Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531393a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a313531393a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          Kkh3Kw98POBr3jvcH6btsLD3cP35GHIsqM3Kik4kLwc=
Subject key identifier:   4B:48:55:87:D5:65:7A:E8:98:DD:30:52:8D:52:A0:C2:53:DB:9E:31
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       4634ADDC592133CC2BC7CF73E5F40E57F4844BBA
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531393a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:49 +0000
ROA not before:           Tue 04 Feb 2025 18:15:49 +0000
ROA not after:            Tue 03 Feb 2026 18:20:49 +0000
asID:                     52423
IP address blocks:        2803:6900:1519::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:34:ad:dc:59:21:33:cc:2b:c7:cf:73:e5:f4:0e:57:f4:84:4b:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:49 2025 GMT
            Not After : Feb  3 18:20:49 2026 GMT
        Subject: CN=4B485587D5657AE898DD30528D52A0C253DB9E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:aa:b8:1a:cb:4a:81:12:d0:89:98:cc:d5:46:
                    10:53:12:5d:27:d3:bc:5a:2c:e9:7f:f1:51:00:fe:
                    1f:5b:9f:19:e9:77:06:44:36:32:6b:88:94:4e:1d:
                    36:37:2b:9c:3a:8c:12:34:fc:61:e0:5e:14:cb:dc:
                    34:a5:03:87:b6:e8:03:6b:ea:12:b8:00:9d:15:21:
                    6f:59:7d:88:26:32:97:3e:9b:85:e7:c8:c1:99:ed:
                    17:3e:5c:b9:2f:a7:c9:5d:0c:8b:fd:d3:cf:0b:88:
                    f8:3c:bd:c6:91:b2:c7:d7:f6:58:f6:3a:0a:b5:82:
                    cd:91:d9:c2:a6:c2:5c:6d:97:f4:61:fe:80:95:73:
                    14:26:15:f4:af:cd:81:39:6a:77:ba:aa:54:62:a1:
                    e2:96:0f:6f:48:b9:a6:34:11:f6:1e:55:cb:ca:a5:
                    dc:ec:a9:1f:47:67:30:6e:d9:0c:88:dc:0c:eb:1d:
                    07:fb:57:03:f3:ed:7a:e4:48:e1:4f:d7:74:a0:b6:
                    17:02:58:a6:df:2b:85:16:8e:2b:3c:ab:63:54:6d:
                    f2:5a:a2:b8:0f:0f:45:5b:05:b3:1e:6c:14:7a:9c:
                    7c:30:73:54:99:9a:73:f1:16:ac:d0:98:58:5e:ed:
                    38:1c:0c:6f:7b:32:15:cf:9d:3f:49:bf:ed:c8:83:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:48:55:87:D5:65:7A:E8:98:DD:30:52:8D:52:A0:C2:53:DB:9E:31
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a313531393a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:1519::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:f9:e1:23:7d:0e:73:d8:46:7f:5e:6f:71:a8:43:46:4c:a6:
         bd:7d:fc:76:ed:91:31:70:cb:b3:73:ca:b3:65:88:96:84:03:
         cc:69:91:46:5f:3c:28:ab:63:02:e5:1c:80:3a:66:ff:5b:2b:
         c0:e9:6c:0a:f5:6c:94:cb:6b:16:6e:33:9b:be:b2:87:f4:7b:
         c0:75:a4:96:2e:16:1e:de:88:81:6a:d3:4e:d9:4e:ee:aa:9a:
         4b:3a:6c:af:67:66:06:b2:f6:fb:5a:97:50:ce:94:80:85:d1:
         75:15:68:c0:71:01:9f:fe:51:45:a3:1e:33:0f:80:fe:f7:ee:
         a9:ac:bc:4b:ed:71:7a:36:3f:0d:33:59:ee:4d:16:7e:e1:9d:
         bc:6b:64:f0:c5:da:a3:ef:28:59:1a:46:38:59:db:1a:b0:07:
         89:fe:ea:e9:76:5b:85:0e:9d:55:4d:a7:01:fe:00:b1:be:53:
         3e:20:70:0d:73:e2:50:97:87:06:c7:21:74:90:ac:d8:0b:7f:
         7d:b3:aa:6e:3f:f2:56:68:ea:29:85:59:f2:a7:3b:18:c8:32:
         32:d6:32:6c:e5:06:b2:db:09:32:25:70:9e:09:8b:bc:a3:72:
         40:e5:61:a7:fa:a9:50:ed:ce:81:0c:13:a7:3e:3e:c5:ec:f6:
         59:c3:39:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----