Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/323830333a343638303a3a2f33322d3334203d3e20323633323232.roa
File:                     323830333a343638303a3a2f33322d3334203d3e20323633323232.roa (raw, json)
Hash identifier:          DaE8W/6FEWo3VdV4spgySDoYZUALpQ6OV61CyTdfy0Y=
Subject key identifier:   36:DA:69:2F:2D:73:07:75:51:76:FA:EE:B1:48:2B:A1:1B:C8:C2:61
Certificate issuer:       /CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
Certificate serial:       610FDE28FF9E44BE8B1B80FFDEB04FBAC06A11DE
Authority key identifier: C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/323830333a343638303a3a2f33322d3334203d3e20323633323232.roa
Signing time:             Tue 04 Feb 2025 18:36:14 +0000
ROA not before:           Tue 04 Feb 2025 18:31:14 +0000
ROA not after:            Tue 03 Feb 2026 18:36:14 +0000
asID:                     263222
IP address blocks:        2803:4680::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:0f:de:28:ff:9e:44:be:8b:1b:80:ff:de:b0:4f:ba:c0:6a:11:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6229CE54CD0362E52304F71C7799C3AD2B2EFD3
        Validity
            Not Before: Feb  4 18:31:14 2025 GMT
            Not After : Feb  3 18:36:14 2026 GMT
        Subject: CN=36DA692F2D7307755176FAEEB1482BA11BC8C261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:a9:66:7d:14:9f:55:ea:93:f5:4f:ef:ea:
                    00:fc:09:5a:50:d3:10:52:6d:50:88:bf:34:e1:ae:
                    1d:4d:db:b2:1e:49:02:4a:fc:e8:b4:9d:26:88:4c:
                    fc:1d:cb:21:a4:90:b3:71:08:9c:25:e6:56:1c:ab:
                    74:db:17:75:2e:97:6b:7e:96:c9:54:15:c6:c4:62:
                    0c:9b:86:1b:47:7c:6e:71:2a:cc:62:0e:93:bf:da:
                    a3:23:0c:99:8e:85:ce:e6:19:2c:72:f0:dc:f2:f0:
                    f4:80:b5:d8:75:29:67:89:9a:e8:b2:02:e5:3c:0c:
                    26:6e:a3:fd:10:7d:a5:a2:42:72:88:19:72:b2:6d:
                    06:13:52:e9:19:ef:63:14:ad:74:12:e3:5a:dc:3f:
                    e8:f2:c9:b4:69:bf:5d:df:f8:fc:76:88:9e:ff:d9:
                    d1:2c:8a:1d:92:db:c1:6e:5d:d5:53:29:cb:d6:ac:
                    39:52:46:b7:e5:cf:8b:d9:5f:10:d0:7c:1e:2a:fa:
                    fd:1a:60:87:c8:d8:16:c0:c5:24:4c:23:49:88:47:
                    ca:d1:ae:fe:f2:ca:91:4b:10:5d:a1:2a:b6:51:46:
                    53:d2:f9:8b:2a:d7:dd:0f:5c:fd:0d:89:df:27:4f:
                    09:7b:42:c9:fe:e3:2a:ec:c4:b8:6a:b8:de:93:58:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DA:69:2F:2D:73:07:75:51:76:FA:EE:B1:48:2B:A1:1B:C8:C2:61
            X509v3 Authority Key Identifier:
                keyid:C6:22:9C:E5:4C:D0:36:2E:52:30:4F:71:C7:79:9C:3A:D2:B2:EF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C6229CE54CD0362E52304F71C7799C3AD2B2EFD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/75D37687B4EBDCF4259823193039D5B4B9D107FC311F331CBBEAE23511E430EF/0/323830333a343638303a3a2f33322d3334203d3e20323633323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4680::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:61:6d:d1:df:76:82:88:87:8b:7e:08:c8:2f:1b:db:ad:ea:
         57:79:12:ce:71:9c:9b:3c:c1:76:67:46:4b:75:a4:7f:d7:4d:
         79:c0:f1:87:f3:9a:98:70:30:97:73:fc:ae:8c:b9:2a:9b:88:
         a1:48:cd:50:be:bd:d6:55:72:ba:1f:94:00:c3:bc:2f:3c:d0:
         9c:ff:59:18:86:79:7d:a2:7c:91:9c:d4:ff:2c:43:33:a9:7a:
         f9:fe:cd:a5:fd:69:ac:a2:a3:f7:48:c5:e5:45:a2:90:9f:b4:
         ef:64:71:39:6f:17:94:ec:78:74:75:21:b2:0d:f5:19:4f:48:
         50:79:5d:45:c9:49:75:b9:f3:93:9a:f6:8c:89:d1:b3:80:95:
         57:9e:e4:3e:f8:d3:b2:97:3a:1d:ce:27:9f:4c:94:ed:cb:ab:
         ce:56:76:b7:f0:a5:06:82:39:42:30:5e:83:93:45:7b:bf:55:
         5b:f7:fd:7e:57:15:10:1b:b4:89:f1:f4:a5:4d:a2:e9:65:2b:
         43:ad:f2:77:b1:f5:84:88:73:26:56:6a:58:bb:0b:7f:d2:60:
         b7:5f:c2:89:e8:3c:11:7f:3b:05:5c:95:e7:4d:bc:94:dc:8f:
         0e:7f:db:7d:23:e5:be:5d:c0:2a:67:5d:e9:5d:4c:0f:bb:17:
         61:c1:7d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----