Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a663a3a2f34382d3438203d3e20323731393335.roa
File:                     323830333a376131303a663a3a2f34382d3438203d3e20323731393335.roa (raw, json)
Hash identifier:          Xfc3CqGjB7xMYq5WA+J0m8DOZ9tsHjTrQ6nGnN3iEYk=
Subject key identifier:   4F:86:78:1C:96:53:17:89:E3:41:F1:79:21:CC:15:D8:45:7E:92:EA
Certificate issuer:       /CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
Certificate serial:       29FD0EC2E4B32B1C078F51C20D8BB563998C41EE
Authority key identifier: 97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a663a3a2f34382d3438203d3e20323731393335.roa
Signing time:             Tue 04 Feb 2025 18:11:36 +0000
ROA not before:           Tue 04 Feb 2025 18:06:36 +0000
ROA not after:            Tue 03 Feb 2026 18:11:36 +0000
asID:                     271935
IP address blocks:        2803:7a10:f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fd:0e:c2:e4:b3:2b:1c:07:8f:51:c2:0d:8b:b5:63:99:8c:41:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9713B9074EC835F3B2C98A3390BFC31D779B7096
        Validity
            Not Before: Feb  4 18:06:36 2025 GMT
            Not After : Feb  3 18:11:36 2026 GMT
        Subject: CN=4F86781C96531789E341F17921CC15D8457E92EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:43:4d:52:ed:79:f6:7b:d5:69:c3:04:01:b2:
                    cf:e8:cb:6d:5a:05:fd:68:c5:3d:2f:3c:d6:83:1e:
                    03:bd:36:e1:6a:3a:20:e9:69:3c:49:ce:11:d8:5f:
                    a6:bb:37:07:c6:73:ed:46:62:d3:a3:c8:0d:ed:19:
                    7d:3e:38:71:d0:23:be:7e:f3:88:8b:d7:a3:5b:8e:
                    ac:09:b4:0f:ca:6f:de:ac:4a:0d:3f:06:ad:ae:41:
                    25:8f:75:25:fc:6c:c0:d8:09:5f:54:c3:94:49:04:
                    a5:bb:69:1a:c2:45:5b:e9:a7:42:53:4b:f9:38:49:
                    b6:1f:c3:dc:6e:dd:b8:c0:f0:22:50:36:f4:25:4f:
                    c5:ef:dd:54:70:87:6f:ce:88:da:a6:c7:c2:96:17:
                    6a:65:ea:cb:a1:ed:a0:5c:b1:22:cc:f5:d9:7b:cf:
                    e9:8d:6f:3b:39:9c:7a:e7:c5:10:38:ad:d3:c0:e1:
                    3f:fb:8a:38:04:22:d5:bb:3f:19:0b:a6:47:fe:bc:
                    71:5c:ed:26:69:05:0f:b8:70:32:cf:fb:db:e4:ff:
                    01:cd:51:52:25:30:1e:d0:d3:03:73:4a:92:ac:04:
                    6e:39:c2:ae:ba:56:37:97:45:59:56:d8:89:03:2f:
                    78:7e:e4:b0:9b:39:f3:42:6e:f2:3c:98:9c:f7:70:
                    fc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:86:78:1C:96:53:17:89:E3:41:F1:79:21:CC:15:D8:45:7E:92:EA
            X509v3 Authority Key Identifier:
                keyid:97:13:B9:07:4E:C8:35:F3:B2:C9:8A:33:90:BF:C3:1D:77:9B:70:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9713B9074EC835F3B2C98A3390BFC31D779B7096.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7149D67F42F4530203CB8205A0CD95B7F7412D5F2608F416707418C2F5EE1F71/0/323830333a376131303a663a3a2f34382d3438203d3e20323731393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a10:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:7d:0d:21:5b:69:6d:25:e6:46:2b:9e:e1:1b:c7:4c:1a:22:
         f0:a1:be:e1:b3:6e:28:3a:73:40:a6:87:f8:c3:41:1e:90:45:
         db:e5:24:29:26:d7:78:81:f0:1a:b7:81:00:b5:07:80:b9:eb:
         3a:13:9e:40:bf:18:ff:7a:6e:e2:e6:77:84:ce:29:ae:f5:34:
         24:c4:c3:06:f6:61:55:30:79:8b:79:34:43:ae:dc:ad:08:d9:
         26:25:c7:91:93:3d:c2:3e:d5:a6:d8:44:19:b1:0f:53:a3:78:
         ce:0e:56:c0:80:48:e2:18:28:3f:e5:6e:8b:36:98:8e:96:81:
         d4:f9:51:a3:4b:20:4e:75:03:22:a2:03:b6:d7:bc:91:8c:f7:
         99:6d:ca:e7:fe:82:6b:f8:ef:87:94:99:be:99:5c:cc:a5:9a:
         ba:de:cd:9e:d1:b4:76:85:81:9c:80:a7:7b:08:03:82:93:0e:
         43:13:e7:67:df:ac:10:12:f7:29:dc:9f:d7:c4:67:c7:27:a2:
         8f:8f:ed:1d:d7:de:b6:da:64:b3:0d:0f:00:fb:6d:b3:98:17:
         a3:4d:9a:f3:32:a7:3b:75:8e:49:98:ed:9d:2d:55:49:35:a1:
         fa:e6:03:ee:4f:d0:22:83:a6:e5:65:c6:f1:f6:7f:f2:da:00:
         ba:27:90:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----