Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a3a2f33322d3438203d3e203233303331.roa
File:                     323830333a633331303a3a2f33322d3438203d3e203233303331.roa (raw, json)
Hash identifier:          wH1snItcTQCVuafEOO70UAcZfHAiw5TqHeUtOdE02aw=
Subject key identifier:   52:13:A9:CA:C4:13:D3:A6:86:4F:04:4E:29:0B:70:74:65:AA:82:8F
Certificate issuer:       /CN=906C41A68E3475138AF53A5B55627EDE35432068
Certificate serial:       5B6971D537618E74AF89091F23BD8C676641FC02
Authority key identifier: 90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a3a2f33322d3438203d3e203233303331.roa
Signing time:             Tue 04 Feb 2025 18:02:22 +0000
ROA not before:           Tue 04 Feb 2025 17:57:22 +0000
ROA not after:            Tue 03 Feb 2026 18:02:22 +0000
asID:                     23031
IP address blocks:        2803:c310::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:69:71:d5:37:61:8e:74:af:89:09:1f:23:bd:8c:67:66:41:fc:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=906C41A68E3475138AF53A5B55627EDE35432068
        Validity
            Not Before: Feb  4 17:57:22 2025 GMT
            Not After : Feb  3 18:02:22 2026 GMT
        Subject: CN=5213A9CAC413D3A6864F044E290B707465AA828F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:96:79:31:d7:a6:cf:69:ba:ad:41:16:8c:41:
                    f8:8b:e1:78:fa:c1:2c:27:5a:6c:e9:99:47:7a:1d:
                    16:35:74:1c:3d:0c:e8:66:b7:af:d8:a2:fa:4d:e2:
                    18:77:db:81:c3:9d:33:c2:90:7e:15:90:9b:28:c7:
                    fc:a8:05:2f:93:f0:a2:70:3c:dc:00:2f:cb:53:cc:
                    ea:7a:aa:20:7e:f8:85:64:c2:32:78:42:f9:42:d3:
                    c4:a0:07:de:41:ae:d8:22:ba:aa:db:b3:3c:e0:25:
                    35:3e:ca:74:90:a6:4e:ef:a8:17:16:2e:7a:39:cd:
                    e7:af:ec:f7:e7:20:23:ec:9d:6f:58:5b:95:60:a6:
                    9c:00:d3:0d:50:0a:0f:a2:ff:db:51:fc:99:e7:3a:
                    97:55:66:4a:f0:ee:91:86:ad:21:62:7d:59:e0:b1:
                    f0:93:f2:d1:c3:1e:5f:2d:c6:38:e4:e7:d9:1d:21:
                    64:f9:f6:09:97:99:f9:49:72:14:fc:3f:10:74:6e:
                    f8:6b:06:2a:b4:6d:01:c6:db:b5:3e:08:21:3c:da:
                    64:78:2a:1b:18:78:67:69:50:42:e8:96:4a:ab:2f:
                    9c:30:e7:cb:26:8c:82:78:3c:7a:5d:53:ea:01:ce:
                    0a:88:b2:3a:cf:a0:5f:ef:00:5a:b7:67:e3:62:ec:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:13:A9:CA:C4:13:D3:A6:86:4F:04:4E:29:0B:70:74:65:AA:82:8F
            X509v3 Authority Key Identifier:
                keyid:90:6C:41:A6:8E:34:75:13:8A:F5:3A:5B:55:62:7E:DE:35:43:20:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/906C41A68E3475138AF53A5B55627EDE35432068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/906C41A68E3475138AF53A5B55627EDE35432068.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/562007B8D4AA26144087F9C3E5F9D39ECE56BD4ED09786DE15147C9557175406/0/323830333a633331303a3a2f33322d3438203d3e203233303331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c310::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:b0:55:de:e9:37:ab:fc:bf:39:65:b3:97:18:90:98:7d:09:
         9d:67:2c:87:f2:aa:ca:9f:86:0b:a0:3d:2c:78:6a:88:bd:bd:
         a4:2b:7d:2e:61:27:ad:f3:31:9e:b0:2e:2e:9a:21:96:de:6b:
         d1:24:5e:44:6a:61:44:34:92:7a:96:ed:67:15:30:d5:c0:b9:
         fb:52:9c:eb:f2:d1:9f:db:68:a9:9c:dd:02:1c:00:b7:ad:ef:
         78:96:f4:42:aa:2b:6d:88:cf:aa:ce:ea:50:4f:f5:a6:1f:37:
         46:4b:db:d4:58:bb:28:04:32:ca:27:bc:78:09:c0:d7:8d:21:
         ed:1e:1d:3f:7c:15:da:31:38:f6:92:82:10:14:c0:15:b8:23:
         49:fe:92:a7:a0:7d:e7:f4:6a:5f:c6:24:0d:0f:55:ca:dc:03:
         e5:8c:08:d9:70:3c:90:7a:20:24:e9:99:17:72:af:2f:fb:f5:
         38:0e:57:09:2e:0b:03:19:49:60:f9:50:02:9d:4c:34:10:8b:
         cf:b0:78:bc:9d:2a:d1:44:12:58:64:e5:1f:29:bd:0b:23:67:
         2d:22:96:cd:4d:38:25:7c:75:54:a2:e6:cf:1a:3c:c3:aa:51:
         78:d9:d1:43:fb:93:03:83:e5:77:f6:47:19:5d:0c:d8:8e:fc:
         0b:4a:5a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----