Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/323830333a3430303a3a2f33322d3332203d3e203532333637.roa
File:                     323830333a3430303a3a2f33322d3332203d3e203532333637.roa (raw, json)
Hash identifier:          +rXC5Q/L7pvE0Sv13SRYkzaarMb3THxLNZwM/uNpxzk=
Subject key identifier:   D8:8E:3C:BE:46:A0:7E:49:43:DB:35:D0:B3:C2:88:D0:CB:A3:85:4B
Certificate issuer:       /CN=1FDF2DE08054C55BA3B5B59C734302F868234F58
Certificate serial:       0C4DDCC15EDB28233B53CC0BEBDE050961A51EEF
Authority key identifier: 1F:DF:2D:E0:80:54:C5:5B:A3:B5:B5:9C:73:43:02:F8:68:23:4F:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/323830333a3430303a3a2f33322d3332203d3e203532333637.roa
Signing time:             Tue 04 Feb 2025 20:00:01 +0000
ROA not before:           Tue 04 Feb 2025 19:55:01 +0000
ROA not after:            Tue 03 Feb 2026 20:00:01 +0000
asID:                     52367
IP address blocks:        2803:400::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4d:dc:c1:5e:db:28:23:3b:53:cc:0b:eb:de:05:09:61:a5:1e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1FDF2DE08054C55BA3B5B59C734302F868234F58
        Validity
            Not Before: Feb  4 19:55:01 2025 GMT
            Not After : Feb  3 20:00:01 2026 GMT
        Subject: CN=D88E3CBE46A07E4943DB35D0B3C288D0CBA3854B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:ff:3c:66:15:1a:07:14:ce:b3:f3:73:84:
                    fe:cc:95:f4:1b:1c:48:4e:68:b1:77:84:7b:70:a8:
                    25:a0:e7:96:f4:45:b6:2e:67:d8:33:77:a2:0c:b7:
                    41:31:e0:d8:f1:39:6a:d8:0a:7d:63:4e:9c:b6:22:
                    16:a5:55:bc:2d:1f:eb:5d:19:23:1a:20:8b:ac:07:
                    df:5c:ec:22:79:40:c2:12:19:0b:44:32:4c:8b:c5:
                    41:6d:a0:48:60:7a:7f:98:99:fa:c2:34:07:3f:ad:
                    6c:92:6c:50:e0:98:e8:55:6d:55:50:4c:f8:3b:4b:
                    25:d6:66:78:d7:bb:df:2a:db:9c:8f:8b:1d:84:ea:
                    fa:53:55:59:f3:52:b6:09:a7:dd:9e:b0:49:63:9f:
                    13:77:93:fc:72:5c:7d:54:f0:06:66:d4:ad:ae:5e:
                    45:91:c1:14:44:cb:54:77:17:6f:5f:6e:7d:4d:33:
                    e0:ca:51:8d:fc:e9:c9:d9:14:46:d5:e3:46:32:ea:
                    cc:45:2c:11:07:ff:fb:b2:44:91:36:7b:2b:44:9c:
                    ed:82:64:67:4d:97:89:90:b7:4d:94:c8:e4:5c:3a:
                    e0:14:70:a3:a8:e4:a1:cd:67:e4:fd:98:3b:1b:75:
                    88:d7:6b:6c:15:85:df:c4:24:a9:6a:d5:31:df:16:
                    6c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8E:3C:BE:46:A0:7E:49:43:DB:35:D0:B3:C2:88:D0:CB:A3:85:4B
            X509v3 Authority Key Identifier:
                keyid:1F:DF:2D:E0:80:54:C5:5B:A3:B5:B5:9C:73:43:02:F8:68:23:4F:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1FDF2DE08054C55BA3B5B59C734302F868234F58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A9518EA609642D3F666D638B6D0325EFAC29FD0863FD28ED6AD19489CEF42EC7/0/323830333a3430303a3a2f33322d3332203d3e203532333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:400::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:b7:a8:ec:40:43:ec:bb:aa:cd:04:c7:28:a9:8d:93:8d:75:
         8d:c9:95:77:1d:d7:c2:27:2b:f0:2c:c9:bc:b8:2d:c2:e8:e0:
         1c:c7:fd:2b:29:db:92:cd:fd:42:4c:63:de:1e:f3:33:af:e7:
         7a:91:4b:bd:a1:9c:ef:2f:da:b9:03:4f:4b:24:d5:1d:65:7f:
         0e:15:65:b0:0f:d2:56:d0:de:60:76:b1:5a:78:03:ce:4d:8a:
         5e:00:91:da:25:1a:d2:b6:bf:71:6e:3a:dd:f9:4a:2d:af:a6:
         20:f3:dd:c0:8b:c2:06:c0:70:6e:4e:81:3c:06:a7:a0:f4:67:
         86:ca:e0:e7:5e:47:a3:ff:69:4b:81:15:a3:ee:77:f4:d6:a4:
         a5:35:22:98:42:74:c1:af:2f:7d:ea:e0:c3:6c:48:8d:cd:0b:
         1f:4e:a6:63:92:c9:22:84:2d:d1:89:df:38:05:64:01:94:4e:
         ee:b4:bd:4c:bc:09:c6:b3:bd:1a:6a:5f:2d:1e:e7:79:ec:38:
         e4:c4:79:af:cc:44:2a:30:ba:0f:03:9d:e4:49:ed:7d:2f:16:
         3e:b9:40:d1:4e:45:3e:31:ea:e9:58:b1:77:a4:5e:51:9c:46:
         0d:bc:54:54:c9:ed:1d:d7:ce:ee:2f:67:16:7f:4f:ed:4d:eb:
         68:ad:e0:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----