Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/323830333a616634303a3a2f33322d3335203d3e20323634373434.roa
File:                     323830333a616634303a3a2f33322d3335203d3e20323634373434.roa (raw, json)
Hash identifier:          gpW8fLr4JPthw4TipGBRJSKONB5wTSJTnjuxigDdYEE=
Subject key identifier:   E8:AB:43:9A:A5:91:C5:07:03:7B:6C:A9:7F:D9:83:FE:B4:65:37:AA
Certificate issuer:       /CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
Certificate serial:       79862874B7C57DDC06AFAD469B52956A499109FA
Authority key identifier: E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/323830333a616634303a3a2f33322d3335203d3e20323634373434.roa
Signing time:             Tue 04 Feb 2025 18:54:18 +0000
ROA not before:           Tue 04 Feb 2025 18:49:18 +0000
ROA not after:            Tue 03 Feb 2026 18:54:18 +0000
asID:                     264744
IP address blocks:        2803:af40::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:86:28:74:b7:c5:7d:dc:06:af:ad:46:9b:52:95:6a:49:91:09:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E83D0B134BF256367D3FDA5E392565CAA89D5D3C
        Validity
            Not Before: Feb  4 18:49:18 2025 GMT
            Not After : Feb  3 18:54:18 2026 GMT
        Subject: CN=E8AB439AA591C507037B6CA97FD983FEB46537AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0f:d9:91:f4:83:d4:28:82:01:40:22:bf:eb:
                    21:1a:5c:c9:e7:28:1b:2c:20:c2:74:b1:c6:6e:72:
                    81:e9:da:a0:02:d8:82:a1:19:05:df:8a:ba:1b:ff:
                    47:f6:aa:fd:ca:7c:52:c6:c0:14:25:b4:9d:e2:1f:
                    f9:c2:2e:4a:8f:4b:65:11:12:d9:2c:0e:88:d7:2b:
                    e3:f2:8b:f8:78:34:6d:da:a9:1d:f1:cf:cd:0e:ab:
                    b8:3a:52:b3:88:45:db:89:58:cc:33:f9:6e:bf:78:
                    8d:cf:2d:0d:ac:97:59:37:c4:ce:40:b0:f5:da:0c:
                    b8:32:6a:ac:12:df:51:41:f8:34:41:92:83:17:94:
                    4a:1c:2c:e5:7a:b5:c3:18:65:23:6a:a0:8b:a5:33:
                    f1:bf:0c:2c:f5:78:e7:97:6b:f7:84:b4:c2:26:51:
                    bf:78:d1:a9:b5:dd:b5:a0:c7:43:5f:62:d4:66:15:
                    15:25:f8:ce:81:fb:4f:17:4c:45:8b:73:d8:4e:e9:
                    78:23:c6:be:17:b8:97:99:03:10:c7:bb:39:bf:b0:
                    cc:69:20:94:54:ac:9f:f7:a1:a6:50:98:7b:25:e8:
                    36:e5:22:75:e4:80:c9:03:3a:f4:60:1b:b8:66:ea:
                    c7:fe:8c:9b:93:b8:db:a4:dd:ae:6c:b4:0b:8e:3c:
                    4c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AB:43:9A:A5:91:C5:07:03:7B:6C:A9:7F:D9:83:FE:B4:65:37:AA
            X509v3 Authority Key Identifier:
                keyid:E8:3D:0B:13:4B:F2:56:36:7D:3F:DA:5E:39:25:65:CA:A8:9D:5D:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E83D0B134BF256367D3FDA5E392565CAA89D5D3C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/AFEA5C36CC466DCE0C18B7AE09DCD96313C44B5B5C688D44ACD4F36F79B9E4D3/0/323830333a616634303a3a2f33322d3335203d3e20323634373434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:c3:79:77:9b:3d:3b:6c:db:2d:7b:65:c6:c1:43:0a:8b:29:
         96:d5:87:51:66:b8:34:ab:d1:4b:04:4e:b4:4c:4f:a2:56:83:
         bf:b7:5a:b3:05:d6:fe:f0:cd:d3:50:85:6c:95:47:e6:7b:08:
         c4:a4:88:51:72:9c:22:3b:03:86:d7:7b:7f:ff:f3:2c:91:de:
         d6:f8:c9:5c:38:23:c5:e4:80:1c:8d:21:48:42:13:e0:e1:6e:
         d2:f8:55:31:d5:11:3d:98:d1:09:ea:25:99:10:a2:6e:21:75:
         92:28:07:73:d3:fc:b2:4c:7f:fc:8e:5c:6a:fd:12:5c:dc:78:
         b3:2e:88:c1:de:4e:9c:21:b4:c4:03:1b:1f:da:5d:b4:9d:4f:
         cb:1f:1e:12:6a:99:c3:b9:bd:d4:9d:25:7f:99:45:6f:cc:6b:
         6b:15:ce:79:09:88:69:c8:e3:25:ef:31:aa:de:60:2f:43:c3:
         22:2b:2c:24:e3:e4:8e:dd:68:c9:8f:d0:aa:9a:ee:9d:6b:77:
         5c:9e:0d:cf:c8:64:e8:62:d4:c9:e9:b2:ab:18:80:e2:54:1a:
         3d:9f:af:6c:02:9b:89:46:98:32:5b:67:09:65:1b:1c:38:7c:
         02:21:0c:b6:ee:1a:33:af:89:59:76:53:71:2e:8b:34:37:42:
         94:d1:65:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----