Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/323830333a323363303a3a2f33322d3438203d3e203532343434.roa
File:                     323830333a323363303a3a2f33322d3438203d3e203532343434.roa (raw, json)
Hash identifier:          9dMrJ4n4SbQNZPKrI9zVNGYZpNpV9xPcLDMG3pbIj6w=
Subject key identifier:   97:66:79:83:07:76:19:7F:5A:EC:C5:BD:68:8F:D2:C2:5F:80:03:82
Certificate issuer:       /CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52
Certificate serial:       0BCBDB96424C70CFEC783EEAD8B987727786C0B2
Authority key identifier: EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/323830333a323363303a3a2f33322d3438203d3e203532343434.roa
Signing time:             Tue 04 Feb 2025 18:22:43 +0000
ROA not before:           Tue 04 Feb 2025 18:17:43 +0000
ROA not after:            Tue 03 Feb 2026 18:22:43 +0000
asID:                     52444
IP address blocks:        2803:23c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:cb:db:96:42:4c:70:cf:ec:78:3e:ea:d8:b9:87:72:77:86:c0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52
        Validity
            Not Before: Feb  4 18:17:43 2025 GMT
            Not After : Feb  3 18:22:43 2026 GMT
        Subject: CN=976679830776197F5AECC5BD688FD2C25F800382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:18:68:1c:20:48:1b:ac:18:fc:27:1a:a6:86:
                    f3:43:37:97:59:f4:eb:98:a8:c5:8a:d5:8a:8d:4c:
                    9d:68:70:3b:a3:c3:2d:c6:7d:46:f3:01:6f:04:df:
                    92:d6:87:aa:6b:4c:ff:cf:5f:11:a4:cd:73:69:1e:
                    8c:df:12:10:9b:d8:be:0f:f9:9f:bb:3d:e4:8d:10:
                    e8:06:09:85:ec:30:90:02:de:86:c7:8a:78:3e:b1:
                    e5:23:71:ec:32:0e:ea:88:6a:8b:34:f3:63:fd:18:
                    9d:9e:dc:f7:2d:91:4f:fd:b3:a3:09:8a:f6:45:7c:
                    41:68:d5:83:49:d2:7b:c3:f2:16:be:bb:b9:fc:fc:
                    a4:de:4e:6b:ee:7e:81:04:52:49:67:60:5c:a6:46:
                    5d:f2:69:d3:19:9d:eb:b8:b4:c3:95:a9:b9:8e:df:
                    32:d1:f9:f8:32:3d:76:22:a1:43:2e:0a:cf:64:e0:
                    53:0f:ae:f3:c4:e8:23:17:c7:f7:52:44:cc:fc:95:
                    c2:d1:4e:31:8b:ed:af:96:7a:5a:09:4b:f1:d0:b8:
                    fd:c5:44:3a:a3:47:5a:6d:46:43:67:d0:16:b9:0a:
                    6e:b6:5d:34:23:e3:6c:9e:41:77:8e:97:0c:71:8f:
                    9e:65:3f:4f:a5:43:5c:6a:1c:36:04:35:b0:88:1c:
                    43:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:66:79:83:07:76:19:7F:5A:EC:C5:BD:68:8F:D2:C2:5F:80:03:82
            X509v3 Authority Key Identifier:
                keyid:EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/323830333a323363303a3a2f33322d3438203d3e203532343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:23c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:21:e0:4d:3d:5b:7d:75:0c:23:51:3f:94:ca:08:55:91:af:
         ca:89:8e:bd:8b:ef:d9:e4:76:ab:58:0a:b2:c1:84:80:fe:30:
         f5:9d:ee:0a:74:d2:bf:b3:03:ed:e7:f6:3e:08:68:8e:9e:2e:
         fc:08:d1:ca:06:58:77:ae:da:85:2c:5c:c1:d7:41:7e:32:5c:
         e0:95:05:55:d9:9f:a8:06:de:87:07:6c:03:da:15:a8:91:84:
         c3:91:6a:b5:f8:2d:7a:d8:c2:5e:82:5a:5d:4c:63:69:54:7c:
         92:e6:bf:3e:f7:63:d6:bf:23:fd:90:27:50:46:62:18:f4:7f:
         3a:2f:e9:c0:1a:96:13:49:74:8b:72:6b:2a:1e:4b:64:11:de:
         b8:74:8f:c6:d1:07:da:0d:e0:31:b6:0e:59:03:e8:b6:f1:bf:
         cd:9a:e8:4e:d1:64:34:60:99:bb:a7:a6:b4:7f:47:c9:1d:a2:
         09:85:7d:65:e8:d9:43:b2:5a:06:05:de:ae:e0:d7:3d:10:24:
         08:96:42:86:67:fc:a0:27:3a:01:3e:12:09:f6:be:e9:0a:8a:
         8e:61:20:93:86:73:50:ea:26:71:ec:7d:43:9f:5a:7d:9e:8c:
         8b:db:f3:29:6a:98:5c:cf:61:df:cd:05:a9:11:e6:8e:1a:a1:
         12:85:03:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----