Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3632373a3a2f34382d3438203d3e203532343233.roa
File:                     323830333a363930303a3632373a3a2f34382d3438203d3e203532343233.roa (raw, json)
Hash identifier:          wvt/8c22q8hDiYKlrDseU4YfmfD2zRj0Pz5NrfZ9mvY=
Subject key identifier:   29:77:6E:94:B6:13:09:89:2F:DD:13:3A:E3:EE:C7:1F:B7:AA:F8:19
Certificate issuer:       /CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
Certificate serial:       55349889CC56B6DF1256F87B60DACAEB6CC3C6C0
Authority key identifier: 52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3632373a3a2f34382d3438203d3e203532343233.roa
Signing time:             Sun 09 Mar 2025 03:11:33 +0000
ROA not before:           Sun 09 Mar 2025 03:06:33 +0000
ROA not after:            Sun 08 Mar 2026 03:11:33 +0000
asID:                     52423
IP address blocks:        2803:6900:627::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:34:98:89:cc:56:b6:df:12:56:f8:7b:60:da:ca:eb:6c:c3:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=522A19041F7AD8D0B4F97D6DDAFC99C2590276AB
        Validity
            Not Before: Mar  9 03:06:33 2025 GMT
            Not After : Mar  8 03:11:33 2026 GMT
        Subject: CN=29776E94B61309892FDD133AE3EEC71FB7AAF819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:09:3b:bf:d9:ef:52:53:6d:b1:8e:89:67:
                    ef:19:7f:ee:85:ee:7a:19:f5:ea:23:1c:c9:30:cc:
                    be:b8:02:ce:4c:d3:48:f3:f0:90:35:8a:43:85:b4:
                    3b:b7:c1:dd:1a:18:09:50:cc:d8:bd:a0:c5:fa:f9:
                    c5:a0:18:31:e3:0d:f2:b2:5c:b2:c7:39:da:37:a7:
                    50:ea:5b:eb:9b:7e:e7:25:5c:c6:70:63:cd:a7:dd:
                    70:a3:30:67:da:ef:81:91:8f:0e:5b:7f:e1:f0:0c:
                    44:91:9a:29:8e:16:30:71:6a:d6:a6:d5:11:de:f0:
                    2a:ce:ad:a8:00:88:98:07:83:cd:89:a7:41:2a:48:
                    45:f3:ef:72:0d:da:c4:e6:41:3d:7a:01:e7:4e:e9:
                    a5:4c:55:5c:5d:84:cf:76:2b:4c:72:3d:b2:35:13:
                    ae:5a:12:a0:d7:7e:81:af:61:2b:58:92:de:b3:06:
                    0b:7a:51:22:b3:dc:44:88:ce:2b:c3:cd:ff:d8:b5:
                    e2:05:fb:31:60:4c:e9:a8:0f:e9:38:c4:9d:ef:64:
                    48:fe:d4:2d:24:3d:a5:57:81:0c:27:62:d1:0c:58:
                    56:cb:2c:e5:27:41:0d:fa:6b:00:2c:ef:cb:89:dc:
                    52:63:0e:28:21:87:71:28:40:8e:bc:e5:83:79:c6:
                    22:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:77:6E:94:B6:13:09:89:2F:DD:13:3A:E3:EE:C7:1F:B7:AA:F8:19
            X509v3 Authority Key Identifier:
                keyid:52:2A:19:04:1F:7A:D8:D0:B4:F9:7D:6D:DA:FC:99:C2:59:02:76:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/522A19041F7AD8D0B4F97D6DDAFC99C2590276AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9072CC7AC9935A96AECDC3B156F0BE285AC0D2F3E2B26466F87D7C39639FE7C9/0/323830333a363930303a3632373a3a2f34382d3438203d3e203532343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6900:627::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:dc:9f:e7:8c:3e:a8:d0:77:5c:07:f3:11:28:c8:8e:bd:92:
         a8:17:aa:16:f8:50:b9:ae:90:bb:14:81:d6:0c:40:89:30:3d:
         a6:e2:95:d4:ed:c1:ef:8f:a2:ad:b0:18:2a:42:a0:5e:bb:5b:
         7d:0e:e8:59:69:24:33:38:ae:06:8b:86:ee:b6:04:14:66:38:
         41:e7:8f:99:de:14:e1:56:e7:74:51:ef:c0:fd:ed:2d:85:2c:
         5f:95:a7:ee:00:84:61:46:21:e2:d0:9f:26:73:e0:55:82:9c:
         f8:53:9b:7d:75:47:d7:5f:95:56:98:e9:01:26:bb:73:3c:de:
         25:a0:06:6e:b5:8c:56:73:df:36:44:7d:72:77:64:4c:49:f6:
         4b:9e:67:2f:b8:94:e0:35:dc:87:14:0a:d4:bf:9e:24:9f:43:
         6d:90:66:cc:b3:4a:1c:69:14:2e:c0:19:44:73:9a:b6:70:27:
         41:38:fe:84:ed:a5:8c:36:33:fa:25:d6:ed:dd:9b:04:89:a9:
         42:9d:4b:45:b8:66:d9:bc:31:1b:69:f1:d3:2a:6d:a6:9d:22:
         59:f9:0c:01:71:be:fe:22:ab:12:59:53:d6:e7:fc:04:4c:6d:
         6b:54:19:d8:87:2f:e7:31:30:be:50:5f:ef:48:42:92:50:f9:
         31:f7:9b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----