Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a66303a3a2f34342d3434203d3e203130373533.roa
File:                     323830333a656536303a66303a3a2f34342d3434203d3e203130373533.roa (raw, json)
Hash identifier:          3SN3ch62pp5elCaL37oNUaOGl1lkiMFa99DwocUR/D8=
Subject key identifier:   F0:1A:55:9D:4D:14:49:CD:02:20:32:40:9F:DB:58:A5:50:09:A4:7B
Certificate issuer:       /CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
Certificate serial:       2D1DA000AF4675489495735A45BFDE253EF5494D
Authority key identifier: C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a66303a3a2f34342d3434203d3e203130373533.roa
Signing time:             Tue 04 Feb 2025 18:21:50 +0000
ROA not before:           Tue 04 Feb 2025 18:16:50 +0000
ROA not after:            Tue 03 Feb 2026 18:21:50 +0000
asID:                     10753
IP address blocks:        2803:ee60:f0::/44 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1d:a0:00:af:46:75:48:94:95:73:5a:45:bf:de:25:3e:f5:49:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C12AF1A8F8F23657299E9524D0D62F0E213FED62
        Validity
            Not Before: Feb  4 18:16:50 2025 GMT
            Not After : Feb  3 18:21:50 2026 GMT
        Subject: CN=F01A559D4D1449CD022032409FDB58A55009A47B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:da:08:0c:24:91:f2:f0:0d:25:5a:ff:6f:c6:
                    73:2c:31:64:4b:67:e6:71:1b:10:9a:d5:21:a2:89:
                    b5:77:8f:17:7f:88:63:e9:b9:61:87:2a:09:ac:c6:
                    6b:6c:13:40:60:80:d0:b3:90:ae:27:f3:9a:7b:2a:
                    27:32:b0:13:ce:e1:ed:6f:fe:8b:5f:37:ce:36:d3:
                    ef:26:aa:10:2e:55:90:9e:96:9a:82:03:33:15:ec:
                    39:a3:71:1b:81:84:8a:36:bc:70:cb:31:0d:12:d0:
                    e6:24:ff:68:f3:47:f1:8e:27:a7:23:24:80:ae:fe:
                    ea:8f:22:2b:e9:82:3e:0d:00:c3:73:7d:59:fd:38:
                    f7:3f:9a:f1:40:db:c8:7c:2a:72:15:02:ec:bc:f1:
                    e8:f3:c8:e8:6b:8f:44:42:55:02:71:c9:89:63:c9:
                    a4:42:fe:96:90:3c:66:8c:9f:f7:1a:ac:eb:b5:13:
                    51:2e:bd:25:34:82:6d:4b:93:44:b8:31:1b:80:ef:
                    35:de:f2:b5:cb:ff:26:9b:77:96:db:09:88:eb:57:
                    56:af:ee:43:ac:a2:9e:04:e3:e6:0f:1b:72:a8:11:
                    8f:b7:45:5c:9c:d6:50:bc:8f:e2:50:d2:14:b6:2a:
                    75:c6:69:df:23:c5:f3:4a:60:cb:08:6a:54:1e:38:
                    b2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1A:55:9D:4D:14:49:CD:02:20:32:40:9F:DB:58:A5:50:09:A4:7B
            X509v3 Authority Key Identifier:
                keyid:C1:2A:F1:A8:F8:F2:36:57:29:9E:95:24:D0:D6:2F:0E:21:3F:ED:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C12AF1A8F8F23657299E9524D0D62F0E213FED62.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6743DC458C31FB4BDD94CC5506944B66C36F4DDC8884E66D69F9F66BEB920FDD/0/323830333a656536303a66303a3a2f34342d3434203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ee60:f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         54:c4:7a:6a:91:b7:66:0e:41:f0:b8:e1:b3:b4:9f:99:d0:50:
         e6:a0:13:f0:ed:78:38:c1:fc:a6:6d:94:fd:9f:8a:12:58:84:
         b1:54:80:c5:51:b7:0d:db:f0:3a:55:47:3f:4f:fc:48:13:10:
         18:cc:96:ff:70:2f:35:6f:18:aa:f2:a1:a7:a6:8a:0d:c5:a6:
         bb:15:95:2e:3a:93:29:c8:3c:16:a3:44:15:87:e1:df:2a:7d:
         fc:3f:66:b8:3b:e4:c4:4c:ea:84:65:7b:ad:bc:4e:97:e9:47:
         84:30:4a:0c:fa:59:ee:70:d5:46:8a:d3:71:4e:ce:aa:28:fe:
         b3:ce:51:db:c0:fc:ce:ff:9a:a3:ea:69:22:75:fa:d2:86:f7:
         eb:7a:80:02:34:38:c2:03:63:6b:a5:e1:33:a7:5b:94:19:bb:
         64:d5:c3:09:2a:2f:65:c3:8b:8d:e5:29:68:99:e0:53:48:57:
         9d:19:65:b5:50:a0:d6:c7:59:33:1e:66:78:85:09:1b:9a:ed:
         9b:83:1b:4e:12:b8:88:b1:65:f3:81:61:04:a3:f8:e6:5d:f0:
         9a:86:16:bd:24:7e:b1:30:62:1a:76:29:ee:f3:b7:0a:b6:c7:
         a1:76:77:3f:f9:21:e7:1e:08:ef:f2:70:57:83:33:67:fe:0e:
         80:1b:8d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----