Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a643a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a643a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          ZbQNXZW/WFWXpwLagsUpdtvAFUBIjIqP7Q9okrNMc7E=
Subject key identifier:   C6:5A:C7:55:E4:DA:89:6F:A7:B5:5E:64:03:68:EC:33:DD:FA:95:EE
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       2A787DE17BB9910B9247C470A5DD36EF51423DC2
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a643a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:37 +0000
ROA not before:           Tue 04 Feb 2025 18:06:37 +0000
ROA not after:            Tue 03 Feb 2026 18:11:37 +0000
asID:                     271935
IP address blocks:        2803:7a10:d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:78:7d:e1:7b:b9:91:0b:92:47:c4:70:a5:dd:36:ef:51:42:3d:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:37 2025 GMT
            Not After : Feb  3 18:11:37 2026 GMT
        Subject: CN=C65AC755E4DA896FA7B55E640368EC33DDFA95EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:30:87:27:47:9d:2f:90:28:01:a1:a9:d8:88:
                    d8:ea:96:f3:d3:f0:66:37:9b:22:b5:92:56:8e:67:
                    69:03:ca:4f:38:92:1c:b6:34:97:9c:b2:b2:3a:7e:
                    16:04:fd:9a:92:b7:88:a2:11:a9:18:c4:a4:b0:eb:
                    e3:9b:df:c9:94:11:1d:90:3b:2e:a7:98:d2:c0:69:
                    9c:19:10:e7:9d:72:18:c5:15:fd:2f:1d:fd:7f:0a:
                    27:db:65:a8:6b:39:5e:2d:d4:48:50:b3:16:3b:7c:
                    b0:a3:09:3e:35:ab:df:89:80:18:78:80:26:ce:97:
                    25:71:12:78:fe:7c:3c:6a:f1:93:a2:31:cb:e4:4e:
                    9a:ed:be:7a:35:94:49:a6:34:b6:95:e1:ee:94:b5:
                    6b:a3:94:65:e4:13:31:4d:ab:13:c1:35:7b:6a:6e:
                    2d:bd:39:1c:82:3e:2d:79:ad:7c:12:77:29:cf:6e:
                    6d:73:fd:a4:11:a1:c3:67:ce:9c:c7:3b:bf:af:56:
                    91:a8:21:27:c9:81:2c:9e:b8:14:06:0c:8f:3f:2e:
                    73:1a:5f:e4:3b:fb:81:33:48:df:fd:9a:4c:5e:0f:
                    20:9c:3d:59:12:c8:d2:cf:c8:dd:80:3f:64:ee:ce:
                    d4:db:bc:79:de:c6:9b:93:90:3e:49:b9:b9:ff:77:
                    68:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:5A:C7:55:E4:DA:89:6F:A7:B5:5E:64:03:68:EC:33:DD:FA:95:EE
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a643a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:d::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:8a:8e:8f:58:66:ec:04:37:ff:ac:80:15:ed:97:49:20:e5:
         80:80:2a:36:3b:67:a6:09:38:5b:e5:47:9c:d5:5d:66:ea:93:
         0e:b5:30:dc:62:c1:bf:18:f6:4f:94:ca:da:0d:11:08:2e:c8:
         48:55:97:b2:95:44:b1:2f:89:c9:b4:fb:f9:d1:5a:11:a7:70:
         d3:02:8d:8f:71:7a:f2:cf:33:db:65:bb:fe:4c:b2:3a:4b:87:
         35:dd:48:49:fa:95:ab:a1:6a:29:41:89:46:71:f0:aa:b4:02:
         7d:45:73:37:fa:18:ca:c9:f6:0b:32:cb:dc:37:51:cc:62:9a:
         bc:db:c8:40:bf:15:09:dd:2a:c2:7e:17:94:b4:74:44:be:34:
         58:3a:0a:85:3a:d8:2f:8c:c2:96:04:95:0f:fc:38:41:92:f9:
         1b:ca:02:23:55:ed:58:a7:2b:1d:1e:b5:aa:9d:30:ed:2b:6c:
         26:6c:e6:65:28:5d:21:73:25:51:41:e3:23:81:2c:97:f4:24:
         ce:e5:dd:0e:a6:82:3c:01:2a:4b:59:46:03:f1:49:90:32:d1:
         19:06:f7:43:43:aa:92:47:d7:60:95:13:86:08:b2:a1:ff:47:
         f5:85:92:3d:d6:db:23:40:72:92:74:fd:2f:50:da:25:38:2b:
         dd:61:4a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----