Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a31303a3a2f34342d3434203d3e20323637393139.roa
File:                     323830333a656536303a31303a3a2f34342d3434203d3e20323637393139.roa (raw, json)
Hash identifier:          gJw4bnjyrBzhEID74X01HzLEUnO5lXHHOHO/oSObXTQ=
Subject key identifier:   42:47:D5:ED:E1:63:B0:E7:2F:0F:4C:88:43:4E:B1:2A:DA:EE:16:46
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       50FED66286B8D0439607D39B7BE296379718020D
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a31303a3a2f34342d3434203d3e20323637393139.roa
Signing time:             Tue 04 Feb 2025 18:21:49 +0000
ROA not before:           Tue 04 Feb 2025 18:16:49 +0000
ROA not after:            Tue 03 Feb 2026 18:21:49 +0000
asID:                     267919
IP address blocks:        2803:ee60:10::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:fe:d6:62:86:b8:d0:43:96:07:d3:9b:7b:e2:96:37:97:18:02:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Feb  4 18:16:49 2025 GMT
            Not After : Feb  3 18:21:49 2026 GMT
        Subject: CN=4247D5EDE163B0E72F0F4C88434EB12ADAEE1646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:33:79:8b:4e:7b:5c:00:58:13:40:67:be:0f:
                    5b:01:57:ec:5d:ca:ce:43:ad:07:42:48:ea:c1:d6:
                    18:a3:24:e6:db:62:40:02:7f:75:50:12:fe:f1:cf:
                    6e:3d:39:1e:6c:76:d6:f2:ec:bd:ca:72:95:49:1d:
                    e6:66:96:58:0d:c8:e9:a4:03:ce:ac:8d:df:e7:40:
                    b7:e3:06:62:f6:22:2a:de:7a:9e:b9:89:89:8e:7f:
                    6c:4d:e3:da:b2:38:47:77:ef:26:4f:7e:cb:37:06:
                    3e:46:16:0b:69:62:96:82:1f:53:f6:e0:2b:6e:c8:
                    52:15:fa:eb:07:c9:66:59:a9:2f:e6:18:78:52:2d:
                    5e:56:6c:e7:6a:25:6f:0b:e9:b2:75:8b:b0:89:19:
                    00:38:6d:6c:f7:c2:8b:fa:34:29:e7:b7:75:f2:52:
                    ae:f0:e7:dc:15:2a:ce:5d:47:f4:b2:aa:76:58:1f:
                    1e:88:79:4c:d6:f6:cf:e4:28:99:0e:6a:19:59:99:
                    1b:51:57:91:b2:92:d3:61:e5:29:ce:e3:7c:43:f8:
                    c0:4f:90:62:3e:88:6d:79:96:10:02:67:aa:b9:49:
                    6d:d7:91:0d:95:2e:70:85:e2:05:5a:ac:64:33:88:
                    13:8c:70:d5:52:bb:57:27:45:ca:df:10:28:57:5a:
                    b5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:47:D5:ED:E1:63:B0:E7:2F:0F:4C:88:43:4E:B1:2A:DA:EE:16:46
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a31303a3a2f34342d3434203d3e20323637393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         97:20:2a:1d:5b:e7:1e:c7:70:4d:a4:36:fa:29:4b:39:15:d3:
         e0:79:04:26:63:15:91:52:9c:fc:34:f1:90:11:4b:a8:d2:3d:
         c4:e5:8d:89:89:4a:ad:17:a6:82:7e:cb:9e:31:df:82:24:a7:
         57:32:a7:8a:2f:5d:84:94:59:0f:87:f3:b2:ea:fe:3e:57:8b:
         03:1e:36:51:42:2f:0c:03:33:84:9e:12:3a:bf:12:c2:81:38:
         c4:01:7e:b7:b8:19:20:10:44:24:c7:e1:60:b2:10:8f:fa:33:
         ef:51:20:91:96:9b:42:72:22:5c:1a:6f:0f:32:59:d3:4e:ab:
         5a:00:70:2a:97:7b:99:29:cb:34:df:dc:c9:70:bd:d9:e6:85:
         f6:35:29:7a:a0:45:30:76:f9:2a:df:68:4c:65:00:51:bc:50:
         2e:7b:f0:6c:86:f4:34:03:1f:04:e0:aa:25:d3:95:ae:0b:f0:
         4b:1d:84:ab:64:aa:19:29:0b:fb:89:81:80:65:de:60:1b:11:
         20:c7:df:6b:1f:68:e7:77:39:36:09:92:fe:2d:50:9b:1f:26:
         8e:83:e3:b2:23:ad:d8:85:8f:86:79:b8:d3:a3:ec:16:c0:21:
         5d:e9:8c:64:51:61:c8:21:3e:bb:11:c7:ba:e3:3f:5d:66:f2:
         a5:c2:7b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----