Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/323830333a65303a3a2f33322d3438203d3e20323639383433.roa
File:                     323830333a65303a3a2f33322d3438203d3e20323639383433.roa (raw, json)
Hash identifier:          qjNLTugKwFmbpSQvVPhJnB6u1emEori7ZEgVc80XAXg=
Subject key identifier:   4B:71:EB:7C:EC:81:EE:5C:9B:31:56:66:B9:95:B6:AB:07:33:2C:6D
Certificate issuer:       /CN=E0013BE61C4781324203A7DB7D11674E5D707D02
Certificate serial:       03F1E698C4228CC70B3A3319069B438BD0E21A46
Authority key identifier: E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/323830333a65303a3a2f33322d3438203d3e20323639383433.roa
Signing time:             Mon 03 Feb 2025 18:05:00 +0000
ROA not before:           Mon 03 Feb 2025 18:00:00 +0000
ROA not after:            Mon 02 Feb 2026 18:05:00 +0000
asID:                     269843
IP address blocks:        2803:e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:f1:e6:98:c4:22:8c:c7:0b:3a:33:19:06:9b:43:8b:d0:e2:1a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0013BE61C4781324203A7DB7D11674E5D707D02
        Validity
            Not Before: Feb  3 18:00:00 2025 GMT
            Not After : Feb  2 18:05:00 2026 GMT
        Subject: CN=4B71EB7CEC81EE5C9B315666B995B6AB07332C6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:92:38:be:6c:b7:04:9e:da:ac:3d:19:e8:d8:
                    7e:5c:3c:5d:45:ca:af:c3:3f:72:02:3f:af:20:ad:
                    62:87:4b:2c:d1:55:07:9e:fc:91:36:90:ea:42:fb:
                    81:1b:04:99:4a:f0:43:da:8e:f0:90:00:a4:5a:0b:
                    a8:a0:d4:c2:0f:5a:42:29:65:15:fb:da:28:47:3c:
                    9b:74:0e:02:e3:cf:a6:4c:4a:28:2e:4e:03:fb:1b:
                    42:42:6d:6d:be:86:b6:c3:5b:ed:f7:4a:16:4f:70:
                    f5:b8:24:9c:15:d2:c7:57:40:3d:94:fc:69:84:68:
                    35:51:4f:d5:db:ba:f3:e4:33:70:ee:d6:35:69:b6:
                    ac:1a:7a:cb:f3:d1:22:7c:9c:62:90:01:bf:cb:0c:
                    7a:18:f8:dc:bb:49:01:f8:13:36:3c:2b:a3:07:3b:
                    e7:94:bb:70:38:d6:fe:94:a7:2d:04:fa:8d:91:4b:
                    05:b1:98:cb:e5:27:bd:02:09:f8:de:72:c3:4d:fc:
                    e8:59:37:e5:c2:f5:e4:c3:0e:c5:c4:94:d8:5e:2c:
                    72:e9:f5:4d:95:bb:30:2a:56:27:e8:0a:14:58:e5:
                    c4:cf:77:6b:d6:c6:8f:83:45:23:0a:7f:36:01:f7:
                    a9:3d:da:81:67:88:7f:7c:fb:6d:a3:42:4f:72:6e:
                    32:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:71:EB:7C:EC:81:EE:5C:9B:31:56:66:B9:95:B6:AB:07:33:2C:6D
            X509v3 Authority Key Identifier:
                keyid:E0:01:3B:E6:1C:47:81:32:42:03:A7:DB:7D:11:67:4E:5D:70:7D:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/E0013BE61C4781324203A7DB7D11674E5D707D02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E0013BE61C4781324203A7DB7D11674E5D707D02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B97F6E450D535A00402E0FE81687ED200B1C9EE6884C4CCB2FA342D14B3D069A/0/323830333a65303a3a2f33322d3438203d3e20323639383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:ab:1b:31:fb:9e:10:d5:46:38:b1:7a:8b:f7:3d:13:7d:f9:
         13:cd:70:e5:3e:c7:ac:4b:72:7b:de:8a:0b:bc:18:82:f4:0f:
         90:fa:19:f0:b5:46:0b:5a:be:84:f9:e8:cb:d0:9d:70:3d:2d:
         a7:40:61:78:a9:9d:b7:b0:79:58:6a:a6:e5:14:79:d2:7d:40:
         41:b6:30:d1:55:e1:19:cf:3b:09:bb:9b:c7:28:b9:07:58:c8:
         c5:a2:d0:97:4a:27:06:23:66:cb:c4:48:5e:5e:ad:15:7b:b0:
         60:7c:b2:ef:1f:c1:68:3c:ce:97:69:8d:a1:dd:fd:67:bb:f1:
         b0:d4:fe:de:b0:02:b2:81:fe:26:7c:1e:b1:e3:34:cd:56:77:
         13:0e:e9:25:e2:c6:ea:2e:ef:96:ec:84:4b:a0:e1:3c:24:be:
         01:3d:12:50:d8:09:fe:48:31:f3:f6:0b:51:60:ef:82:38:b6:
         5d:97:b7:97:fa:43:11:1f:a2:ad:aa:48:28:c6:8c:4f:21:fc:
         45:90:5a:a7:a3:c2:92:47:bd:f9:2f:04:94:df:7f:44:db:2c:
         35:06:85:b0:98:9c:a3:3a:a9:18:c5:86:b0:7b:25:ff:e5:74:
         66:5b:b0:4c:51:2b:eb:22:b2:28:ae:c5:d7:2c:f1:e9:ac:47:
         91:6e:54:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----