Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/323830333a353236303a3a2f33322d3332203d3e20323637383730.roa
File:                     323830333a353236303a3a2f33322d3332203d3e20323637383730.roa (raw, json)
Hash identifier:          KEQLSg+VC+YEfW7PUA3IgsYkPBH3PrNtiyibaV7zz60=
Subject key identifier:   4B:E6:6B:D6:00:D6:EC:3B:14:AE:5D:86:F8:1B:86:54:4E:07:06:01
Certificate issuer:       /CN=9B4178566D9550E5296B929731ECBD639DF1705A
Certificate serial:       75E264B7F9AA02C36944A05E74A69D2085105612
Authority key identifier: 9B:41:78:56:6D:95:50:E5:29:6B:92:97:31:EC:BD:63:9D:F1:70:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B4178566D9550E5296B929731ECBD639DF1705A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/323830333a353236303a3a2f33322d3332203d3e20323637383730.roa
Signing time:             Tue 04 Feb 2025 18:50:22 +0000
ROA not before:           Tue 04 Feb 2025 18:45:22 +0000
ROA not after:            Tue 03 Feb 2026 18:50:22 +0000
asID:                     267870
IP address blocks:        2803:5260::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:e2:64:b7:f9:aa:02:c3:69:44:a0:5e:74:a6:9d:20:85:10:56:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9B4178566D9550E5296B929731ECBD639DF1705A
        Validity
            Not Before: Feb  4 18:45:22 2025 GMT
            Not After : Feb  3 18:50:22 2026 GMT
        Subject: CN=4BE66BD600D6EC3B14AE5D86F81B86544E070601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:63:86:74:8c:3e:0c:d0:6e:87:28:2e:eb:6c:
                    17:54:f8:5c:75:3f:fe:c3:ae:83:b3:a9:97:0e:4c:
                    b1:1e:ca:60:a5:6b:ed:9c:f2:ec:59:49:ba:da:27:
                    9b:87:25:d0:c3:23:7b:94:3a:ae:64:a2:7f:ce:2b:
                    c9:bc:d7:be:5d:e4:a3:47:5d:ee:d0:4f:48:c7:5c:
                    70:49:4b:11:7b:84:61:6d:fd:61:62:52:7f:4b:37:
                    b0:cf:10:2e:09:0f:8c:ca:2d:27:fa:c7:67:a7:2c:
                    83:da:17:02:55:0e:6b:00:8a:6b:88:c9:19:79:0d:
                    76:0f:ea:a9:ab:d4:23:5f:32:21:2d:35:ef:19:9e:
                    10:19:a5:51:ba:ef:b8:71:61:d2:f9:ba:9d:f2:f5:
                    cb:ea:72:d8:35:a3:e0:17:e4:7c:de:ae:e0:cd:bd:
                    13:e7:03:79:00:eb:f2:6b:fa:1f:63:02:a4:61:d3:
                    09:53:32:27:f2:7a:9a:87:0e:a1:df:1a:0c:cf:7c:
                    8f:2a:ca:df:a2:b6:ff:4e:4c:fb:d7:de:96:4d:f7:
                    44:bd:ab:c1:56:e5:b4:cb:72:e2:0d:45:b3:c9:e0:
                    6a:d1:59:68:dc:7f:d5:eb:09:5b:14:07:96:71:64:
                    16:3d:2a:0f:e2:cb:e8:d7:9c:d6:04:23:3a:13:f0:
                    23:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E6:6B:D6:00:D6:EC:3B:14:AE:5D:86:F8:1B:86:54:4E:07:06:01
            X509v3 Authority Key Identifier:
                keyid:9B:41:78:56:6D:95:50:E5:29:6B:92:97:31:EC:BD:63:9D:F1:70:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/9B4178566D9550E5296B929731ECBD639DF1705A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9B4178566D9550E5296B929731ECBD639DF1705A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/A96AE28AC08F6E3285C63751AE0577D47FD3CF3B96359B3276F860D447C956C8/0/323830333a353236303a3a2f33322d3332203d3e20323637383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5260::/32

    Signature Algorithm: sha256WithRSAEncryption
         8b:e9:bc:6d:c8:a3:7f:fc:69:4b:7a:27:4c:49:bb:0f:bf:67:
         a8:ae:01:56:b3:1a:17:28:69:12:f6:fa:85:1f:08:44:65:d1:
         2e:3a:56:f8:1c:e7:39:2e:03:fb:ba:86:79:34:8a:34:bc:46:
         27:c0:a5:b0:3e:50:86:83:3c:a5:53:be:63:0c:7f:d3:e2:15:
         d1:5f:9c:7e:a6:50:1a:43:94:32:e6:52:79:e6:31:0e:e3:3b:
         9e:3e:c1:67:17:3e:c3:75:54:f5:50:a2:42:96:1a:65:54:45:
         8e:7a:ee:e1:b1:df:c3:93:9e:40:da:4e:ca:4f:7d:7d:ef:35:
         78:ab:81:fb:1d:06:da:c0:5a:a5:45:f0:92:3c:a9:65:4b:88:
         e5:90:a6:4e:05:7e:d8:39:36:13:e0:68:0a:62:fe:52:d7:e1:
         d8:2c:c1:f5:27:08:19:d6:d4:31:37:f1:d0:5c:c0:19:37:bf:
         26:1b:6b:da:cf:2d:19:c8:08:b4:62:98:ed:e4:5e:e0:3b:c1:
         08:6a:f2:3c:23:11:be:d0:72:fc:94:9a:24:f4:7e:ee:2a:71:
         79:e5:dc:85:c9:78:34:cf:2d:48:71:4e:f0:0d:51:8a:4d:23:
         ee:7f:78:20:f0:b2:6e:34:93:09:1a:f9:66:17:c9:7e:87:4d:
         9e:38:cc:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----