Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3539383a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3539383a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          frow5LTvxYA/lm3SsfVKoc4au8fYR/xTsCJt1mTkm20=
Subject key identifier:   7D:3C:0B:5F:7A:D3:D9:FD:E2:B6:30:1B:0C:83:F7:A2:AC:B2:49:FC
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       4A3107DAFAC6ECBC9528CFFC752765C1A8F76720
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3539383a3a2f34382d3438203d3e203532343233.roa
Signing time:             Tue 04 Feb 2025 18:20:42 +0000
ROA not before:           Tue 04 Feb 2025 18:15:42 +0000
ROA not after:            Tue 03 Feb 2026 18:20:42 +0000
asID:                     52423
IP address blocks:        2803:6900:598::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:31:07:da:fa:c6:ec:bc:95:28:cf:fc:75:27:65:c1:a8:f7:67:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Feb  4 18:15:42 2025 GMT
            Not After : Feb  3 18:20:42 2026 GMT
        Subject: CN=7D3C0B5F7AD3D9FDE2B6301B0C83F7A2ACB249FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cb:73:b7:05:0e:f3:9f:48:a5:25:f9:42:32:
                    a5:50:0c:c1:80:fd:2c:34:29:7c:4e:3d:93:b8:13:
                    d7:75:25:ee:f8:f2:45:2d:02:46:70:82:f1:65:a4:
                    46:55:02:ed:e3:55:1c:66:74:02:3c:eb:db:e0:11:
                    e3:9d:1c:da:f4:1e:c6:a1:3d:e6:7d:a5:b1:ed:12:
                    09:5a:97:de:8e:22:92:29:83:88:3a:e2:9a:4a:12:
                    19:32:b5:ea:44:6d:49:ad:d6:fe:b5:bc:76:6e:3b:
                    1a:ca:4f:0d:0b:83:a1:30:46:04:dc:e6:98:7d:ba:
                    1c:6d:55:a7:01:3c:01:81:59:42:7c:95:b8:f7:29:
                    98:48:24:db:66:c1:fe:4b:68:66:02:58:ad:7f:6f:
                    6a:81:70:1e:0d:2f:aa:6b:be:8b:15:b6:6c:51:91:
                    7b:b7:00:f8:89:83:53:eb:50:fd:25:58:cf:7a:05:
                    62:41:ba:d4:fb:3a:1e:ef:d4:7f:0d:f3:f0:e8:7c:
                    60:06:16:2b:af:9d:d6:82:8f:11:c2:76:49:80:61:
                    b4:43:c7:2f:30:e1:60:59:e0:f7:02:3d:da:fa:03:
                    3f:ca:72:55:97:b4:91:eb:27:c6:15:4b:0a:32:c9:
                    ad:07:16:17:a4:df:24:aa:9a:c1:ae:98:ca:17:09:
                    28:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:3C:0B:5F:7A:D3:D9:FD:E2:B6:30:1B:0C:83:F7:A2:AC:B2:49:FC
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3539383a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:598::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:23:da:85:7f:d7:41:0c:2c:80:56:43:c8:9e:70:3f:03:
         42:ad:b1:37:6e:91:70:e7:4e:a4:b0:a2:d0:e1:49:f2:6c:c3:
         0a:65:a8:54:8b:4e:a0:8c:91:27:43:49:cd:8a:6d:1d:1c:aa:
         91:79:e5:9d:44:7b:71:7b:5c:71:00:e7:6b:69:e7:bc:f6:f4:
         80:9d:51:d1:f6:f9:d2:a2:fd:1c:e0:c1:db:c0:18:74:19:41:
         6c:34:d4:eb:f3:26:c0:77:8c:7b:9e:c5:fe:2b:52:1f:98:86:
         7f:69:73:c2:85:b8:8c:08:c5:d2:4e:d5:d0:4e:18:8e:ed:7f:
         2b:b3:25:e9:45:f7:ba:99:ca:14:58:ba:73:5b:04:2d:55:88:
         5f:1e:60:4b:19:69:fe:5a:4b:90:48:ff:b3:c5:11:87:86:1f:
         25:7b:1f:d4:40:57:79:10:06:36:b2:d7:67:ce:3a:62:b0:19:
         a2:07:10:7b:64:45:a8:df:51:dd:29:41:0d:32:3a:c4:8f:27:
         e2:45:89:0c:92:9b:2e:82:06:a1:6f:16:ab:78:65:3f:5d:d1:
         61:b4:d0:cc:38:a7:17:f1:bb:5c:4f:36:3b:93:a9:e5:fe:8d:
         7b:13:c9:eb:ce:05:a8:4b:92:d6:92:41:1c:5e:d7:bc:cf:d1:
         41:5f:fb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----