Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/323830333a366332303a3a2f33322d3334203d3e20323635383330.roa
File:                     323830333a366332303a3a2f33322d3334203d3e20323635383330.roa (raw, json)
Hash identifier:          svItLLj34NAGmigL8nWkFtvdANnOjXzqs6Tsr+6qkAo=
Subject key identifier:   99:89:AC:22:11:3A:87:E5:58:E8:35:8D:BF:C0:C0:1D:5B:38:74:82
Certificate issuer:       /CN=620CC3037E329EA6E6446036A75894936D28FD42
Certificate serial:       4F242DDBE117FF339DE969CF375F0D98C57AD9EC
Authority key identifier: 62:0C:C3:03:7E:32:9E:A6:E6:44:60:36:A7:58:94:93:6D:28:FD:42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620CC3037E329EA6E6446036A75894936D28FD42.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/323830333a366332303a3a2f33322d3334203d3e20323635383330.roa
Signing time:             Tue 04 Feb 2025 18:37:56 +0000
ROA not before:           Tue 04 Feb 2025 18:32:56 +0000
ROA not after:            Tue 03 Feb 2026 18:37:56 +0000
asID:                     265830
IP address blocks:        2803:6c20::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:24:2d:db:e1:17:ff:33:9d:e9:69:cf:37:5f:0d:98:c5:7a:d9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620CC3037E329EA6E6446036A75894936D28FD42
        Validity
            Not Before: Feb  4 18:32:56 2025 GMT
            Not After : Feb  3 18:37:56 2026 GMT
        Subject: CN=9989AC22113A87E558E8358DBFC0C01D5B387482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:00:03:e8:c9:77:47:38:b2:58:c9:96:e1:
                    dc:43:a6:d7:3f:06:0b:41:bb:57:b5:a2:67:21:7e:
                    bb:da:34:f0:8c:26:6e:55:9c:7b:11:da:69:d3:cb:
                    ef:b0:3f:2f:f1:19:c4:2f:f3:8b:d7:8f:ec:17:ce:
                    c9:5f:c8:5c:46:cb:9b:5d:72:28:a3:00:2c:5c:22:
                    cd:11:f1:1a:41:9e:df:19:cf:04:15:02:e3:c1:34:
                    76:c2:54:c6:75:f3:0f:b2:fd:b4:ce:70:a1:b5:60:
                    35:46:e0:fc:a2:6e:70:e7:c0:98:d6:fa:a0:70:65:
                    ee:8c:78:91:67:2f:a8:1e:ef:8e:e4:4f:a2:cb:5f:
                    a9:6d:4b:13:2e:90:4d:76:a8:c2:20:28:b6:7e:81:
                    79:8f:34:38:41:4b:2f:a5:99:85:85:f7:f2:a7:a7:
                    c7:b6:b9:74:cf:7e:bf:cf:47:50:2a:c7:f6:80:4b:
                    cf:f3:7c:26:0b:4a:dd:45:a2:16:0e:18:c3:84:b9:
                    b0:8b:e1:0e:2d:2a:67:8a:b5:c9:84:15:3a:dd:16:
                    2f:94:b5:8d:81:cf:e4:34:08:e6:ca:6a:fc:7e:dc:
                    97:f6:5e:fb:f7:7e:7e:b5:2b:00:e4:fa:6c:46:e5:
                    ed:33:d5:c6:54:14:a4:54:b0:d8:f5:7e:ae:61:32:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:89:AC:22:11:3A:87:E5:58:E8:35:8D:BF:C0:C0:1D:5B:38:74:82
            X509v3 Authority Key Identifier:
                keyid:62:0C:C3:03:7E:32:9E:A6:E6:44:60:36:A7:58:94:93:6D:28:FD:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/620CC3037E329EA6E6446036A75894936D28FD42.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/620CC3037E329EA6E6446036A75894936D28FD42.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6EFAD4BAACBD39CB4B2B11AF4650D5E6EB7E62D85A0E0AC85388E5102E2B598F/0/323830333a366332303a3a2f33322d3334203d3e20323635383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:a8:ea:e7:6b:57:bc:92:1f:92:70:3d:06:53:db:33:ea:40:
         23:82:f2:63:f9:d1:c7:59:ed:70:81:2b:0d:80:25:63:6c:28:
         6c:2e:02:5f:8a:ac:c8:d4:df:95:d8:ee:5e:e1:1f:de:ff:d8:
         14:a1:98:00:02:23:18:48:eb:8e:5b:7f:04:e4:c1:da:02:59:
         2d:67:5e:0c:70:df:1f:aa:01:b0:b5:39:98:19:cf:26:33:1f:
         1a:95:00:9e:d3:6a:81:ac:2f:93:04:5d:0c:51:85:a4:c3:8d:
         27:af:74:fb:7d:95:3b:00:8d:a1:1a:f1:3d:9e:bc:46:c1:e4:
         2c:e7:29:a1:22:32:d8:d4:3c:33:9f:b2:c0:f8:57:ca:07:a5:
         2a:39:00:ae:c7:21:31:52:df:a4:4a:56:d8:a0:8a:9a:de:fa:
         4d:dd:9d:84:5d:f0:fc:a8:25:70:61:54:ae:31:2f:46:a1:c3:
         eb:d8:d6:97:8e:11:23:9a:64:4e:2c:b3:f1:92:b0:24:98:d7:
         60:de:c3:fb:ef:2b:1c:ff:ec:d8:fd:9f:2d:da:65:df:78:69:
         38:54:66:53:2a:40:91:74:43:75:28:dd:97:c0:38:2b:2a:13:
         e2:aa:32:d2:9b:22:3d:ed:67:6d:c8:f3:ba:49:ac:e0:15:58:
         4c:74:64:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----