Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/323830333a3965303a3a2f33322d3438203d3e20323731383838.roa
File:                     323830333a3965303a3a2f33322d3438203d3e20323731383838.roa (raw, json)
Hash identifier:          xaBYswepU1RsVj2QEip2hrYkY+vE78e61zH2SbHz6Uc=
Subject key identifier:   4D:49:E9:31:2E:6A:28:B8:93:62:28:0C:5B:C3:C2:34:0C:B0:F6:04
Certificate issuer:       /CN=A1E12285090E8FA250FB58E4DF42D3BC08A60EDD
Certificate serial:       7539089EF48ED75060281F3E20CF146902E2A482
Authority key identifier: A1:E1:22:85:09:0E:8F:A2:50:FB:58:E4:DF:42:D3:BC:08:A6:0E:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/323830333a3965303a3a2f33322d3438203d3e20323731383838.roa
Signing time:             Tue 04 Feb 2025 17:59:57 +0000
ROA not before:           Tue 04 Feb 2025 17:54:57 +0000
ROA not after:            Tue 03 Feb 2026 17:59:57 +0000
asID:                     271888
IP address blocks:        2803:9e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:39:08:9e:f4:8e:d7:50:60:28:1f:3e:20:cf:14:69:02:e2:a4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E12285090E8FA250FB58E4DF42D3BC08A60EDD
        Validity
            Not Before: Feb  4 17:54:57 2025 GMT
            Not After : Feb  3 17:59:57 2026 GMT
        Subject: CN=4D49E9312E6A28B89362280C5BC3C2340CB0F604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6d:36:96:b7:79:ec:b2:6c:84:9d:b4:da:3e:
                    b5:3c:1d:78:f8:05:81:c0:db:20:84:16:05:07:d0:
                    10:11:8e:44:1c:06:77:f4:65:20:eb:bc:9e:27:91:
                    bf:d3:ac:6c:46:6c:ba:f8:f3:4d:c1:86:6e:d2:51:
                    fc:9f:3f:e3:ae:03:3c:68:fa:f4:6c:05:5c:61:76:
                    05:a4:71:98:6a:1f:ca:0f:eb:b2:e8:e3:2a:a4:32:
                    9d:fd:ac:2d:70:f3:00:40:19:ee:b4:f2:6f:ba:fc:
                    de:a2:93:2a:4b:45:c2:64:2f:da:98:6c:5d:c2:e8:
                    27:f5:45:da:15:7e:f8:d9:35:f8:33:4d:8d:33:38:
                    89:b4:a2:2a:66:26:58:f6:db:a1:93:46:fd:e0:9a:
                    5e:2c:73:0c:b4:a6:f5:47:33:08:7d:19:cb:e9:64:
                    57:64:a3:ca:6d:8e:cc:23:17:14:2c:f0:2f:f7:5f:
                    7e:9b:b8:ec:fc:a1:e8:a7:08:cf:71:95:49:8d:ed:
                    90:ad:f8:65:52:c3:26:f5:f7:05:15:9d:d7:ec:1f:
                    38:bc:82:25:8b:d0:36:cf:b3:ab:b5:11:0b:ac:56:
                    46:44:81:19:47:ca:04:33:b2:34:f7:59:a5:58:7b:
                    1e:5d:26:69:b5:4e:25:fd:a3:49:2e:6a:e5:68:8b:
                    e8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:49:E9:31:2E:6A:28:B8:93:62:28:0C:5B:C3:C2:34:0C:B0:F6:04
            X509v3 Authority Key Identifier:
                keyid:A1:E1:22:85:09:0E:8F:A2:50:FB:58:E4:DF:42:D3:BC:08:A6:0E:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A1E12285090E8FA250FB58E4DF42D3BC08A60EDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEB0840B0F8872DB8B5A259858FE5AC3524DFD117B0FA41AA9A9C95C6B87E432/0/323830333a3965303a3a2f33322d3438203d3e20323731383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:d8:72:f8:3d:de:ea:ad:4e:02:b8:e6:23:d5:8c:8f:de:
         15:9b:5f:f2:39:39:66:45:14:53:1b:b9:90:88:81:a9:2f:f7:
         3d:c0:58:14:fc:3d:05:b0:1a:2b:76:45:b9:d3:cc:f2:98:37:
         11:39:83:07:83:e2:b0:ca:4a:7b:01:51:26:02:7e:9b:91:b4:
         20:95:73:80:6b:61:fa:e7:29:ca:45:86:0f:ae:b5:aa:b3:d1:
         e0:35:a0:37:0b:3c:65:f9:bb:a3:6a:1a:fd:62:d2:35:2e:70:
         14:1d:74:ea:bd:0c:06:dc:50:13:32:6d:d3:12:ba:39:d9:06:
         82:25:37:0b:e6:8a:a4:d3:5a:fe:e5:cd:7f:9b:0f:07:02:5b:
         2b:96:fb:64:7a:62:d5:67:be:a8:de:25:7f:bc:04:41:f4:e5:
         ec:f3:99:1c:47:10:2e:14:7a:c5:42:c6:65:0b:a4:d0:c1:99:
         20:4f:4e:a9:90:7d:81:7e:cf:6c:bb:33:4f:13:d6:49:5a:ae:
         7c:8a:7c:d7:5f:89:b8:9b:0b:c9:ea:e1:dd:b7:c0:2d:7c:52:
         be:2f:5d:39:01:79:0d:6f:14:83:84:55:96:cd:b3:44:5a:93:
         9e:32:ed:c0:e4:f4:b5:7f:71:e8:3d:6d:d6:1f:11:f3:ff:59:
         ae:dc:c2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----