:f6:ea:ae:b4:b1:d7:f3:a1:
         a9:20:b0:c2:92:8d:18:28:35:81:1c:5f:0f:fc:db:6e:3d:ff:
         ee:40:94:9b:8d:cf:39:84:e5:7f:0b:cf:da:3b:3c:c5:14:c3:
         83:dc:92:85:66:1c:8b:ec:0f:d9:56:0c:99:48:9b:84:c1:5c:
         df:d6:f2:dd:dd:79:be:bc:f3:18:f0:7a:9d:e1:a6:42:1b:94:
         d2:e9:37:66:c9:ae:4d:58:76:ba:a7:f7:a5:e2:bc:c0:81:86:
         fe:b8:fd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----