Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/670AFBC27201E758AE8EEDBC650FE5452D14388F8CF0D67FC9BCF98E0887C2FD/0/323830333a636364303a3a2f33322d3438203d3e20323734303233.roa
File:                     323830333a636364303a3a2f33322d3438203d3e20323734303233.roa (raw, json)
Hash identifier:          R5OQYCz2gu5efYWL059ookcZEw2qDx7s5fShS+4LWQk=
Subject key identifier:   55:EB:9C:B3:F3:DA:E1:85:59:3A:F4:D3:38:1A:84:0A:72:5E:0A:7C
Certificate issuer:       /CN=AE946279C7006613BA11C177A996687250DCDBCC
Certificate serial:       4DBB5237056BD735B5F2310BA0BFDBD75CEC0AA8
Authority key identifier: AE:94:62:79:C7:00:66:13:BA:11:C1:77:A9:96:68:72:50:DC:DB:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE946279C7006613BA11C177A996687250DCDBCC.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/670AFBC27201E758AE8EEDBC650FE5452D14388F8CF0D67FC9BCF98E0887C2FD/0/323830333a636364303a3a2f33322d3438203d3e20323734303233.roa
Signing time:             Tue 28 Jan 2025 02:25:00 +0000
ROA not before:           Tue 28 Jan 2025 02:20:00 +0000
ROA not after:            Tue 27 Jan 2026 02:25:00 +0000
asID:                     274023
IP address blocks:        2803:ccd0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:bb:52:37:05:6b:d7:35:b5:f2:31:0b:a0:bf:db:d7:5c:ec:0a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE946279C7006613BA11C177A996687250DCDBCC
        Validity
            Not Before: Jan 28 02:20:00 2025 GMT
            Not After : Jan 27 02:25:00 2026 GMT
        Subject: CN=55EB9CB3F3DAE185593AF4D3381A840A725E0A7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:58:c6:67:99:8c:ab:32:66:30:de:b1:5d:
                    40:07:09:98:44:73:99:b1:f3:56:07:99:a4:f9:05:
                    12:5b:98:8b:3c:11:c4:85:dc:76:d6:01:96:96:ac:
                    c4:22:82:88:6e:a0:78:1d:7c:99:5e:93:92:c5:0f:
                    27:cb:42:ea:20:c7:33:3f:08:62:70:58:fa:2c:fa:
                    7d:b3:a6:ab:37:f6:00:6b:e4:94:76:67:a6:f9:dd:
                    ae:97:f7:9d:49:db:79:76:43:a0:62:04:2b:7f:c8:
                    cb:d7:89:6c:a1:e0:3a:26:05:0b:7c:77:4b:3d:b0:
                    38:c0:e3:80:1d:6a:d9:cb:c0:c7:f9:ab:49:f8:39:
                    31:a9:f6:c2:bd:9a:7e:c0:2c:e5:a1:3c:84:40:df:
                    cc:27:d1:85:7d:aa:a4:d8:dd:f2:b2:43:95:2e:92:
                    a6:4d:4e:c7:83:85:f7:bf:8c:1d:39:6a:98:b8:eb:
                    2f:55:79:b1:5c:31:3b:08:12:5e:5e:9b:11:75:9b:
                    50:ea:f5:e8:a7:1d:71:9a:9a:e6:93:95:1a:6e:2b:
                    42:9f:f6:37:5c:51:4f:1b:b7:93:4d:95:ef:9d:df:
                    be:86:f6:f9:14:77:2f:4d:5f:a1:27:58:63:49:37:
                    cf:00:80:d9:15:13:78:b4:86:9c:53:f5:a7:72:40:
                    6c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EB:9C:B3:F3:DA:E1:85:59:3A:F4:D3:38:1A:84:0A:72:5E:0A:7C
            X509v3 Authority Key Identifier:
                keyid:AE:94:62:79:C7:00:66:13:BA:11:C1:77:A9:96:68:72:50:DC:DB:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/670AFBC27201E758AE8EEDBC650FE5452D14388F8CF0D67FC9BCF98E0887C2FD/0/AE946279C7006613BA11C177A996687250DCDBCC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AE946279C7006613BA11C177A996687250DCDBCC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/670AFBC27201E758AE8EEDBC650FE5452D14388F8CF0D67FC9BCF98E0887C2FD/0/323830333a636364303a3a2f33322d3438203d3e20323734303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ccd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:88:21:4b:10:f5:0d:b2:36:78:fc:a6:e2:16:a9:eb:b3:90:
         eb:25:87:37:ce:d6:de:a3:8d:4d:55:15:f3:db:ce:6d:a2:82:
         20:b8:87:f9:c0:1c:44:07:3e:96:fa:2b:ec:ad:8e:1e:bb:24:
         d7:14:ef:8d:81:ce:f6:12:a1:2e:39:15:c7:3a:64:7e:2e:96:
         4c:ef:ec:73:c9:c4:ac:9e:f9:21:d4:65:55:c7:55:14:89:c7:
         0a:6e:63:71:70:f1:04:3b:45:18:56:0e:21:1b:ba:c5:87:e9:
         34:a2:eb:cc:20:8f:44:6e:03:32:ca:5d:cd:64:87:d5:f6:73:
         08:e9:7e:a8:90:1d:90:64:5f:ca:05:1b:84:ce:cb:bc:0a:82:
         34:d7:8e:14:82:b4:ab:f0:d5:fe:9b:09:d0:9b:d9:1b:03:ca:
         c0:52:a1:d5:09:5a:dd:d6:78:62:92:fe:ac:b7:dc:a9:eb:17:
         9c:95:13:f7:6f:82:aa:95:8c:f2:81:ea:b8:7e:b7:9c:e2:5f:
         96:a2:8f:82:51:7c:9a:be:7d:15:79:1a:f0:c2:29:a0:e3:14:
         1f:ff:01:bc:cf:b5:2f:43:51:57:fd:31:26:18:55:c1:1a:c8:
         b3:4a:11:2f:17:40:23:10:9c:75:66:96:7b:a3:d2:41:e5:d5:
         64:e2:5a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----