Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/323830333a3663303a3a2f33322d3438203d3e20323635363339.roa
File:                     323830333a3663303a3a2f33322d3438203d3e20323635363339.roa (raw, json)
Hash identifier:          wdLxyM4Y2xzR+rW5eCfS0zJcq+rkMbj7bFC0pTAEZGM=
Subject key identifier:   E5:A1:88:35:B4:5C:84:B4:70:DE:3F:66:C4:03:A9:DD:6D:C7:2C:D8
Certificate issuer:       /CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
Certificate serial:       510EC613C2EDDB2B320942318BCA508DD3AE409E
Authority key identifier: 97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/323830333a3663303a3a2f33322d3438203d3e20323635363339.roa
Signing time:             Thu 26 Dec 2024 17:00:00 +0000
ROA not before:           Thu 26 Dec 2024 16:55:00 +0000
ROA not after:            Thu 25 Dec 2025 17:00:00 +0000
asID:                     265639
IP address blocks:        2803:6c0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:0e:c6:13:c2:ed:db:2b:32:09:42:31:8b:ca:50:8d:d3:ae:40:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977DAB0EC7A954C08AF09602FA1EA52D5912541B
        Validity
            Not Before: Dec 26 16:55:00 2024 GMT
            Not After : Dec 25 17:00:00 2025 GMT
        Subject: CN=E5A18835B45C84B470DE3F66C403A9DD6DC72CD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1b:71:8e:76:a7:42:e7:75:84:21:5f:e8:4d:
                    79:1d:82:17:68:19:5f:48:fa:d0:1e:f6:f8:fd:65:
                    62:80:4f:20:ee:1a:72:90:a8:f4:37:d6:9d:9a:c6:
                    d6:16:d4:46:5b:15:e5:0a:59:b7:ab:02:ab:e9:e0:
                    57:b9:ff:c8:19:38:f5:2a:08:b9:9b:19:f0:e3:32:
                    5e:97:fe:d0:53:13:06:bf:88:49:80:5f:4d:09:9c:
                    47:78:c6:41:14:89:17:f7:59:db:ad:7d:46:ed:46:
                    84:59:69:08:9e:31:71:55:7c:ec:9a:f9:a8:c0:8e:
                    9d:70:68:fd:34:d2:e7:2d:89:31:8f:8f:55:b8:2f:
                    09:9f:1e:ed:f7:86:a8:bb:1e:a8:0c:e8:83:4e:39:
                    99:a0:56:4f:79:96:0a:62:87:43:cd:42:85:2b:da:
                    d0:5c:aa:f8:ed:d8:a5:7c:b5:69:91:43:34:b6:6b:
                    3b:fd:fd:12:20:04:0a:50:73:76:f6:82:f2:3d:24:
                    ca:23:30:cb:5b:f9:4e:77:fc:89:f5:6d:5c:1f:7f:
                    82:28:80:f6:71:28:12:5d:50:09:06:2c:a1:37:40:
                    51:f3:2e:e7:5d:f5:98:05:ec:1f:7b:a2:7d:56:71:
                    c3:2d:0c:dc:28:68:f3:40:c1:73:34:00:51:70:75:
                    21:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A1:88:35:B4:5C:84:B4:70:DE:3F:66:C4:03:A9:DD:6D:C7:2C:D8
            X509v3 Authority Key Identifier:
                keyid:97:7D:AB:0E:C7:A9:54:C0:8A:F0:96:02:FA:1E:A5:2D:59:12:54:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/977DAB0EC7A954C08AF09602FA1EA52D5912541B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BFC6EA414BF9B1570594B2D4DADB3465358B3410C9DD1F22B003862330C090F9/0/323830333a3663303a3a2f33322d3438203d3e20323635363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:dc:1d:54:5e:d3:55:76:01:50:01:ce:d4:d7:32:f5:d0:58:
         97:6b:32:bb:fc:1d:2c:51:e3:38:85:e0:ea:62:b9:ff:bc:9a:
         e1:75:e7:76:47:54:8f:05:6b:f7:e9:0e:e1:2c:25:78:db:43:
         6b:2e:39:c9:01:ba:a1:37:03:f6:8d:74:c6:f2:07:63:63:99:
         8a:14:bf:5b:51:9f:e7:3d:eb:78:9a:98:6e:0f:fb:c6:f0:51:
         6a:27:76:b5:a1:25:54:41:1c:0d:66:e0:12:ae:12:44:fd:e4:
         0f:8e:81:f2:5e:ae:a6:5d:bb:dc:71:e2:91:bb:64:fa:27:00:
         e9:0b:d0:ee:07:29:02:82:e7:41:61:44:f8:91:92:ca:80:d0:
         4c:12:01:33:7b:8a:d1:ed:c2:82:34:aa:71:49:e6:72:75:96:
         c5:0d:e6:e8:64:ad:e7:97:21:37:41:0f:8b:19:be:4a:16:f2:
         7c:d3:05:7d:40:75:5a:41:a6:db:c6:e1:a2:a4:a3:59:4a:e2:
         ec:0e:38:1a:6f:5d:5f:01:6e:ff:56:02:b5:59:c8:ed:61:aa:
         31:ab:f4:0b:7b:e4:45:59:97:82:ff:0c:71:44:bc:89:b8:ab:
         e0:b5:a2:6f:48:4c:5c:28:47:4b:0e:c9:85:e7:ae:78:22:a0:
         8d:10:14:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----