Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/323830333a653432303a3a2f33322d3332203d3e203532343737.roa
File:                     323830333a653432303a3a2f33322d3332203d3e203532343737.roa (raw, json)
Hash identifier:          P9nHBf/BereL1IXdi3F2+3XtY5kvWLYvHr0x3FZM/M8=
Subject key identifier:   6A:F0:78:50:19:82:91:0B:DA:6B:04:70:F5:49:77:39:06:61:88:4A
Certificate issuer:       /CN=598E51DA545EC07345EFDA9CFC6827DD00710573
Certificate serial:       56D956026EAA169D58E88794675EA23733F01CEE
Authority key identifier: 59:8E:51:DA:54:5E:C0:73:45:EF:DA:9C:FC:68:27:DD:00:71:05:73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598E51DA545EC07345EFDA9CFC6827DD00710573.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/323830333a653432303a3a2f33322d3332203d3e203532343737.roa
Signing time:             Tue 04 Feb 2025 18:19:20 +0000
ROA not before:           Tue 04 Feb 2025 18:14:20 +0000
ROA not after:            Tue 03 Feb 2026 18:19:20 +0000
asID:                     52477
IP address blocks:        2803:e420::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:d9:56:02:6e:aa:16:9d:58:e8:87:94:67:5e:a2:37:33:f0:1c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598E51DA545EC07345EFDA9CFC6827DD00710573
        Validity
            Not Before: Feb  4 18:14:20 2025 GMT
            Not After : Feb  3 18:19:20 2026 GMT
        Subject: CN=6AF078501982910BDA6B0470F54977390661884A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6c:9e:5d:7d:eb:37:7e:0e:8a:49:f5:30:f6:
                    a8:ad:a4:13:bb:0c:03:df:ec:b9:fb:f9:d0:a9:b1:
                    0c:ed:0b:14:d5:3b:a4:a2:98:35:8c:d2:69:5f:0c:
                    60:f7:d0:5c:f5:b1:e4:3c:5d:54:6d:5d:3f:2a:6a:
                    76:94:5a:b3:12:cb:0e:8d:a2:9d:15:ff:ed:65:39:
                    99:67:24:11:e5:ab:a9:31:83:25:bd:5c:aa:00:f4:
                    9b:e3:c8:ba:5a:32:54:a2:e8:91:dd:60:a8:82:66:
                    06:d6:ce:a5:e4:08:4f:98:d7:f2:a6:b0:d2:92:f5:
                    6c:ca:51:46:90:56:00:5d:4c:3d:6e:cc:60:ac:43:
                    df:94:90:d7:a7:de:57:d4:ac:3f:f0:84:ce:06:c0:
                    0f:69:10:b5:43:6e:e4:a1:f8:fd:2f:ac:7b:cf:c4:
                    36:22:8b:67:c3:4b:09:c1:62:92:09:0c:e1:8a:df:
                    c5:1a:53:cb:60:55:96:18:e8:3a:2c:c2:fb:aa:ed:
                    11:b6:30:68:d1:f0:05:87:92:16:96:4b:bb:aa:27:
                    38:da:e5:c1:e1:09:88:8e:ff:d5:df:34:ba:30:b5:
                    3d:0c:3d:cf:e0:52:38:90:a4:75:9d:63:dc:c7:a8:
                    25:9e:2c:87:06:9d:dd:46:20:fd:15:82:15:d0:b5:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:F0:78:50:19:82:91:0B:DA:6B:04:70:F5:49:77:39:06:61:88:4A
            X509v3 Authority Key Identifier:
                keyid:59:8E:51:DA:54:5E:C0:73:45:EF:DA:9C:FC:68:27:DD:00:71:05:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/598E51DA545EC07345EFDA9CFC6827DD00710573.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/598E51DA545EC07345EFDA9CFC6827DD00710573.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83B5586F0F077F1E1E66194862964C958AA2FF26481F8DB692B7A2B4434DFFF9/0/323830333a653432303a3a2f33322d3332203d3e203532343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e420::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:7c:c8:3d:4c:97:74:0b:93:73:0a:e8:4c:14:c5:4c:a8:0d:
         a5:66:e4:f9:a0:6b:dd:a4:48:14:12:50:c2:21:8d:30:28:e4:
         58:d2:47:43:0c:fe:d1:50:0f:b4:49:d2:4f:c0:14:e3:47:c0:
         f9:78:93:5c:13:57:3c:1c:87:23:d2:35:76:72:e4:3d:a0:4a:
         47:f2:ab:04:62:25:5d:12:88:c0:3d:8f:23:f4:b6:05:f6:75:
         f9:60:f1:36:ca:6e:c1:c7:48:70:48:f3:7d:2d:c5:28:97:e5:
         0b:25:50:59:d0:fb:76:29:f8:5f:ab:f5:74:da:71:6f:81:20:
         5f:0e:6f:5c:78:1c:15:49:6e:86:ec:35:55:92:f7:13:b6:7f:
         a7:0f:60:b4:06:8a:a3:9d:80:1c:68:3d:13:d7:f5:67:b8:d9:
         5b:8a:44:4c:ac:ad:59:6f:83:07:6c:24:13:5a:2f:19:8f:0d:
         a7:23:a2:47:c9:85:3d:ef:c1:d6:d3:e0:e5:ed:83:be:6d:4a:
         56:d3:48:2f:f7:3d:a2:40:fe:ef:db:b7:a1:4a:a8:0a:03:49:
         bd:14:fb:a1:a4:b1:9c:4b:3d:9f:dd:44:c0:be:a7:7d:a9:66:
         41:f9:3f:7a:ac:fa:b2:47:a9:d3:bf:50:27:a8:7a:eb:56:d8:
         45:58:a0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----