Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663130303a3a2f34302d3430203d3e20323732383232.roa
File:                     323830333a313439303a663130303a3a2f34302d3430203d3e20323732383232.roa (raw, json)
Hash identifier:          1x5uwNyM3bMB9DGXIH2++bLX2gdj8wrtEgee92an/kQ=
Subject key identifier:   6D:2B:B3:A4:E9:B1:89:D3:06:C3:4F:A9:DB:C0:B6:83:47:A2:74:F3
Certificate issuer:       /CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56
Certificate serial:       2D3BA57876A49132117AE8BD0A5DAB63048B58D3
Authority key identifier: 53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663130303a3a2f34302d3430203d3e20323732383232.roa
Signing time:             Tue 04 Feb 2025 18:50:09 +0000
ROA not before:           Tue 04 Feb 2025 18:45:09 +0000
ROA not after:            Tue 03 Feb 2026 18:50:09 +0000
asID:                     272822
IP address blocks:        2803:1490:f100::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:3b:a5:78:76:a4:91:32:11:7a:e8:bd:0a:5d:ab:63:04:8b:58:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56
        Validity
            Not Before: Feb  4 18:45:09 2025 GMT
            Not After : Feb  3 18:50:09 2026 GMT
        Subject: CN=6D2BB3A4E9B189D306C34FA9DBC0B68347A274F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f3:53:8b:52:16:8d:88:57:33:90:7b:aa:f7:
                    31:ae:c9:23:0f:63:2f:6f:98:1c:1a:f2:ea:22:2a:
                    9c:b9:e4:62:76:f5:0e:de:93:ae:43:cb:ec:f6:ae:
                    e3:ac:45:7b:7e:64:ff:07:eb:77:80:94:f8:b0:45:
                    55:9a:6a:33:21:fd:20:98:db:85:c9:38:cc:b8:6a:
                    14:54:99:e4:7b:99:be:66:54:8a:9a:12:81:7f:3a:
                    98:da:05:dd:11:fd:fd:f2:f7:0a:6a:28:03:43:94:
                    2f:bf:eb:2d:4e:c7:58:f2:7f:3c:48:b3:22:4d:fd:
                    54:36:bb:37:5f:7b:67:96:b0:83:1f:bb:d7:47:7f:
                    58:38:35:56:2d:cf:39:78:84:72:5c:32:16:bb:fa:
                    73:31:2b:46:fa:47:44:be:07:c6:ac:22:71:51:cc:
                    d3:5b:0f:46:2a:dd:e8:2c:e4:76:5d:f5:21:a8:1b:
                    ce:6a:25:48:a8:58:01:9e:ad:36:23:c1:6f:32:e0:
                    4f:b4:74:38:ca:b2:c4:72:ac:a5:d1:29:06:11:ac:
                    3e:e6:ab:4c:89:2b:ef:66:25:58:42:d9:60:41:6c:
                    b2:4e:1b:ef:c8:5f:77:39:cd:b0:13:41:88:55:cd:
                    e9:c9:9c:cf:52:2f:c2:81:94:6f:18:f3:70:d4:79:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2B:B3:A4:E9:B1:89:D3:06:C3:4F:A9:DB:C0:B6:83:47:A2:74:F3
            X509v3 Authority Key Identifier:
                keyid:53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663130303a3a2f34302d3430203d3e20323732383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1490:f100::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:77:64:e9:c7:49:31:63:ec:41:96:be:3f:e6:42:eb:a3:b0:
         dc:88:5e:8f:62:98:e9:e6:a0:48:67:8b:2e:e4:4f:0d:05:95:
         de:01:6a:7a:88:40:36:41:d8:40:59:5e:d0:87:71:f3:5c:05:
         ed:29:05:c1:3c:c4:b5:8a:76:bb:a2:d4:df:f3:c8:e2:c2:b2:
         12:e0:b8:60:99:ba:c2:0a:b9:8c:be:c9:45:14:dd:2d:a1:cc:
         31:0b:6b:31:d9:aa:d5:ec:be:6f:6a:e7:32:27:9b:55:4c:54:
         c5:6b:26:aa:37:55:cf:65:2b:10:57:a9:4c:96:6c:76:f7:cf:
         69:c2:3d:b2:85:db:da:24:70:d4:e4:09:31:c3:68:bb:3a:e8:
         9f:f5:5e:94:b5:7d:c6:1d:5b:b3:4d:12:9a:41:64:61:fc:2b:
         d8:ef:20:ee:87:d2:46:18:25:f5:3c:32:96:93:a7:15:07:b6:
         eb:f3:97:27:cc:f2:25:8d:a4:bf:91:fe:b1:b6:d0:e5:e0:4b:
         c7:82:ce:95:96:c1:83:2d:64:09:c7:dd:8d:e9:b9:32:4d:58:
         5d:e7:d0:99:2d:1a:ac:78:be:04:b2:e3:86:44:bc:d8:f2:12:
         1d:9b:3e:9a:f9:8b:59:7d:6b:ab:7e:b1:b8:07:41:48:b6:29:
         91:e8:d4:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----