Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a383a3a2f34362d3436203d3e20323636383630.roa
File:                     323830333a623261303a383a3a2f34362d3436203d3e20323636383630.roa (raw, json)
Hash identifier:          528Rq3KmoDq9EN5ORu3BdLu3sDPymr7jXjFWZqXh/Oc=
Subject key identifier:   78:29:80:2D:69:1A:29:28:3C:18:7E:53:06:A5:5C:01:E0:7F:59:CE
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       753A1A73698F2BA8799B7240E0C763900AEC1FC3
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a383a3a2f34362d3436203d3e20323636383630.roa
Signing time:             Fri 14 Mar 2025 16:55:00 +0000
ROA not before:           Fri 14 Mar 2025 16:50:00 +0000
ROA not after:            Fri 13 Mar 2026 16:55:00 +0000
asID:                     266860
IP address blocks:        2803:b2a0:8::/46 maxlen: 46
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3a:1a:73:69:8f:2b:a8:79:9b:72:40:e0:c7:63:90:0a:ec:1f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Mar 14 16:50:00 2025 GMT
            Not After : Mar 13 16:55:00 2026 GMT
        Subject: CN=7829802D691A29283C187E5306A55C01E07F59CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:11:28:a5:3d:d9:c0:4f:ca:65:a0:16:6a:3b:
                    05:a0:97:14:1f:91:f1:e8:f6:0c:2c:12:97:b3:6c:
                    8d:5d:4a:6e:cf:2b:8f:73:eb:05:5e:7a:02:e3:85:
                    c5:49:43:9f:dc:24:2c:ba:66:b9:85:3d:7e:0d:31:
                    12:54:3a:80:e3:fb:f9:17:02:47:86:0d:ff:ce:f8:
                    a3:10:0c:a2:26:2b:28:ec:43:10:51:1c:91:53:9f:
                    cb:a5:7e:88:e9:92:69:5c:1a:92:86:b8:aa:92:c0:
                    80:ad:10:6f:75:e5:7d:56:32:1e:90:46:5f:5a:c8:
                    28:6e:e2:88:a5:c8:ff:f3:06:57:10:f2:36:df:a5:
                    d3:f6:62:19:e7:fc:a4:e2:7f:64:70:45:9a:0f:72:
                    58:ec:a7:b3:73:6c:b5:fa:74:59:a0:0a:6e:4c:ad:
                    52:67:b2:e7:12:bf:26:87:f3:3a:25:a5:b5:94:44:
                    11:8d:72:62:b4:ec:80:c1:be:4d:2c:fa:8a:38:c6:
                    28:bf:d9:72:22:cb:50:8b:46:77:cf:42:f0:07:f9:
                    2c:54:2e:d7:77:f7:73:2f:4f:af:86:03:bb:d1:72:
                    18:26:78:4b:da:c4:8b:c0:86:38:be:01:bb:14:9c:
                    02:26:46:b4:91:6e:78:12:63:b7:7f:fb:06:cd:f0:
                    6f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:29:80:2D:69:1A:29:28:3C:18:7E:53:06:A5:5C:01:E0:7F:59:CE
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a383a3a2f34362d3436203d3e20323636383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2a0:8::/46

    Signature Algorithm: sha256WithRSAEncryption
         21:a4:11:0f:c8:d2:e0:ab:23:af:4d:59:e0:7c:cc:f9:68:a7:
         5f:8d:23:3f:57:35:f0:5c:31:e8:e1:1b:0c:33:4c:f0:1f:38:
         6f:a8:3b:be:39:94:85:a3:82:28:b2:44:ec:f3:83:ca:8c:a4:
         92:c8:09:82:ba:53:7b:c2:aa:6b:48:b7:1c:b3:b8:73:38:0f:
         12:b8:80:36:02:e2:d3:ad:53:40:07:13:e6:38:23:76:ce:45:
         ee:d5:62:c4:7b:72:ca:5f:80:1a:58:66:94:c7:03:bb:2a:76:
         8f:19:70:2e:49:a4:e1:41:6b:8c:be:e1:0c:c6:99:5e:1e:72:
         15:3c:30:ba:9e:64:e7:7f:17:03:68:93:41:fd:9d:ac:99:68:
         44:fb:7c:ff:37:b8:35:ca:a5:7b:01:57:63:ac:cf:a8:54:a5:
         ae:a9:f2:08:d7:9b:f0:11:5e:24:82:6c:f2:c2:6e:4c:f0:9c:
         b5:a5:e4:6e:86:37:e7:1d:a9:f6:64:12:b3:9b:ad:c3:d7:2a:
         0b:12:8a:43:54:41:e4:4e:f5:7e:68:9f:76:17:61:6d:13:f5:
         86:66:64:fb:29:a4:ba:f2:4e:3e:f0:08:fb:23:39:fe:be:9c:
         e0:8a:82:0a:b7:f3:8b:22:ce:d8:12:71:95:81:18:bf:72:7b:
         93:2c:78:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----