Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a6430303a3a2f34302d3430203d3e20323730303838.roa
File:                     323830333a626265303a6430303a3a2f34302d3430203d3e20323730303838.roa (raw, json)
Hash identifier:          5MWmdHAFjNELGAGH+Zqqf6q31kqFKYyPkkHsDhh9SHc=
Subject key identifier:   B4:0D:35:30:80:7F:81:62:C9:E1:D4:8E:FC:CF:AA:F3:AA:3A:D5:3E
Certificate issuer:       /CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
Certificate serial:       627D533A81DDC013250361717DAEBE989086DDE2
Authority key identifier: 08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a6430303a3a2f34302d3430203d3e20323730303838.roa
Signing time:             Wed 29 Jan 2025 15:30:02 +0000
ROA not before:           Wed 29 Jan 2025 15:25:02 +0000
ROA not after:            Wed 28 Jan 2026 15:30:02 +0000
asID:                     270088
IP address blocks:        2803:bbe0:d00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:7d:53:3a:81:dd:c0:13:25:03:61:71:7d:ae:be:98:90:86:dd:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D
        Validity
            Not Before: Jan 29 15:25:02 2025 GMT
            Not After : Jan 28 15:30:02 2026 GMT
        Subject: CN=B40D3530807F8162C9E1D48EFCCFAAF3AA3AD53E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:aa:bd:c1:67:2e:f0:f3:b4:de:67:06:77:
                    49:be:37:bf:06:50:f9:99:26:12:0a:a8:65:81:08:
                    47:8d:16:a7:4e:14:44:fc:27:a2:e5:68:f7:c2:72:
                    8e:e0:16:7a:49:83:63:ea:b7:90:7d:bf:a7:b1:45:
                    42:19:a3:31:f1:91:9f:90:49:28:78:df:b7:1c:85:
                    24:a9:89:94:17:3a:89:f1:2f:e7:a4:65:aa:5e:ce:
                    b9:4f:52:99:84:04:ac:c7:fb:72:29:23:d0:91:d3:
                    61:1e:ce:3e:55:52:cf:99:2a:15:fe:a9:91:61:59:
                    78:4e:a3:f4:57:51:64:e5:61:ea:14:ac:1b:b4:7a:
                    85:d0:5e:92:a5:89:0e:1f:e1:65:d5:cc:b2:b3:f9:
                    1d:f9:16:73:8f:4f:a3:70:86:a5:1b:54:03:1d:7c:
                    84:7c:4b:d6:8f:92:d4:d0:27:59:af:1b:94:6e:47:
                    58:fa:bb:e2:21:7d:be:47:cb:49:b1:81:69:7a:a4:
                    c7:2a:0f:ac:06:9d:b8:a2:ff:9f:d4:17:9f:31:31:
                    57:f8:fd:15:9e:48:1d:1c:3c:b6:b5:71:58:6f:92:
                    ec:95:07:f4:51:c0:b5:89:18:de:c1:d4:3c:8f:a5:
                    d2:40:78:1a:60:ef:9d:1d:d1:0e:4c:18:71:46:e4:
                    9b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0D:35:30:80:7F:81:62:C9:E1:D4:8E:FC:CF:AA:F3:AA:3A:D5:3E
            X509v3 Authority Key Identifier:
                keyid:08:AA:2E:4D:3C:7C:DF:96:26:D3:31:AC:D3:8D:17:19:F3:D4:A7:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/08AA2E4D3C7CDF9626D331ACD38D1719F3D4A72D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8D4BB2421C24D19F3123B0C681B01AD82A92941582C9DABB9493E097F3F2F893/0/323830333a626265303a6430303a3a2f34302d3430203d3e20323730303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:bbe0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         14:3d:0e:93:20:3f:25:b9:a6:dc:f0:fb:1a:a6:f3:9f:7f:f9:
         5d:b5:2f:5f:ca:c8:9b:5d:ac:81:fa:2e:aa:a3:3e:7a:e0:07:
         75:97:69:22:80:8f:82:08:fc:3a:26:c1:9e:99:69:bb:c3:14:
         fe:5e:2d:29:d7:e6:6b:ea:c1:13:0b:af:1f:d5:18:89:c2:f8:
         9d:4f:76:1a:83:03:15:b5:c0:6e:56:39:0a:1b:42:c9:81:44:
         56:8a:e9:41:e4:99:44:7c:03:b5:dd:ff:c2:1c:0f:bc:de:b8:
         88:e0:80:73:62:1e:e3:92:13:55:98:77:75:b2:7f:43:0c:c5:
         13:f2:22:17:10:3f:37:f3:dc:69:6e:a7:5f:52:43:46:2b:5f:
         9c:e7:0c:fe:cf:8a:56:8f:6e:ca:21:a9:d0:89:d5:11:ae:eb:
         68:78:bb:99:6b:34:8d:57:16:a3:16:00:9d:f9:98:ea:88:b9:
         a6:ba:7f:86:88:c2:8c:03:34:1a:0b:83:2b:3a:2e:9e:8d:2b:
         0f:dc:fc:7a:8d:cf:7f:61:b0:11:3d:d7:c1:6e:82:7a:78:0c:
         ea:28:c7:7b:80:20:72:7f:14:ca:35:a4:54:9e:af:35:8c:e3:
         5c:76:f3:9c:1f:0c:bb:7b:68:75:a1:45:bb:53:93:7b:0f:d8:
         ee:0c:74:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----