Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a323a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a323a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          j6kicf4aD6TPbdJIIVOTPLtANDJ5lEioQoSAFJLiHvo=
Subject key identifier:   15:B0:EF:1B:EE:74:2C:79:E9:31:D2:7D:F0:3B:94:31:24:66:80:E8
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       11DF764E2AB708E17987A2D060B372A0B4357DA8
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a323a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:39 +0000
ROA not before:           Tue 04 Feb 2025 18:06:39 +0000
ROA not after:            Tue 03 Feb 2026 18:11:39 +0000
asID:                     271935
IP address blocks:        2803:7a10:2::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:df:76:4e:2a:b7:08:e1:79:87:a2:d0:60:b3:72:a0:b4:35:7d:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:39 2025 GMT
            Not After : Feb  3 18:11:39 2026 GMT
        Subject: CN=15B0EF1BEE742C79E931D27DF03B9431246680E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:9b:ac:f9:e0:50:66:62:25:c5:3e:78:cf:e7:
                    2b:62:b3:24:24:81:d4:2f:bb:dc:54:4c:62:a9:7e:
                    e3:1c:c9:02:eb:46:c5:73:4e:5b:aa:9a:2c:b3:e0:
                    7a:22:e3:15:fe:55:f0:14:00:92:bb:f9:5b:f6:26:
                    f5:ac:a1:e0:8c:a2:93:30:7f:e8:5a:d9:60:e1:d2:
                    d5:bd:81:48:38:19:9e:9a:a0:1f:c8:f4:84:64:40:
                    4a:07:7a:53:10:ba:51:f8:16:fd:aa:28:68:e5:68:
                    94:ac:86:d1:7e:dc:a0:55:54:ca:c0:27:a1:33:66:
                    ff:61:03:e2:69:58:01:aa:6e:ae:2f:a4:6d:58:d1:
                    0a:ca:39:d9:72:d2:14:a4:91:7c:8b:d9:a2:c4:74:
                    79:37:60:90:cf:4b:c1:11:33:f8:fa:ba:3d:b5:e9:
                    d4:77:f4:7c:9c:bd:4f:24:02:ee:5d:ff:5b:cb:c7:
                    95:ae:f0:c9:82:18:ad:4c:da:b4:94:59:96:50:61:
                    e6:07:72:c5:af:ca:cd:5e:6e:29:8f:3a:40:24:7d:
                    de:f8:d0:8e:7b:35:ec:6e:dc:ef:4d:3b:ea:8a:9e:
                    d5:d3:65:33:3d:cb:f8:71:c2:2c:84:07:a4:be:1b:
                    9d:0c:7d:72:e2:30:db:65:7d:7e:14:0b:41:14:dd:
                    d1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B0:EF:1B:EE:74:2C:79:E9:31:D2:7D:F0:3B:94:31:24:66:80:E8
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a323a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:44:ac:30:ce:2c:f9:9c:1a:b3:2c:82:ed:96:1e:9a:53:61:
         47:6c:c8:78:0b:af:51:ad:7a:b1:95:e9:97:b7:5c:f4:1a:49:
         38:a8:7b:5d:7c:dc:db:5d:7d:ce:29:f9:31:12:02:68:c7:0a:
         20:34:70:dc:04:97:f9:c9:23:3a:a0:1f:50:df:2b:49:97:3e:
         d7:50:c9:19:8d:a6:79:e9:f2:89:c4:cf:84:63:9e:e2:7c:60:
         5d:cd:18:5c:e5:0f:e3:dc:d0:01:41:23:07:dc:f0:73:1e:02:
         a3:e3:c9:5a:30:2e:0a:4e:dd:b0:97:73:9c:5e:d5:aa:d9:29:
         3a:13:61:90:4c:26:c6:71:8a:a1:5a:99:95:92:4c:4c:eb:07:
         c1:30:2a:0f:ea:6d:ad:17:9e:28:ad:eb:91:9b:5e:78:06:f4:
         cb:10:2d:6a:63:65:2f:0d:44:5a:6f:31:d1:0e:5c:fe:35:0a:
         28:37:cc:3d:8d:75:31:cf:7d:7f:86:60:90:71:17:8e:27:70:
         d1:ef:95:d7:1b:75:6a:36:bb:27:16:b8:52:50:14:45:c2:fb:
         59:c2:a1:7c:7f:32:08:6f:90:97:72:08:55:79:0b:e2:47:a0:
         7f:08:c8:08:6e:cb:a9:aa:c5:98:b6:0f:02:84:7d:c7:c2:8d:
         33:39:7e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----