Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/323830333a653738303a3a2f33322d3438203d3e20323633373137.roa
File:                     323830333a653738303a3a2f33322d3438203d3e20323633373137.roa (raw, json)
Hash identifier:          XGMPY3Cs9xImQEI+9hnlQmnYENV9D/Ge2HnSaQUyq2c=
Subject key identifier:   8B:91:8D:D2:74:93:98:E4:56:F6:26:4C:12:28:75:63:9F:CF:88:D4
Certificate issuer:       /CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
Certificate serial:       58703DF225CF05FE7638602C1252E4B13D69A0D4
Authority key identifier: 89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/323830333a653738303a3a2f33322d3438203d3e20323633373137.roa
Signing time:             Tue 04 Feb 2025 18:45:29 +0000
ROA not before:           Tue 04 Feb 2025 18:40:29 +0000
ROA not after:            Tue 03 Feb 2026 18:45:29 +0000
asID:                     263717
IP address blocks:        2803:e780::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:70:3d:f2:25:cf:05:fe:76:38:60:2c:12:52:e4:b1:3d:69:a0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CB216508CEF38CB2A68E45EBF4D418531E3799
        Validity
            Not Before: Feb  4 18:40:29 2025 GMT
            Not After : Feb  3 18:45:29 2026 GMT
        Subject: CN=8B918DD2749398E456F6264C122875639FCF88D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:85:f6:14:4c:98:cf:07:f0:75:b9:3d:50:47:
                    e8:62:d4:3b:66:ac:f2:81:ce:38:53:51:2b:0c:66:
                    1f:ba:9e:3a:15:d0:29:6d:43:10:ce:11:22:02:94:
                    c8:ed:b3:06:1f:c5:a1:27:f3:22:ce:54:ee:5f:a6:
                    57:00:bb:e8:01:49:4f:40:49:80:c6:7d:dd:71:37:
                    ff:4c:de:6f:26:c2:4d:73:70:38:d3:ca:36:dc:79:
                    6e:51:ac:36:9f:d1:c1:fe:c5:f9:34:2f:1e:52:b5:
                    76:4e:95:bf:5a:fb:51:e7:73:05:87:d1:f6:58:2a:
                    23:e2:1b:c9:6c:93:8c:1d:05:97:4c:67:80:0b:2a:
                    cd:9a:86:84:6a:a6:91:d7:0b:82:03:28:14:a8:c8:
                    2a:41:5e:8e:f7:88:11:a8:5c:12:39:c4:bb:f5:ec:
                    fb:81:cf:d1:50:21:57:ae:16:f4:6f:90:05:47:2b:
                    6b:cb:c6:33:76:e0:f9:18:99:28:5d:c5:25:a6:a1:
                    23:99:02:43:f4:bc:e9:5b:42:23:ed:53:c0:4d:ed:
                    63:4f:e3:66:b6:95:94:49:af:a8:a2:92:15:40:0a:
                    95:7f:00:92:3f:1c:44:fb:e3:96:b0:19:c3:a1:72:
                    b0:86:f3:e5:96:cd:2d:e9:91:26:7f:d4:62:7f:69:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:91:8D:D2:74:93:98:E4:56:F6:26:4C:12:28:75:63:9F:CF:88:D4
            X509v3 Authority Key Identifier:
                keyid:89:CB:21:65:08:CE:F3:8C:B2:A6:8E:45:EB:F4:D4:18:53:1E:37:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/89CB216508CEF38CB2A68E45EBF4D418531E3799.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C2636959026D5A687D6F068BECA5CABE5E8E9AB60A08F30EAC3F3249F4372B7D/0/323830333a653738303a3a2f33322d3438203d3e20323633373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e780::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:29:5d:96:dc:bb:67:dd:1c:88:f9:23:d9:de:2e:f6:41:7a:
         d7:ef:e9:15:a4:e6:7e:0d:5f:6e:11:5a:bf:f4:03:f7:61:b6:
         67:d1:9f:f4:24:b0:fe:71:9e:51:34:db:c3:6c:57:9e:32:99:
         f2:35:93:4b:36:d7:c4:a3:6a:ee:99:36:fc:2f:cf:99:e3:35:
         61:b5:60:97:1c:a4:35:7b:7c:95:c9:11:e5:59:dc:2f:f6:f5:
         13:3a:05:c3:db:b0:90:f9:6d:8c:a3:ab:77:00:67:b3:e5:ae:
         6c:c7:53:bf:74:ba:fb:10:5a:cb:09:9e:59:ff:99:22:5b:27:
         40:91:e3:04:7b:4a:d1:ad:9a:b9:a1:bf:e3:2b:88:98:4a:75:
         fa:f7:49:67:22:e6:a9:26:ed:18:bd:19:f0:e7:b5:4c:5b:9a:
         7e:49:d0:7c:f9:b9:e4:2d:83:12:34:47:c4:99:06:ae:4e:58:
         e6:28:be:87:87:e9:34:8d:53:b5:88:cb:c7:5c:ba:a9:60:1f:
         5c:8c:72:25:4c:1c:80:9d:f0:a0:c6:5c:82:aa:08:9b:f7:2d:
         4d:e6:1d:db:cb:4b:bf:b4:db:c5:e9:14:09:3f:e9:9b:00:68:
         18:c4:56:97:59:8c:f6:19:92:b1:7e:07:99:89:bd:77:fb:36:
         26:d9:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----