Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/323830333a356439303a3a2f33322d3536203d3e20323733303030.roa
File:                     323830333a356439303a3a2f33322d3536203d3e20323733303030.roa (raw, json)
Hash identifier:          0OoP3A238IuGlM9478CrBEi+3xgJKgMmBk2U8Rug3mA=
Subject key identifier:   5C:84:82:23:EF:C0:5F:1F:7C:94:07:9F:EF:52:86:EF:A0:39:BB:2C
Certificate issuer:       /CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70
Certificate serial:       4832C3A8E44B4D2482A8A658FD02833CB2C35D0B
Authority key identifier: 34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/323830333a356439303a3a2f33322d3536203d3e20323733303030.roa
Signing time:             Tue 11 Mar 2025 00:40:00 +0000
ROA not before:           Tue 11 Mar 2025 00:35:00 +0000
ROA not after:            Tue 10 Mar 2026 00:40:00 +0000
asID:                     273000
IP address blocks:        2803:5d90::/32 maxlen: 56
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:32:c3:a8:e4:4b:4d:24:82:a8:a6:58:fd:02:83:3c:b2:c3:5d:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70
        Validity
            Not Before: Mar 11 00:35:00 2025 GMT
            Not After : Mar 10 00:40:00 2026 GMT
        Subject: CN=5C848223EFC05F1F7C94079FEF5286EFA039BB2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:48:b5:56:eb:f3:75:30:f7:22:c5:38:1f:
                    aa:0e:50:9c:ec:4c:8e:a3:91:e6:55:23:eb:4a:8a:
                    32:b2:6e:fb:5d:4f:b8:6d:e4:09:86:3d:99:5d:d3:
                    8f:33:b8:f9:cf:5c:2d:5d:4f:f0:ac:6a:db:92:a2:
                    78:d8:26:38:59:bc:c4:99:33:ce:e3:5f:f0:4b:c1:
                    8b:d2:82:18:8d:c6:db:76:f2:ba:11:11:0d:1c:c5:
                    f8:00:65:09:8b:53:a1:59:3e:93:ed:bf:7b:c7:11:
                    a3:8d:31:49:78:8f:3f:a2:4f:c3:b8:d6:24:8e:3d:
                    53:81:57:98:32:1d:7a:c8:ca:ad:63:50:68:68:33:
                    c7:6e:cd:59:d5:33:1f:fe:66:c9:05:32:b0:39:ed:
                    5f:f2:4d:4e:c9:f7:f1:59:58:c7:70:39:ac:ff:a4:
                    00:84:04:70:38:c8:37:85:57:2d:5d:07:d9:d9:65:
                    48:3e:96:d2:a4:1f:1f:6d:74:0b:40:b8:ca:1c:4c:
                    fb:5a:c6:06:a3:5d:cc:56:72:64:63:c3:a4:8c:e4:
                    75:7c:1c:28:3a:b0:d9:b5:9f:5d:09:e3:ee:4c:cc:
                    36:5b:95:c7:c0:75:9c:fc:94:88:76:ac:d0:cd:ed:
                    f4:4c:fd:a0:78:66:aa:e0:47:40:ac:bb:af:2b:13:
                    e3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:84:82:23:EF:C0:5F:1F:7C:94:07:9F:EF:52:86:EF:A0:39:BB:2C
            X509v3 Authority Key Identifier:
                keyid:34:32:C5:0F:EB:B6:FB:57:D8:AC:4E:D4:C0:5D:F2:0C:89:FE:6D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3432C50FEBB6FB57D8AC4ED4C05DF20C89FE6D70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5D5BD664924FA57D53C5230ECFE47FD483FD20B9B48B71FBB7A739531EDD88FB/0/323830333a356439303a3a2f33322d3536203d3e20323733303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5d90::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:d2:51:87:8e:3e:10:7b:83:a0:82:9d:db:45:7d:d2:dd:
         9d:5e:15:20:4a:95:12:14:31:ab:8d:37:bf:11:b5:64:c0:83:
         5c:66:f2:00:ac:e1:d3:4b:1f:a3:e0:b4:2c:f2:50:16:d2:27:
         ac:a5:7c:61:74:3d:f1:2b:76:44:18:52:df:f8:a0:39:7a:18:
         6e:93:6b:f7:42:e9:dd:30:63:1f:3e:5a:7a:c5:b6:1b:6c:c7:
         bd:f7:d5:9a:e1:91:84:d4:29:0b:c3:13:3d:5a:92:92:fb:c9:
         8c:d9:37:60:b2:be:90:e6:c8:f7:18:bc:71:6e:f7:9b:c3:ca:
         83:60:f8:75:56:da:2e:70:2d:9c:c1:0f:f7:ae:75:9b:80:48:
         2e:89:e7:e9:aa:c2:f7:21:d1:f1:87:86:7c:b8:ae:6c:8d:fe:
         b2:51:14:f9:55:7a:c9:d4:8a:d5:44:2f:8e:bf:50:60:8c:80:
         1c:aa:66:e3:ff:06:a6:86:76:9b:05:c4:73:2d:61:24:8d:1f:
         18:40:1d:ec:c8:88:b5:b0:c2:10:3f:8e:f9:d3:e0:fe:55:85:
         3b:58:34:cc:9b:28:19:48:6e:fa:df:15:dc:d1:c5:84:2c:0d:
         75:7e:9b:2a:48:04:b5:2b:4c:cf:ff:c8:2d:b4:64:d6:4c:45:
         66:a2:af:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----