Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663330303a3a2f34302d3430203d3e20323732383232.roa
File:                     323830333a313439303a663330303a3a2f34302d3430203d3e20323732383232.roa (raw, json)
Hash identifier:          ESBV8IMBO2ZnkScpRidAUeqohL5GuQ8oT3TxfEDBnU8=
Subject key identifier:   01:8B:87:91:8C:2D:FF:55:78:F8:C5:40:51:74:38:6B:5A:56:03:8E
Certificate issuer:       /CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56
Certificate serial:       7068F65A8965C3870D46CAD7AD474F0F8D4FBF44
Authority key identifier: 53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663330303a3a2f34302d3430203d3e20323732383232.roa
Signing time:             Tue 04 Feb 2025 18:50:09 +0000
ROA not before:           Tue 04 Feb 2025 18:45:09 +0000
ROA not after:            Tue 03 Feb 2026 18:50:09 +0000
asID:                     272822
IP address blocks:        2803:1490:f300::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:68:f6:5a:89:65:c3:87:0d:46:ca:d7:ad:47:4f:0f:8d:4f:bf:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53C52096D7FFB235A3DF184910FA4B7547FE2D56
        Validity
            Not Before: Feb  4 18:45:09 2025 GMT
            Not After : Feb  3 18:50:09 2026 GMT
        Subject: CN=018B87918C2DFF5578F8C5405174386B5A56038E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:a8:32:3d:fe:bb:1b:63:46:4f:df:13:85:
                    37:5e:c5:3e:49:5c:01:b2:8e:94:b3:d2:76:10:5d:
                    b5:05:8e:6f:23:18:4c:42:9f:3f:02:42:b5:5c:d6:
                    5b:0d:42:90:7b:e3:16:fb:08:b6:e2:23:bd:1c:13:
                    5d:9a:70:98:f8:9a:fa:ae:a9:df:a3:4f:a2:97:12:
                    8a:d2:e1:7f:40:c2:88:18:24:92:0b:a4:f6:4f:cd:
                    42:66:03:16:28:89:1d:da:15:31:68:cf:69:00:58:
                    de:cf:2a:03:1e:36:a7:2a:61:62:5b:d9:9c:ef:f4:
                    27:f3:9f:6c:a4:54:26:cc:b9:30:de:0b:09:28:6f:
                    48:d0:85:dd:3f:02:3d:69:83:37:35:eb:5b:d8:74:
                    7d:af:52:08:68:6d:96:a2:ff:3e:d1:f0:f2:0a:4a:
                    98:53:04:b7:24:9d:93:a0:3d:b2:8f:c5:dc:bc:f1:
                    ce:52:e7:49:27:b2:c2:3b:71:95:66:80:e1:60:7c:
                    ad:39:92:96:4a:45:51:41:f7:11:03:65:79:e4:de:
                    e8:ad:4f:02:a5:c8:f9:41:4b:f4:09:ea:fe:8f:f6:
                    4e:d9:3c:f0:a3:c1:59:cf:a8:13:68:32:3b:30:aa:
                    c7:89:1a:f5:0b:5f:dd:e6:01:2f:cd:44:84:6d:32:
                    57:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8B:87:91:8C:2D:FF:55:78:F8:C5:40:51:74:38:6B:5A:56:03:8E
            X509v3 Authority Key Identifier:
                keyid:53:C5:20:96:D7:FF:B2:35:A3:DF:18:49:10:FA:4B:75:47:FE:2D:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/53C52096D7FFB235A3DF184910FA4B7547FE2D56.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BEE9537672DB3897F6CA78363FBA95E7FE602B9E908873F0179889A112DC6B9B/0/323830333a313439303a663330303a3a2f34302d3430203d3e20323732383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1490:f300::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:76:d2:80:59:1e:ee:4b:c4:39:c6:f0:59:81:14:a5:97:7b:
         9f:13:6a:42:47:2d:70:50:bf:86:2e:17:c6:6f:2b:b1:6b:00:
         f9:fb:96:62:01:b1:5c:78:94:62:f3:50:8d:8e:32:72:a1:cf:
         7b:59:9c:69:92:f7:2a:92:67:29:bd:93:0c:a2:eb:4c:71:77:
         1a:e8:b4:48:f8:57:ec:d8:f8:09:e6:bb:5e:b5:b5:58:de:dc:
         18:82:5c:61:ee:22:02:40:2e:c4:5f:26:1b:fc:0d:20:d8:dc:
         76:3e:48:2d:2e:42:91:df:b0:1a:42:9a:78:2a:ec:ad:9b:80:
         55:f8:e7:37:75:49:66:a0:72:07:1a:84:71:4b:51:10:e6:49:
         35:90:1e:33:bc:4b:44:22:95:5a:27:5b:11:19:5a:28:94:27:
         75:5f:b1:eb:f4:98:11:c9:e8:fa:18:e2:b4:74:4d:25:cc:72:
         fa:3d:bb:9d:6d:84:b8:5b:30:17:ce:88:46:5b:cb:6e:1b:1d:
         d4:19:13:f8:55:4f:9f:f6:35:fa:59:ad:82:3e:9b:8a:bf:e5:
         ec:1d:d0:72:2d:37:a3:e5:65:4f:f5:51:23:18:0f:c5:b4:0e:
         2d:b2:76:56:26:b8:38:ca:65:8c:78:f8:77:fa:3a:3b:f6:19:
         4e:f2:d5:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----