Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a3a2f33322d3332203d3e2033353439.roa
File:                     323830333a623261303a3a2f33322d3332203d3e2033353439.roa (raw, json)
Hash identifier:          a/m0rZmew3WUFRun1e3sQhxBo9SKhOcQud/mOfdjxrI=
Subject key identifier:   25:14:C2:EB:37:83:DB:6E:2F:D2:63:AA:24:AC:CD:DC:A4:0D:C5:72
Certificate issuer:       /CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
Certificate serial:       1A7137B0102406A5034B99AB8DA247C3B7B4CC7A
Authority key identifier: C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a3a2f33322d3332203d3e2033353439.roa
Signing time:             Tue 04 Feb 2025 18:49:15 +0000
ROA not before:           Tue 04 Feb 2025 18:44:15 +0000
ROA not after:            Tue 03 Feb 2026 18:49:15 +0000
asID:                     3549
IP address blocks:        2803:b2a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:71:37:b0:10:24:06:a5:03:4b:99:ab:8d:a2:47:c3:b7:b4:cc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409
        Validity
            Not Before: Feb  4 18:44:15 2025 GMT
            Not After : Feb  3 18:49:15 2026 GMT
        Subject: CN=2514C2EB3783DB6E2FD263AA24ACCDDCA40DC572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d4:5e:82:42:2d:cf:97:18:d4:5d:c6:cd:e1:
                    fb:32:1b:6e:bf:d3:1d:75:f8:52:41:3d:53:57:e6:
                    05:cf:23:b0:40:ca:c9:c3:4a:7a:b4:ed:6f:af:f6:
                    36:f2:a4:59:51:c1:40:dc:b7:7a:42:0a:3e:d2:55:
                    d6:d3:e6:94:d4:ab:28:c0:e7:a5:24:f0:60:3e:8a:
                    70:23:82:d5:cd:08:43:98:c3:2a:69:b8:a9:bc:be:
                    30:16:76:70:37:9f:d8:57:fe:f0:3d:ce:a5:3e:a6:
                    b5:0c:2c:5d:06:25:c3:34:7d:76:48:e4:96:67:e8:
                    db:10:1a:46:4d:84:6f:97:7c:e2:fc:27:80:ba:96:
                    f5:b8:63:89:2a:ca:a2:a3:bf:fd:57:95:8f:d4:43:
                    fe:4c:b8:f8:15:d9:cc:6a:6b:33:7b:72:92:b9:66:
                    ad:3d:42:9f:80:df:95:16:3e:ac:88:93:3b:cc:a7:
                    74:19:24:3a:cd:53:5d:0d:fa:9c:b8:f6:b3:50:9b:
                    a0:8f:94:a0:46:0e:c4:40:85:23:15:cb:6e:28:e4:
                    2f:1b:84:f6:47:49:e2:b3:bb:d6:d3:ab:d2:86:c2:
                    c9:39:0c:ca:6e:10:8d:69:5d:25:3c:ca:f3:51:ea:
                    19:36:5d:14:57:6b:8f:d5:93:d7:51:b4:3d:bc:c7:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:14:C2:EB:37:83:DB:6E:2F:D2:63:AA:24:AC:CD:DC:A4:0D:C5:72
            X509v3 Authority Key Identifier:
                keyid:C0:DC:CA:D4:E9:85:7D:5C:6E:64:5D:F2:6D:2C:59:61:4B:1B:84:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0DCCAD4E9857D5C6E645DF26D2C59614B1B8409.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5EA45D25A1E7B7B074CDEDB7C7BCCDB78B40512BE55A76B18A910914B39EF621/0/323830333a623261303a3a2f33322d3332203d3e2033353439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b2a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:81:bc:24:55:eb:29:48:8b:bc:d4:d4:0d:5f:15:be:fd:88:
         69:18:a6:5e:f4:4b:16:10:f3:63:8c:7f:6a:10:f0:74:52:b5:
         57:51:f7:d7:6f:7c:d6:03:eb:85:09:4c:dc:ef:9d:6c:f9:9b:
         68:81:58:69:5a:fd:14:88:49:03:22:41:bd:cf:59:81:97:ac:
         8c:b2:c8:85:c8:11:e4:ac:d2:e6:c5:e1:a5:73:04:83:cd:c2:
         cb:9c:51:d8:80:be:20:e5:74:b6:b8:af:29:34:3f:1b:5c:15:
         11:e4:32:99:5d:08:53:11:23:fb:8e:de:93:b4:c6:15:bc:75:
         c1:a9:8d:56:53:c9:14:64:a0:19:e3:16:d1:61:f7:31:af:b2:
         3a:2a:01:f0:e5:f1:6b:36:a7:36:7d:cc:6f:85:ec:21:f1:14:
         7f:a7:7d:de:31:a1:fa:26:72:fd:ee:f7:cb:3b:64:8b:aa:20:
         12:11:aa:72:f9:5b:e3:7c:e6:d7:fc:f2:df:00:a3:02:d6:64:
         ff:73:41:d8:b9:a7:f6:5b:68:54:03:a3:38:97:eb:b9:b1:c8:
         88:d8:7e:d6:c2:b6:ea:f5:3f:36:ad:b4:86:1a:b3:26:18:13:
         36:b8:2f:39:40:0e:0f:d8:24:f7:ee:02:fe:0a:de:a8:32:f3:
         ce:4b:23:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----