Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383730303a3a2f34342d3438203d3e20323732383036.roa
File:                     323830333a636436303a383730303a3a2f34342d3438203d3e20323732383036.roa (raw, json)
Hash identifier:          Fm9NzzmUoWTqdlv80kzvWNSFdSrqbsC6I4d9E0iWIKk=
Subject key identifier:   1B:CA:F9:5B:74:1E:2E:56:2D:3D:A4:95:68:6B:C6:68:04:AA:91:4F
Certificate issuer:       /CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
Certificate serial:       12F14E1DD823CBF7EEF627C1CE478139EC785523
Authority key identifier: 0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383730303a3a2f34342d3438203d3e20323732383036.roa
Signing time:             Fri 31 Jan 2025 14:05:00 +0000
ROA not before:           Fri 31 Jan 2025 14:00:00 +0000
ROA not after:            Fri 30 Jan 2026 14:05:00 +0000
asID:                     272806
IP address blocks:        2803:cd60:8700::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f1:4e:1d:d8:23:cb:f7:ee:f6:27:c1:ce:47:81:39:ec:78:55:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ADD9138FE0F6808B0998526771129BA3CDF7223
        Validity
            Not Before: Jan 31 14:00:00 2025 GMT
            Not After : Jan 30 14:05:00 2026 GMT
        Subject: CN=1BCAF95B741E2E562D3DA495686BC66804AA914F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:55:46:22:0b:f8:d0:1b:67:b4:5e:d9:98:fc:
                    6b:b4:a1:76:68:73:bc:dd:95:34:c4:34:60:e6:8d:
                    1d:b0:6b:64:b0:e2:27:4d:f9:9e:42:fe:11:42:55:
                    ff:03:99:6e:9b:fc:9e:71:20:81:b0:1e:20:b8:5d:
                    36:a3:b8:e9:90:53:26:86:6c:93:9b:a8:c2:86:ac:
                    59:36:fc:f7:05:d1:0a:f8:d1:1f:13:e2:2c:1d:e6:
                    94:7a:d2:0e:d2:df:c6:c4:56:dd:8f:c4:47:db:5a:
                    59:b1:fd:e4:69:8e:3a:9c:29:e8:5f:7c:00:7c:41:
                    a2:c3:5e:f7:4b:69:b8:99:63:45:d7:e4:7d:c2:4d:
                    7c:53:0b:29:a6:dd:ff:37:8e:e6:b0:fc:54:b5:ee:
                    85:62:76:65:92:97:71:5f:fb:31:63:bb:95:35:93:
                    d1:ef:24:cc:a8:ee:14:14:47:6e:c8:07:3d:5f:73:
                    ce:4a:c4:42:8b:bc:3a:b3:0f:f7:3e:36:fb:49:a7:
                    45:92:08:ed:6b:7d:12:39:69:97:5d:48:04:0d:03:
                    17:2a:09:9f:f9:90:05:ee:59:29:46:51:1e:dc:c5:
                    91:a4:fe:d6:cb:c0:3f:5f:09:eb:fc:15:f3:f9:39:
                    ab:2a:0a:e0:a1:81:b3:03:d3:d3:56:74:bf:dd:6e:
                    c3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CA:F9:5B:74:1E:2E:56:2D:3D:A4:95:68:6B:C6:68:04:AA:91:4F
            X509v3 Authority Key Identifier:
                keyid:0A:DD:91:38:FE:0F:68:08:B0:99:85:26:77:11:29:BA:3C:DF:72:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0ADD9138FE0F6808B0998526771129BA3CDF7223.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6B5506D811E5DABB0D1D15467ECA820A63E49E57E2158BAF68C5950C9F828BB6/0/323830333a636436303a383730303a3a2f34342d3438203d3e20323732383036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cd60:8700::/44

    Signature Algorithm: sha256WithRSAEncryption
         3b:27:e4:c0:9d:79:a3:6a:d6:72:23:57:6a:bc:13:4a:77:85:
         2a:5b:47:20:d7:0e:16:2a:04:59:67:a6:b0:d8:da:64:a1:9b:
         99:8e:71:b6:5e:34:b4:2a:74:9b:dc:02:5e:94:5e:5d:65:a2:
         89:1c:0e:5d:21:e7:00:46:6d:3a:39:a0:14:09:7b:88:52:03:
         30:4b:41:8e:f7:40:a5:d8:f6:33:54:8c:c1:f8:9f:d3:46:ee:
         0a:aa:51:e9:d2:59:0f:cf:f5:74:1b:b8:7c:0f:75:a4:76:77:
         4a:ac:8e:60:57:23:5c:22:fd:07:02:62:f4:6e:43:9b:69:3f:
         fc:6f:33:f6:87:15:02:76:55:f3:8e:41:9f:21:f1:f7:5c:2a:
         5d:1c:64:5c:94:f8:2d:80:eb:28:58:c0:45:11:90:5c:17:2b:
         70:b0:39:88:e8:0c:d8:e8:b7:96:90:1d:d0:88:d2:e1:91:84:
         a2:98:b7:8a:70:f1:43:1c:d7:cf:48:46:de:59:14:a3:27:a7:
         e6:92:5c:18:4e:c4:f7:9a:e9:eb:a1:cd:7d:10:14:bb:70:f5:
         88:38:66:5a:82:1d:84:34:eb:4c:a0:0b:39:93:7b:40:e0:d4:
         d7:fc:09:4a:d9:d1:5f:6b:82:59:dd:5f:97:e2:1e:91:19:ae:
         f4:1a:31:fb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----