Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/323830333a653439303a3a2f33322d3438203d3e20323732383230.roa
File:                     323830333a653439303a3a2f33322d3438203d3e20323732383230.roa (raw, json)
Hash identifier:          76vu9e2Cci/216D3HEMm4ozZKsawF1PU9UJsKNpSAY8=
Subject key identifier:   A3:47:4D:E6:81:A9:87:02:DE:8D:E8:DC:DD:8B:FE:20:A9:92:D0:4D
Certificate issuer:       /CN=EB552741007C26DD44D8C729BBDB1C5406F88B63
Certificate serial:       613676C61120B123C399B425F85AB728B01DBA60
Authority key identifier: EB:55:27:41:00:7C:26:DD:44:D8:C7:29:BB:DB:1C:54:06:F8:8B:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB552741007C26DD44D8C729BBDB1C5406F88B63.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/323830333a653439303a3a2f33322d3438203d3e20323732383230.roa
Signing time:             Tue 04 Feb 2025 18:03:50 +0000
ROA not before:           Tue 04 Feb 2025 17:58:50 +0000
ROA not after:            Tue 03 Feb 2026 18:03:50 +0000
asID:                     272820
IP address blocks:        2803:e490::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:36:76:c6:11:20:b1:23:c3:99:b4:25:f8:5a:b7:28:b0:1d:ba:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB552741007C26DD44D8C729BBDB1C5406F88B63
        Validity
            Not Before: Feb  4 17:58:50 2025 GMT
            Not After : Feb  3 18:03:50 2026 GMT
        Subject: CN=A3474DE681A98702DE8DE8DCDD8BFE20A992D04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:6a:de:20:6b:5a:5f:6a:7f:7a:d6:2c:41:0f:
                    ed:8f:df:cc:32:e1:83:e6:1a:cc:6a:5f:2f:5c:16:
                    2a:56:fc:d2:24:99:b7:bc:1d:22:b8:9a:f6:73:e0:
                    a4:f5:ab:6f:9b:d6:8b:42:4a:63:6c:b3:87:9f:8c:
                    e1:99:8d:cb:fd:02:ad:fe:2d:ca:92:c6:50:fb:fc:
                    56:d4:7f:a3:cd:31:80:76:e7:f4:b3:55:8f:d9:c4:
                    6a:ad:7c:f6:ce:ff:91:79:32:42:e0:68:3d:bb:2b:
                    06:77:cf:fd:71:90:88:e2:d4:fa:b9:31:0e:ff:5b:
                    3c:24:ee:64:57:10:46:5c:3a:77:6e:54:e4:9c:d1:
                    4c:87:88:c4:ed:f3:65:6d:1d:67:0c:ce:6e:1b:e8:
                    20:1e:48:fc:2d:62:46:2d:44:0c:d7:64:2d:73:8b:
                    7b:83:e4:4c:9f:56:5b:49:71:8b:13:15:1f:3f:75:
                    f3:4b:53:a5:e5:1e:05:c7:46:e6:18:97:f8:38:a7:
                    c8:1e:38:04:f7:e6:43:7d:61:d9:92:2a:37:07:88:
                    85:82:fc:17:b1:b3:06:15:fb:51:fb:b0:13:51:02:
                    9a:1c:98:24:03:1e:91:24:a3:31:4e:16:2d:98:d1:
                    dc:0a:fa:0e:19:2a:7b:14:f5:a2:0b:20:ee:5d:a0:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:47:4D:E6:81:A9:87:02:DE:8D:E8:DC:DD:8B:FE:20:A9:92:D0:4D
            X509v3 Authority Key Identifier:
                keyid:EB:55:27:41:00:7C:26:DD:44:D8:C7:29:BB:DB:1C:54:06:F8:8B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/EB552741007C26DD44D8C729BBDB1C5406F88B63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EB552741007C26DD44D8C729BBDB1C5406F88B63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6798DA27B6F9CABE6D9BEA8941E3AEB01306E94DE132B8DCEAB78AA11FDAD969/0/323830333a653439303a3a2f33322d3438203d3e20323732383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e490::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:d6:3e:94:3e:17:f8:17:65:71:33:48:79:9b:84:ca:96:b0:
         80:ef:e5:0f:09:db:a8:bd:a5:7a:db:e4:a7:e8:c1:15:94:60:
         26:c2:ea:31:ee:20:46:4d:c7:c2:4d:3a:6d:e2:a4:d8:b7:9c:
         5f:fc:f3:b4:59:63:76:72:08:6a:d0:15:77:c0:3b:ec:44:e2:
         f1:db:84:fd:9a:db:d6:f9:8e:a3:c0:9b:8b:39:ad:68:16:88:
         a8:e4:7a:67:a8:bc:15:eb:a6:8a:d7:83:73:f8:f2:4b:a9:05:
         51:0f:e6:3b:dd:26:77:b6:dc:1d:82:38:22:26:a8:97:43:c1:
         cb:21:ca:8f:1b:f2:48:3d:19:33:28:8e:65:0a:f4:9f:2f:0c:
         68:3c:5b:6d:e2:9c:ac:0d:70:dd:f7:50:77:44:e1:ca:8a:06:
         ea:56:89:49:98:58:cc:b7:7e:5a:3e:84:2d:b0:33:74:fd:ef:
         ad:de:3a:2f:ee:62:ef:48:be:31:23:83:0b:e3:56:a1:f8:a5:
         dd:a1:90:ed:50:a2:7c:68:e4:f5:ed:81:ca:b0:f6:e9:fd:fc:
         c4:09:ac:d8:20:f5:9a:32:af:ed:b5:de:c6:4e:e9:1b:2e:06:
         3c:45:48:7d:7d:8e:cd:f7:bf:d9:32:ac:9b:f8:55:b6:c0:04:
         26:c8:cf:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----