Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a343a3a2f34362d3436203d3e20323636383630.roa
File:                     323830333a623261303a343a3a2f34362d3436203d3e20323636383630.roa (raw, json)
Hash identifier:          o80h5WSzu8jOo3uSN2QXnKt4y6EaViXYn4/8lvu9dtc=
Subject key identifier:   89:12:29:5E:9B:CD:8C:39:B3:D8:78:72:49:AF:24:FE:B2:1A:5F:0F
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       4818EDC1845FA94900CCA22E2FB55E9C1CEFB707
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a343a3a2f34362d3436203d3e20323636383630.roa
Signing time:             Fri 14 Mar 2025 16:55:00 +0000
ROA not before:           Fri 14 Mar 2025 16:50:00 +0000
ROA not after:            Fri 13 Mar 2026 16:55:00 +0000
asID:                     266860
IP address blocks:        2803:b2a0:4::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:18:ed:c1:84:5f:a9:49:00:cc:a2:2e:2f:b5:5e:9c:1c:ef:b7:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Mar 14 16:50:00 2025 GMT
            Not After : Mar 13 16:55:00 2026 GMT
        Subject: CN=8912295E9BCD8C39B3D8787249AF24FEB21A5F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:35:fb:ce:8d:79:f3:84:b9:b9:ad:bb:4b:92:
                    bc:11:f7:c8:7b:4f:ff:d8:ea:3a:38:d1:2e:c6:06:
                    7f:67:41:47:70:5c:48:ba:8d:dd:40:18:e7:db:e9:
                    57:ea:1b:b4:f7:97:35:8b:b5:22:d8:9b:d9:bc:a9:
                    d4:e0:ef:02:56:d1:92:3f:a4:3c:5c:35:7e:1a:a4:
                    dd:a8:f2:c7:b0:ce:f0:98:70:da:20:69:33:4c:e3:
                    5b:a8:c6:ca:8e:fc:7c:4c:80:e6:21:25:93:02:9f:
                    bf:85:22:2d:56:f1:33:5f:f6:60:6b:25:23:7a:e4:
                    7a:44:d6:1f:5d:b0:cd:4d:2d:d0:79:55:a6:b2:8b:
                    39:1e:6a:df:84:fe:b4:56:81:45:6e:92:9d:57:34:
                    09:98:42:bf:9e:f4:a4:65:e5:86:13:c5:01:92:8f:
                    e0:94:e4:bd:cb:85:92:70:97:fc:00:c4:ce:a0:7e:
                    5b:00:17:ca:43:4a:2d:58:a8:99:18:20:57:34:74:
                    4b:38:e1:0f:b7:a5:e2:eb:c6:f4:39:60:2e:d6:e1:
                    53:65:75:7a:64:99:20:af:a4:eb:17:5f:41:4b:90:
                    63:ee:71:e7:3f:a6:02:cd:06:b4:6e:1c:77:a2:3c:
                    a0:1f:4b:f2:39:71:39:2a:04:aa:94:51:16:d7:54:
                    ab:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:12:29:5E:9B:CD:8C:39:B3:D8:78:72:49:AF:24:FE:B2:1A:5F:0F
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a343a3a2f34362d3436203d3e20323636383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2a0:4::/46

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:c9:e7:86:61:bc:82:2d:5c:a9:d7:1a:5d:55:9b:d3:69:
         13:15:3e:51:e4:29:dc:1d:ba:cd:87:59:41:a4:5f:b3:75:55:
         b9:b0:48:3a:a4:f9:b1:1e:5c:61:8b:38:73:bd:40:35:77:1c:
         f1:0e:ca:4b:f8:f7:7e:21:0b:ce:4a:fe:df:45:ff:6f:0d:64:
         13:31:d5:e0:1c:be:1f:89:d9:7e:00:5b:7f:31:db:de:e3:5a:
         10:f8:9a:58:bf:fe:63:ac:0b:99:27:66:89:10:0a:3a:21:2c:
         a2:2a:67:fc:47:04:85:3d:e1:5b:1c:75:55:bc:99:c5:6a:0d:
         c7:20:ae:e3:a6:db:db:0a:36:62:b8:28:e2:65:f5:38:d3:0f:
         96:71:bd:c6:f1:40:ce:51:4d:e3:81:36:4f:6d:90:7b:61:4b:
         6c:b4:e0:7a:ca:5b:9e:90:21:0b:3c:3c:19:ba:c7:cb:85:01:
         a9:9e:e5:0b:4a:8d:a4:04:e1:8f:3f:d2:6a:4a:6a:0c:61:40:
         59:db:3f:1c:21:1d:16:93:94:97:cf:22:f8:66:a5:e0:76:f5:
         d0:70:dd:f3:96:33:de:17:df:1c:ae:47:ac:0e:31:1b:6b:72:
         1c:62:01:3b:27:97:c0:c4:40:7f:9d:bc:4f:43:03:27:81:e6:
         5c:f5:54:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----