Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/323830333a363138303a3a2f33322d3332203d3e20323634383530.roa
File:                     323830333a363138303a3a2f33322d3332203d3e20323634383530.roa (raw, json)
Hash identifier:          FntlSdgws/MIZaAGInDUYtMYv9uH3XP+1YM+/SxMikc=
Subject key identifier:   0E:1E:E9:62:71:21:D9:E7:FB:1C:A8:DC:B3:B2:69:77:22:29:E1:9D
Certificate issuer:       /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial:       63EF2869897E88D915B377E0E7A17844DB92E4CC
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/323830333a363138303a3a2f33322d3332203d3e20323634383530.roa
Signing time:             Tue 04 Feb 2025 18:39:12 +0000
ROA not before:           Tue 04 Feb 2025 18:34:12 +0000
ROA not after:            Tue 03 Feb 2026 18:39:12 +0000
asID:                     264850
IP address blocks:        2803:6180::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ef:28:69:89:7e:88:d9:15:b3:77:e0:e7:a1:78:44:db:92:e4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
        Validity
            Not Before: Feb  4 18:34:12 2025 GMT
            Not After : Feb  3 18:39:12 2026 GMT
        Subject: CN=0E1EE9627121D9E7FB1CA8DCB3B269772229E19D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d9:55:a8:f0:b8:6d:07:d1:17:bc:27:ec:19:
                    72:d6:db:c1:01:df:46:2f:53:9b:55:56:04:ad:2d:
                    88:30:25:a2:2c:41:90:88:77:6d:a1:84:19:ed:06:
                    22:50:91:27:d7:b8:6a:f2:30:80:33:d3:03:18:a8:
                    6f:cf:45:03:b3:61:fd:52:ec:8c:83:88:8e:96:b4:
                    94:e5:82:56:a8:f5:ca:12:5e:52:9c:37:d4:24:bc:
                    a2:60:54:47:7a:5b:16:30:5f:36:d6:da:3c:37:7d:
                    07:00:74:e4:6c:f4:10:ee:ea:30:b5:2f:fd:99:a3:
                    e8:27:89:6f:f9:8f:87:ec:d1:ec:b4:19:e5:93:3c:
                    6c:8a:e8:66:17:2b:d0:2c:1b:43:8e:c0:0a:08:a2:
                    f6:27:09:3e:1f:dc:b3:8e:83:27:3c:f6:8e:6f:fc:
                    d8:b7:17:c0:0a:8a:cd:29:a5:0c:85:89:8b:99:43:
                    97:4f:63:6d:2e:88:45:1b:ac:d2:6b:36:98:29:7d:
                    02:fb:0c:2a:43:49:f5:44:04:1f:c8:5f:e3:f3:b0:
                    1e:11:2f:ea:58:e4:03:06:81:50:c2:3f:bd:0d:ec:
                    62:25:e2:61:a1:10:53:67:ef:b8:26:58:3f:99:e5:
                    3d:eb:9c:a5:be:09:05:25:1d:13:da:90:68:03:f1:
                    9a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:1E:E9:62:71:21:D9:E7:FB:1C:A8:DC:B3:B2:69:77:22:29:E1:9D
            X509v3 Authority Key Identifier:
                keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/323830333a363138303a3a2f33322d3332203d3e20323634383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6180::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:31:c3:de:c5:1a:f9:4b:75:24:f4:b9:fc:6f:8c:c6:f3:01:
         f2:03:5e:4e:ef:79:1b:e9:8a:ae:38:e7:78:4e:3f:ca:26:34:
         a9:36:cf:f2:20:6c:15:ba:1f:4a:0e:17:5e:76:90:e3:0e:8c:
         b1:f1:bc:cb:88:41:16:cc:3e:0b:95:12:2a:db:b6:a5:7d:aa:
         2f:fa:ab:86:47:1f:31:34:ce:bc:4b:b2:12:91:8a:71:53:13:
         09:46:2b:a4:d7:47:04:3d:00:94:bc:c3:0f:5f:53:1e:7d:a0:
         3b:7d:d0:8a:7a:e3:ca:76:dc:6c:0c:c3:95:a4:37:51:79:ed:
         1e:9d:9e:4a:58:3c:81:1e:7c:2d:91:a3:8d:3e:ae:7d:e5:19:
         da:00:83:a6:03:fb:0c:3b:ac:e3:4d:3a:47:72:e5:ed:c2:99:
         02:7e:d9:80:b5:77:39:3a:81:4e:7a:cd:9e:91:76:3b:43:96:
         1f:24:55:de:2e:13:f6:95:bb:9d:cb:ca:13:f8:cd:98:be:63:
         8f:a1:2e:fb:d3:ce:8a:c2:cc:99:27:e5:1d:87:f1:5d:01:1e:
         45:0b:f6:7b:b3:b6:be:28:d0:af:18:03:4f:0c:65:db:79:85:
         d2:bc:f1:94:f2:7b:8b:86:ee:0a:79:ec:bd:97:3c:4b:4b:05:
         6c:52:f5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----