Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a393a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a393a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          LX1PAd1Tp8s4Uty4bMR2SruwlIhrr32gkbyKMCvb/pA=
Subject key identifier:   1F:DC:C0:64:DB:FA:06:27:C4:F5:97:E6:10:A4:35:B4:02:A5:65:10
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       3679470B0754DC4D9439C884FA6C53F8A3DC4ED2
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a393a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:39 +0000
ROA not before:           Tue 04 Feb 2025 18:06:39 +0000
ROA not after:            Tue 03 Feb 2026 18:11:39 +0000
asID:                     271935
IP address blocks:        2803:7a10:9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:79:47:0b:07:54:dc:4d:94:39:c8:84:fa:6c:53:f8:a3:dc:4e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:39 2025 GMT
            Not After : Feb  3 18:11:39 2026 GMT
        Subject: CN=1FDCC064DBFA0627C4F597E610A435B402A56510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:80:9d:5a:77:01:98:a6:f1:d4:11:eb:7d:a6:
                    3f:f8:1d:ee:3e:d9:c3:f2:c1:f5:bd:c5:56:91:b9:
                    67:ea:0a:39:34:99:69:b0:7b:79:0e:f6:c7:df:07:
                    8d:9f:c1:27:ec:94:3d:b4:32:34:b5:38:a2:ad:18:
                    82:33:8d:70:73:24:d2:a4:39:da:1b:2b:25:40:99:
                    4d:2e:b6:df:02:b0:82:c5:23:9e:fb:b0:1a:05:22:
                    cd:e5:d2:a7:b0:d0:90:18:78:af:d2:63:d5:d9:a8:
                    c3:5b:a5:c1:1f:2b:89:b5:91:17:19:60:1c:a7:cd:
                    65:76:8e:5c:66:08:cc:47:4d:ae:e5:eb:e1:6a:7c:
                    56:ef:56:3d:6d:bb:2b:f3:ed:71:c3:95:48:b4:27:
                    86:2e:58:4d:90:af:fc:6c:7a:40:6c:5e:0e:b1:58:
                    87:8d:57:61:6c:38:aa:63:96:46:7f:cb:f1:08:97:
                    81:f0:21:c7:ff:4f:30:c6:55:75:0e:da:34:2d:89:
                    e9:ee:4d:72:21:35:7c:3f:c9:a9:1c:0c:f0:9f:3f:
                    f6:95:66:7d:a7:f8:a1:cb:2d:af:e9:79:86:6b:90:
                    d9:a4:66:5b:45:22:97:5e:41:ba:dd:2a:8f:09:72:
                    18:53:91:07:ea:47:10:9f:cb:b3:10:ff:83:46:85:
                    87:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:DC:C0:64:DB:FA:06:27:C4:F5:97:E6:10:A4:35:B4:02:A5:65:10
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a393a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:0f:e8:00:4f:87:d1:15:eb:22:00:52:0a:65:67:b4:ad:d8:
         a0:71:22:b0:a8:52:ba:c7:4d:82:15:07:69:ee:91:b0:7d:53:
         e3:e8:9c:0b:fa:05:a7:9c:c9:83:e1:79:6c:97:e2:83:4d:83:
         c3:62:7d:7a:0f:31:77:98:eb:33:81:69:c8:94:d7:d5:07:fe:
         f8:ec:80:ac:c4:2a:2e:74:49:b9:59:e7:ab:d3:02:7b:53:f0:
         30:db:50:68:a6:26:5c:fc:28:bb:e5:65:82:2e:77:7b:7e:bc:
         5f:8f:66:60:b4:21:e2:c7:07:81:5b:f2:d3:e7:f9:29:75:b7:
         99:ab:a1:0a:1a:b3:e8:eb:7c:b6:7a:ab:4f:f3:bf:ab:2c:4f:
         95:19:13:38:2f:59:e3:26:25:4f:af:85:9b:7f:4a:fc:fd:11:
         5e:53:1e:3f:fa:42:45:e6:bd:41:cd:1d:c4:49:8a:98:fc:89:
         b2:50:82:d6:90:1a:0f:40:87:bd:95:70:c7:f2:28:d8:8f:18:
         0e:a9:2e:de:bf:53:d2:d0:86:96:76:ea:b7:a7:45:84:38:be:
         4e:c3:2c:36:f2:0e:52:f5:38:ae:f3:99:0c:ae:90:ed:e8:a8:
         ad:36:1d:cb:7b:fc:8f:6b:9f:77:f8:bc:f3:d6:7a:1e:e6:4e:
         5c:80:5b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----