Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/323830333a393363303a3a2f33322d3332203d3e20323635373431.roa
File:                     323830333a393363303a3a2f33322d3332203d3e20323635373431.roa (raw, json)
Hash identifier:          IO0FBXbQvEDNkFsDcvKB31Xoxvbzrp6+rZZv8v5BLKM=
Subject key identifier:   48:7E:A9:C9:8C:78:C6:EF:9E:F1:FF:AF:EC:91:C1:8D:32:7E:29:82
Certificate issuer:       /CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
Certificate serial:       647411F3868CBFBF147AFB16EA741C6E40D34074
Authority key identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/323830333a393363303a3a2f33322d3332203d3e20323635373431.roa
Signing time:             Sat 15 Feb 2025 00:09:52 +0000
ROA not before:           Sat 15 Feb 2025 00:04:52 +0000
ROA not after:            Sat 14 Feb 2026 00:09:52 +0000
asID:                     265741
IP address blocks:        2803:93c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:74:11:f3:86:8c:bf:bf:14:7a:fb:16:ea:74:1c:6e:40:d3:40:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
        Validity
            Not Before: Feb 15 00:04:52 2025 GMT
            Not After : Feb 14 00:09:52 2026 GMT
        Subject: CN=487EA9C98C78C6EF9EF1FFAFEC91C18D327E2982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:34:0f:d9:fc:62:de:37:07:4e:2a:f1:0f:98:
                    e8:b4:6d:f4:e0:e5:29:38:d7:0b:26:f0:e8:4f:7e:
                    b6:4e:1a:99:34:7b:56:07:36:84:07:c8:ce:70:96:
                    29:05:b6:2f:0f:6f:cd:1f:8d:a3:2d:0f:53:ba:63:
                    43:89:c9:fb:44:d3:7c:b4:e5:99:22:1f:ae:53:11:
                    0f:e2:80:be:01:4e:22:79:37:a6:d9:83:8b:b8:5a:
                    ed:55:8e:44:c6:5e:b9:f4:be:94:5e:39:24:dc:96:
                    ce:0c:fe:b3:b3:09:31:50:2a:25:e4:56:b8:8c:32:
                    2b:ad:f4:c1:3c:09:f7:2d:93:cc:c5:54:74:6d:ec:
                    5c:78:0e:dd:1b:e0:3f:30:84:01:19:15:dc:5b:8f:
                    3f:e9:00:cb:ac:21:84:9f:a0:a9:1d:84:2c:d5:cc:
                    33:11:ef:48:a6:f1:85:70:91:11:68:35:b4:83:b3:
                    15:27:91:78:8b:b6:b3:e4:65:b2:db:b4:38:40:66:
                    e2:f5:e9:df:e0:88:2c:18:e9:a9:16:09:ee:4b:d7:
                    a6:b3:a4:a5:a5:f0:5b:a3:e2:e2:73:b8:09:99:95:
                    ff:4f:c6:d5:89:5e:2c:ed:bb:a3:9d:44:97:f9:a4:
                    32:f0:18:f5:5b:53:f7:d2:01:ce:e6:fd:a1:87:37:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:7E:A9:C9:8C:78:C6:EF:9E:F1:FF:AF:EC:91:C1:8D:32:7E:29:82
            X509v3 Authority Key Identifier:
                keyid:71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/323830333a393363303a3a2f33322d3332203d3e20323635373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:93c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:e3:5d:2d:db:a7:20:79:3c:af:58:5b:02:12:61:19:c2:ad:
         80:fe:0c:5f:bc:eb:69:28:69:bb:45:7a:ef:69:7d:51:55:ef:
         0d:c8:bb:8b:a2:65:df:f8:c2:4f:8a:66:8d:cc:70:14:7f:b9:
         97:7a:ac:1b:61:b2:9e:6f:ea:b1:e8:46:66:fe:8b:fd:6b:a1:
         79:85:da:22:91:a8:a9:aa:ee:ac:a3:d4:90:2c:2f:2a:54:f1:
         1a:10:0a:5b:55:e7:9c:ae:6f:3c:73:fd:99:93:47:72:42:b9:
         73:4a:f3:06:06:42:99:58:86:a1:98:66:f7:37:85:ab:d1:be:
         a9:0b:53:83:91:be:76:42:31:38:e2:97:a8:56:7c:40:6e:03:
         7d:ba:e9:fb:fd:8f:22:19:f5:37:70:32:d8:4d:18:6a:91:a7:
         a7:12:64:d8:f7:8f:62:0d:2a:83:1d:40:f3:d2:72:67:4a:d6:
         4a:0a:36:d7:15:c4:7f:51:ed:dd:55:61:8d:f6:94:5e:36:45:
         82:80:f2:a4:b1:1f:99:a9:ca:c7:36:cf:9b:14:6d:ec:5d:eb:
         38:46:b2:93:33:cb:21:8a:d4:ac:e0:0d:ae:e4:17:1b:54:2a:
         13:b8:10:83:06:6d:e5:9b:e0:06:c3:eb:9e:e4:58:4e:9a:1d:
         69:94:68:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----