Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa
File:                     323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa (raw, json)
Hash identifier:          80rEE/lMW55oyWdYLsl2ESZEqwFxEXKc0s6xSnCgeds=
Subject key identifier:   8D:C0:64:98:B2:48:31:E4:0C:CE:F7:3C:7C:63:07:CB:C9:89:61:DE
Certificate issuer:       /CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
Certificate serial:       70EF87228EBDD3111E9816EF31B0740C2824F57B
Authority key identifier: 7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa
Signing time:             Tue 04 Feb 2025 18:27:40 +0000
ROA not before:           Tue 04 Feb 2025 18:22:40 +0000
ROA not after:            Tue 03 Feb 2026 18:27:40 +0000
asID:                     269746
IP address blocks:        2803:3960:1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ef:87:22:8e:bd:d3:11:1e:98:16:ef:31:b0:74:0c:28:24:f5:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E656418FBD6F519E8CA146E061CF553AFE480F1
        Validity
            Not Before: Feb  4 18:22:40 2025 GMT
            Not After : Feb  3 18:27:40 2026 GMT
        Subject: CN=8DC06498B24831E40CCEF73C7C6307CBC98961DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:06:ff:38:0d:01:3d:df:9d:75:ed:a8:df:72:
                    1b:7a:4c:73:cb:bb:04:2c:98:fe:0e:7f:ea:c3:69:
                    b6:98:ae:fd:58:c9:cb:e5:63:35:0f:1a:05:d3:a7:
                    72:ec:97:56:6a:69:10:d6:30:76:b4:2b:97:d5:fc:
                    b9:3e:c1:a0:cc:62:54:96:f6:6a:a2:4f:0a:a8:4e:
                    68:63:64:54:3c:60:5b:70:ed:d8:87:d4:c6:c1:97:
                    9b:69:2a:3a:51:72:af:ae:55:eb:52:90:ec:96:ed:
                    f1:81:99:0d:54:6e:b3:cb:84:5e:1b:e9:a8:cb:ce:
                    e3:a3:e4:8f:f6:c8:18:5a:6c:14:c0:91:62:d1:b7:
                    56:8c:de:2a:92:ac:82:32:8d:65:8e:03:f8:5a:7c:
                    58:62:ff:30:d0:29:1f:ba:14:4b:5d:d3:27:45:bd:
                    17:c2:a0:52:b0:10:83:a7:c8:5a:79:f9:c3:d6:2d:
                    f8:dc:2d:bf:db:8d:f7:40:27:2f:52:8b:45:69:60:
                    c3:66:08:7a:e4:8b:13:4b:30:cd:61:00:63:92:b6:
                    09:43:63:57:93:e8:5f:19:0f:75:cb:23:84:5e:0e:
                    3f:3b:d8:5b:fb:aa:c8:af:dd:b1:a7:12:47:7b:ff:
                    e2:80:93:15:e3:bf:ad:06:af:04:5d:5c:bd:22:04:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C0:64:98:B2:48:31:E4:0C:CE:F7:3C:7C:63:07:CB:C9:89:61:DE
            X509v3 Authority Key Identifier:
                keyid:7E:65:64:18:FB:D6:F5:19:E8:CA:14:6E:06:1C:F5:53:AF:E4:80:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7E656418FBD6F519E8CA146E061CF553AFE480F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64C5AC39B5DB725F76ACE257AB817AEC58D38CBA44F22B3387966B4AB9A2296D/0/323830333a333936303a313a3a2f34382d3438203d3e20323639373436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3960:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:55:52:15:1d:a5:12:fa:83:f7:a5:36:82:d5:13:7f:0a:8f:
         8d:54:b1:30:14:e6:f8:58:66:45:66:b4:1e:58:33:36:3f:7f:
         4a:bd:74:ee:18:92:7f:a7:7e:a9:08:f7:2a:64:80:cc:d6:72:
         77:01:16:c5:68:4c:b4:5f:29:40:4b:21:35:0d:87:cf:c5:94:
         3d:6e:65:10:12:a9:78:49:28:bd:ce:06:16:96:98:07:28:b3:
         0b:a9:18:fe:20:97:81:5c:23:7c:d4:00:eb:4c:ca:a6:08:37:
         0a:ef:f2:23:6d:22:bb:8f:86:da:50:b5:d4:a8:fe:30:5e:54:
         dc:56:ef:71:21:c8:f6:7c:97:63:ee:e3:2f:1f:64:6e:9b:fe:
         07:75:e3:61:25:e4:5f:4b:9f:a9:cc:27:90:2b:33:3b:71:3d:
         c9:56:b5:47:0d:d9:30:fa:50:4e:68:3f:8a:48:60:3f:cd:17:
         1f:52:87:1d:32:b1:99:e4:27:da:60:53:72:d2:db:9c:a7:ea:
         4d:e6:74:90:0a:ae:58:01:80:3f:f2:95:c2:24:5b:07:69:2f:
         87:f0:4a:f2:f1:98:c9:d3:b5:fa:4b:29:c0:a1:a7:c8:8f:80:
         c1:f3:e8:7c:45:f2:92:4b:d5:7a:8b:26:f1:ea:03:85:65:25:
         cd:51:2e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----