Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/323830333a326534303a3a2f33322d3438203d3e203237373936.roa
File:                     323830333a326534303a3a2f33322d3438203d3e203237373936.roa (raw, json)
Hash identifier:          u5/B1sZWSaItXoKyG+JZh2UkPdCrzkIFdJ7VRgr2+uY=
Subject key identifier:   B3:D2:AA:AC:C8:3B:DD:A8:4D:1C:C9:E4:2B:5A:E5:2C:DB:55:CC:1E
Certificate issuer:       /CN=8F0ED550857A433130395BAAF91EB758467C8A1E
Certificate serial:       2F9CC23CED9284AE16C2A336909D54B4FAD709CD
Authority key identifier: 8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/323830333a326534303a3a2f33322d3438203d3e203237373936.roa
Signing time:             Tue 04 Feb 2025 18:04:02 +0000
ROA not before:           Tue 04 Feb 2025 17:59:02 +0000
ROA not after:            Tue 03 Feb 2026 18:04:02 +0000
asID:                     27796
IP address blocks:        2803:2e40::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:9c:c2:3c:ed:92:84:ae:16:c2:a3:36:90:9d:54:b4:fa:d7:09:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F0ED550857A433130395BAAF91EB758467C8A1E
        Validity
            Not Before: Feb  4 17:59:02 2025 GMT
            Not After : Feb  3 18:04:02 2026 GMT
        Subject: CN=B3D2AAACC83BDDA84D1CC9E42B5AE52CDB55CC1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:39:28:95:b1:5d:d9:0e:2a:ab:ae:c8:be:78:
                    d9:e2:75:f8:09:4f:3d:ab:e1:b1:b7:95:ba:f1:b4:
                    42:2b:e6:d3:14:99:12:10:8b:74:c2:c3:b9:6b:a9:
                    65:b2:5c:8c:78:6f:91:b3:21:b4:f3:06:b5:05:9c:
                    ef:06:3a:fa:91:82:3f:40:ae:71:b6:84:90:72:ca:
                    76:d5:27:ab:00:cb:c0:0b:42:b7:20:6f:00:73:40:
                    11:25:da:15:9d:9b:cc:02:48:9a:61:2d:fd:75:e8:
                    2a:5d:ea:45:ec:d4:16:96:f0:45:64:1c:16:1a:b1:
                    20:45:b6:66:7e:1a:f8:e1:8e:07:68:65:dc:b7:36:
                    b7:10:bc:89:3c:e4:b6:7b:8a:a5:8b:5d:63:10:0e:
                    16:63:49:e5:fe:f9:a4:c4:f6:22:48:80:cf:2b:8f:
                    c7:6e:ef:55:a2:b0:54:55:e3:2a:ec:5f:8b:c9:0e:
                    f9:d0:d4:f7:c0:f1:26:72:33:e9:7e:58:10:c3:ad:
                    2f:a8:b1:18:3a:1e:f5:01:df:ae:ae:88:79:15:ae:
                    2d:27:61:66:da:a5:13:91:5d:3d:f9:20:5f:b8:ef:
                    1e:24:37:3d:b2:32:26:25:9a:85:cc:4a:c5:67:fb:
                    b7:d8:ce:f1:17:40:a5:78:89:29:e4:e6:8a:b8:7e:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:AA:AC:C8:3B:DD:A8:4D:1C:C9:E4:2B:5A:E5:2C:DB:55:CC:1E
            X509v3 Authority Key Identifier:
                keyid:8F:0E:D5:50:85:7A:43:31:30:39:5B:AA:F9:1E:B7:58:46:7C:8A:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/8F0ED550857A433130395BAAF91EB758467C8A1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8F0ED550857A433130395BAAF91EB758467C8A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/C7800409A6C622ABD22B8498F1ACAC3A9345833A2F35B0552A2FEDC6FE85CE21/0/323830333a326534303a3a2f33322d3438203d3e203237373936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:2a:fe:3a:87:56:e4:c7:9c:5b:23:5b:55:b5:67:48:18:27:
         42:d6:b1:61:29:af:c5:ff:3c:cc:a5:0b:dc:b2:26:fc:83:62:
         77:3a:d1:c3:a2:02:5b:90:85:84:4e:fc:d4:e4:b8:45:85:ec:
         13:9b:4d:6d:80:b2:d2:f1:a1:a0:e0:cc:71:0c:15:a8:f1:61:
         2c:40:52:6b:53:01:b6:b3:f3:63:83:b5:49:8a:34:45:10:77:
         cd:3d:fa:0e:1e:3e:78:e3:35:fb:29:85:9a:ba:03:ea:f2:79:
         f5:2f:7d:95:63:23:99:1e:eb:ab:88:1f:7b:40:ac:0d:95:3b:
         88:54:ee:c2:79:db:1f:fc:46:68:ba:b0:96:61:02:1b:34:7b:
         89:4c:c7:94:7d:bf:7e:30:27:76:41:b3:3e:59:d2:d5:20:9b:
         c5:dc:11:7f:aa:ce:b5:48:a8:6e:08:49:47:c3:cc:e2:1d:7b:
         5d:39:f4:90:8c:00:38:bd:de:33:ad:53:5e:4e:26:5d:44:00:
         c1:fd:82:64:1f:44:ab:b3:64:27:34:88:bd:f9:af:ae:ed:d8:
         2e:54:ed:96:8d:ce:7e:8e:06:d2:54:2b:fd:3c:23:b5:48:9e:
         3a:ff:52:72:6a:03:0b:d2:6f:a4:c7:db:1b:77:c1:3e:8c:85:
         0b:67:9f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----