Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3930303a3a2f34302d3430203d3e20323636383934.roa
File:                     323830333a353661303a3930303a3a2f34302d3430203d3e20323636383934.roa (raw, json)
Hash identifier:          nMA80aSNTNz7WwXSNE1CAFlhfzXciIqNftISMgDXw8E=
Subject key identifier:   06:32:9B:B3:93:27:BA:FF:2A:BF:C0:4E:71:4D:D1:E6:96:6F:2C:74
Certificate issuer:       /CN=6913998846C57916C081CA47CE0BCEB486460BE1
Certificate serial:       75F4DE116BAFE180BAB8BF8D75A6055648E5DB52
Authority key identifier: 69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3930303a3a2f34302d3430203d3e20323636383934.roa
Signing time:             Tue 04 Feb 2025 20:01:13 +0000
ROA not before:           Tue 04 Feb 2025 19:56:13 +0000
ROA not after:            Tue 03 Feb 2026 20:01:13 +0000
asID:                     266894
IP address blocks:        2803:56a0:900::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f4:de:11:6b:af:e1:80:ba:b8:bf:8d:75:a6:05:56:48:e5:db:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6913998846C57916C081CA47CE0BCEB486460BE1
        Validity
            Not Before: Feb  4 19:56:13 2025 GMT
            Not After : Feb  3 20:01:13 2026 GMT
        Subject: CN=06329BB39327BAFF2ABFC04E714DD1E6966F2C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:27:02:08:27:0a:d6:54:b6:b8:98:aa:c3:fd:
                    d3:95:e3:1e:c2:1b:cf:83:77:70:71:32:4c:13:97:
                    9e:e0:49:eb:3d:b8:1f:1a:12:7d:21:39:f9:38:82:
                    1a:5d:37:2b:c9:52:2d:66:5d:4d:a1:37:fd:60:ff:
                    36:05:0a:22:8d:b0:5f:05:e2:76:c0:cc:e6:3b:86:
                    fd:d4:d4:fa:0a:10:f1:b1:d3:c7:60:3b:45:ae:ea:
                    b7:53:fa:bf:0a:f7:82:ef:96:bc:7f:db:e1:a5:2e:
                    8d:6f:ec:e5:f9:4c:c2:29:38:2b:af:7e:a3:e4:1d:
                    f0:f0:bb:1e:0f:b9:38:42:2f:c8:76:32:b7:ec:0b:
                    21:02:5c:c8:92:38:a1:8a:1a:4d:64:fd:29:e2:73:
                    8e:dd:27:c5:68:59:7e:b6:8c:a8:48:f3:56:87:a0:
                    92:76:fc:dd:ca:62:8d:c9:e1:ec:8a:f6:34:19:b4:
                    24:7c:aa:87:a2:ac:68:44:13:1f:a9:96:7b:db:a3:
                    f0:d4:c5:9b:1b:fa:02:7c:66:45:26:0c:bc:33:d7:
                    3b:7f:53:c4:8c:95:62:3d:6f:6c:d0:5e:bd:7a:1d:
                    f2:da:71:d5:8a:97:7e:40:6e:92:4a:af:55:0f:59:
                    8e:9b:d9:ea:92:a8:1f:72:e9:10:89:0e:88:4b:0a:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:32:9B:B3:93:27:BA:FF:2A:BF:C0:4E:71:4D:D1:E6:96:6F:2C:74
            X509v3 Authority Key Identifier:
                keyid:69:13:99:88:46:C5:79:16:C0:81:CA:47:CE:0B:CE:B4:86:46:0B:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/6913998846C57916C081CA47CE0BCEB486460BE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6913998846C57916C081CA47CE0BCEB486460BE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5682A6042EEE445B29A16973A47D232600C63DCAC9B8BFAEB586691EA3DBDF70/0/323830333a353661303a3930303a3a2f34302d3430203d3e20323636383934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:56a0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         9f:84:62:27:f3:87:26:c1:fa:f6:fc:6e:86:0c:bb:b6:d6:34:
         b1:fc:5e:3a:28:f6:9f:a3:87:5e:62:19:0c:1a:7b:7a:b2:94:
         7c:df:cc:0c:f6:91:30:32:a1:35:f3:2a:4b:7b:c7:1b:76:09:
         05:eb:97:da:7c:b9:74:87:1e:05:4e:21:87:f1:a7:1f:f2:2e:
         9a:16:07:09:7b:b7:dd:34:f9:b5:6d:9e:ae:62:d3:d0:59:88:
         68:85:a3:ce:a2:ad:21:ae:b3:e7:ce:42:2e:d8:3f:42:47:3a:
         ce:b5:f5:c2:ae:5a:e3:7e:32:4a:6c:c3:3b:49:61:63:ef:52:
         01:02:a5:1b:67:0d:e7:df:2d:67:80:f5:5d:ac:13:0d:dc:c7:
         0c:b1:6d:8d:0b:a4:50:90:6e:2a:a7:ba:7e:c6:62:42:2c:f3:
         ad:73:d3:1b:b1:5a:9a:f8:64:42:22:65:ba:66:e4:a3:4f:6c:
         cf:24:da:bf:30:bb:dc:fa:65:b1:1f:86:18:c1:f1:55:bc:df:
         cd:15:ed:f6:ca:68:c8:3a:5f:fd:0a:bb:f8:35:94:72:11:ae:
         f0:f9:c1:b5:61:4a:f7:6c:49:8d:d2:8e:36:c9:79:aa:13:73:
         6d:44:58:ec:fb:5e:13:9a:19:2c:e9:41:88:df:51:da:33:4c:
         e1:44:03:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----