Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/323830333a643863303a383030303a3a2f33342d3334203d3e20323634373837.roa
File:                     323830333a643863303a383030303a3a2f33342d3334203d3e20323634373837.roa (raw, json)
Hash identifier:          9iLaVJbC35T+qNw6dzv963vw+VrVQDKeXu0rT96I0s4=
Subject key identifier:   17:35:3C:70:56:F0:B2:70:E1:6A:62:FD:E4:F0:F0:32:E1:30:6E:31
Certificate issuer:       /CN=2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88
Certificate serial:       7B8507AC3434B35DE7C0963EB60AF0FADC879258
Authority key identifier: 2E:65:CE:6B:F0:A7:A6:D1:1D:47:18:FA:A6:37:B0:8C:3B:59:2F:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/323830333a643863303a383030303a3a2f33342d3334203d3e20323634373837.roa
Signing time:             Tue 25 Feb 2025 12:30:00 +0000
ROA not before:           Tue 25 Feb 2025 12:25:00 +0000
ROA not after:            Tue 24 Feb 2026 12:30:00 +0000
asID:                     264787
IP address blocks:        2803:d8c0:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:85:07:ac:34:34:b3:5d:e7:c0:96:3e:b6:0a:f0:fa:dc:87:92:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88
        Validity
            Not Before: Feb 25 12:25:00 2025 GMT
            Not After : Feb 24 12:30:00 2026 GMT
        Subject: CN=17353C7056F0B270E16A62FDE4F0F032E1306E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e1:43:d7:e7:20:c6:cb:e5:d9:8d:1f:92:c1:
                    24:ec:c0:93:e0:e2:96:21:f3:31:31:87:8a:7b:57:
                    77:fa:2f:02:b5:9c:b1:7a:ff:29:3c:f5:23:35:59:
                    bd:85:4a:0f:e9:d0:f0:07:f5:f7:ef:ad:ab:3f:e1:
                    12:fd:9e:ff:40:fb:5d:92:e1:98:bc:3e:7e:4b:28:
                    5d:64:eb:91:a2:de:0a:6b:5c:16:32:72:a5:f1:ea:
                    de:d9:af:50:2b:85:22:e6:f5:2f:c6:93:06:77:32:
                    1e:36:22:e5:90:11:bf:ea:60:90:78:71:08:d3:93:
                    32:91:d6:d5:1a:ed:52:89:da:56:69:75:b5:1f:a8:
                    52:13:2c:a1:ef:9d:1b:1d:31:6f:66:56:fa:0e:d9:
                    5d:e0:ce:9c:ae:79:24:f1:a1:35:49:4c:71:8c:a7:
                    2f:c7:52:55:5f:7c:fd:17:46:67:05:7a:7e:2d:0c:
                    67:fe:3e:e7:9f:df:56:8c:7c:3d:f5:18:28:6b:8d:
                    d1:c9:3f:d3:06:53:98:c8:7f:33:f9:42:46:13:b2:
                    f6:f4:f9:94:27:df:3e:e7:15:84:49:ba:6d:8b:9e:
                    5f:64:2a:a8:e2:af:23:87:41:25:b5:17:a3:c7:ea:
                    4d:5b:a5:58:97:65:ba:e5:bc:21:fc:b1:47:62:c7:
                    f5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:35:3C:70:56:F0:B2:70:E1:6A:62:FD:E4:F0:F0:32:E1:30:6E:31
            X509v3 Authority Key Identifier:
                keyid:2E:65:CE:6B:F0:A7:A6:D1:1D:47:18:FA:A6:37:B0:8C:3B:59:2F:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2E65CE6BF0A7A6D11D4718FAA637B08C3B592F88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/81974DCAD53278941C0C83F19FBC6EFA3DC0418D5CBF53CCDA63024298B3D382/0/323830333a643863303a383030303a3a2f33342d3334203d3e20323634373837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d8c0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0c:1b:6e:21:33:82:33:ce:63:97:8d:c2:97:f0:e9:ee:65:23:
         05:35:d4:35:89:ba:83:27:0f:b4:d5:7d:ec:04:91:83:fb:23:
         5b:69:d2:b9:89:2a:2d:74:e9:41:d7:84:3a:21:d6:ec:6e:d0:
         e9:7b:c4:62:1a:2e:d6:d3:ed:a8:7e:60:a6:0f:8e:1b:59:9b:
         2a:ce:d4:90:e9:03:ef:90:25:f6:2b:77:2d:a4:65:bb:a7:ea:
         43:a3:7c:a6:19:f0:57:21:0f:11:b2:a9:b3:65:92:6b:6c:ff:
         b1:e5:0d:51:2b:ce:bb:58:4f:54:1f:7d:03:f5:02:ac:08:36:
         e5:6a:e0:5d:31:d8:a9:99:d2:75:ac:49:9c:cc:21:8c:bd:2c:
         2f:05:b0:bc:30:96:c0:b9:c1:df:87:d1:89:a7:74:89:66:10:
         8f:2d:c5:b8:7e:a0:27:ec:74:bc:3c:c1:74:4c:41:73:55:b4:
         23:87:80:f1:d7:bd:0f:26:e9:aa:79:41:c1:96:43:54:97:60:
         36:84:95:19:72:79:78:24:42:74:6f:20:03:9e:da:fa:4e:79:
         38:61:19:71:e1:20:ff:49:7f:39:50:8a:ae:cb:21:7a:c5:bb:
         11:0a:13:ad:d1:13:d6:c4:4f:5a:a8:a9:ec:00:75:fd:fa:48:
         61:72:48:5a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----