Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a653a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a653a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          XgQzZ36COfhmqiLomWAPvtkHyjg2gb1oKhZuYiS9L8o=
Subject key identifier:   E4:14:1D:48:AF:55:1C:39:9E:FA:AC:E9:4A:6B:56:CA:55:C9:CA:86
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       1E0790837A457B21F44911480B5BDE321E509530
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a653a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:38 +0000
ROA not before:           Tue 04 Feb 2025 18:06:38 +0000
ROA not after:            Tue 03 Feb 2026 18:11:38 +0000
asID:                     271935
IP address blocks:        2803:7a10:e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:07:90:83:7a:45:7b:21:f4:49:11:48:0b:5b:de:32:1e:50:95:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:38 2025 GMT
            Not After : Feb  3 18:11:38 2026 GMT
        Subject: CN=E4141D48AF551C399EFAACE94A6B56CA55C9CA86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:16:9b:5b:cf:3b:2a:ae:2c:2c:8f:0e:cd:69:
                    15:a1:17:9b:98:f7:9f:fd:b1:cd:fa:bd:64:3f:68:
                    71:18:c5:b2:ab:49:4a:e9:6c:56:1b:99:b6:30:14:
                    23:a8:cc:a4:f0:5c:45:ed:a7:2c:6c:1c:19:65:c0:
                    06:40:a2:d3:6a:a9:d8:a3:0b:fb:f1:bc:5c:e5:ac:
                    5c:f4:c0:1b:9a:87:8f:cc:7d:12:1a:10:d6:ce:ba:
                    34:eb:82:4a:25:6d:03:c2:3b:a2:07:aa:bb:33:5f:
                    06:7b:13:50:98:f8:c8:50:92:bd:9e:97:b5:c6:c8:
                    67:f8:1f:1a:10:f0:48:84:a5:5d:44:55:b2:b6:7a:
                    ce:54:e7:6a:a1:bd:85:49:03:33:ca:60:1e:e4:fe:
                    92:34:2d:e7:7a:ee:fc:e4:d0:e4:53:3d:8f:26:b1:
                    70:6f:54:9f:b5:80:00:97:9a:9d:db:f3:c3:c5:51:
                    6c:35:a2:77:76:61:c9:60:dd:0d:ae:33:58:e7:2c:
                    c7:f4:fb:81:1a:29:e1:5c:61:86:38:81:9d:4b:f2:
                    22:c9:fa:f8:c6:dc:fd:54:d6:ef:cb:88:ac:dd:97:
                    59:d9:7f:f9:c2:6f:fc:80:69:3e:fd:55:09:6a:8e:
                    66:db:4f:47:09:06:2b:7c:fa:2e:88:19:1c:94:b3:
                    a3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:14:1D:48:AF:55:1C:39:9E:FA:AC:E9:4A:6B:56:CA:55:C9:CA:86
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a653a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:fe:61:22:16:81:24:24:ac:69:c1:9c:20:c9:db:24:3d:7f:
         b7:ea:71:96:9c:d2:62:8b:80:bb:38:ac:b3:86:47:b8:a6:fd:
         d3:c7:60:73:22:56:bc:e5:a1:a3:60:a1:51:89:14:24:0f:59:
         b1:6d:7f:3f:43:b3:af:f6:91:b4:95:11:15:98:9c:f2:7f:b0:
         dc:06:a1:69:11:b1:a6:4a:23:99:bb:61:a4:7f:70:f0:69:0c:
         cb:dc:85:03:0d:94:c8:61:9d:50:58:87:dd:bb:d8:2e:fa:ae:
         26:df:d9:fb:f6:6a:98:08:5a:7b:38:af:ce:b8:b8:c2:66:aa:
         7b:41:2d:1b:f4:24:15:71:52:e5:25:cb:a6:63:e7:ba:67:ec:
         96:3f:03:f8:6c:97:21:0f:2e:24:34:c8:9d:66:28:2f:bc:ba:
         b0:c8:7d:a1:ab:f2:fd:6c:40:4b:87:ea:99:97:f1:22:a2:3a:
         25:2a:d5:74:c7:0f:ec:5e:12:39:01:fd:16:66:fa:94:3a:8d:
         31:39:fd:85:f7:dc:82:75:42:50:80:20:b7:f0:38:74:f2:0f:
         69:f3:bd:04:56:20:6f:50:82:78:87:a8:14:59:49:06:47:6c:
         6e:05:6c:46:8f:aa:64:25:4d:ee:bb:d5:cd:bc:d7:0f:57:18:
         4e:0b:8a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----