Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/323830333a383336303a3a2f33322d3438203d3e20323639373739.roa
File:                     323830333a383336303a3a2f33322d3438203d3e20323639373739.roa (raw, json)
Hash identifier:          MBygkztOsFGH3Dl4dVdpP0JGq3Ce+F9tmpVcE4IOpu0=
Subject key identifier:   B0:A4:E4:6F:2A:7C:FD:2F:AD:77:E8:D6:BB:56:71:CE:15:3B:90:D2
Certificate issuer:       /CN=8FCCFBBE6DE0FDE4939CA30A509504E052D77675
Certificate serial:       1A0B5E02730DD42FD66B7BA55B10DE3968DD0287
Authority key identifier: 8F:CC:FB:BE:6D:E0:FD:E4:93:9C:A3:0A:50:95:04:E0:52:D7:76:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/323830333a383336303a3a2f33322d3438203d3e20323639373739.roa
Signing time:             Tue 04 Feb 2025 18:56:13 +0000
ROA not before:           Tue 04 Feb 2025 18:51:13 +0000
ROA not after:            Tue 03 Feb 2026 18:56:13 +0000
asID:                     269779
IP address blocks:        2803:8360::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0b:5e:02:73:0d:d4:2f:d6:6b:7b:a5:5b:10:de:39:68:dd:02:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCCFBBE6DE0FDE4939CA30A509504E052D77675
        Validity
            Not Before: Feb  4 18:51:13 2025 GMT
            Not After : Feb  3 18:56:13 2026 GMT
        Subject: CN=B0A4E46F2A7CFD2FAD77E8D6BB5671CE153B90D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:fc:33:21:bb:2e:2a:11:02:36:94:a9:a8:35:
                    dc:ae:dc:35:1b:57:55:da:c7:93:f0:82:d9:38:39:
                    65:fd:1b:25:3e:d4:60:00:7d:9d:59:4f:73:60:a0:
                    0a:eb:a7:e9:00:57:91:b8:55:bb:69:9d:bc:99:9d:
                    30:ff:dc:e8:28:c1:79:28:22:6f:af:a1:0f:fb:49:
                    31:7c:c5:19:ef:b7:21:84:3b:0c:86:41:d6:c1:a9:
                    66:76:3e:d7:20:3b:e2:da:7b:84:f0:dc:cf:36:5b:
                    9e:1a:13:18:61:7c:83:d3:89:73:fd:f6:b0:4f:b7:
                    84:bd:fa:be:f2:10:a6:af:c1:ac:74:47:84:d3:c7:
                    d4:be:9f:78:c9:57:93:35:d3:eb:51:7a:11:a8:e0:
                    61:be:b2:2e:82:5b:1e:29:c5:a2:8f:43:a8:9b:89:
                    62:ca:9d:d8:5d:4e:32:5a:7d:ce:ff:97:d5:ac:45:
                    d4:c8:60:c9:ed:87:9a:d3:43:93:a4:31:90:f2:d8:
                    ff:74:8f:e0:9d:8b:07:be:ff:60:93:da:01:7c:6c:
                    9e:2a:27:a4:f8:62:4a:39:00:cf:86:3e:4a:6a:61:
                    83:0c:62:7c:66:0c:e6:6f:8b:55:d2:00:4f:65:ed:
                    f7:2e:d3:21:d4:0f:92:07:31:c5:50:4a:8a:9f:b0:
                    52:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A4:E4:6F:2A:7C:FD:2F:AD:77:E8:D6:BB:56:71:CE:15:3B:90:D2
            X509v3 Authority Key Identifier:
                keyid:8F:CC:FB:BE:6D:E0:FD:E4:93:9C:A3:0A:50:95:04:E0:52:D7:76:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FCCFBBE6DE0FDE4939CA30A509504E052D77675.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD1DB9ED9F740B569671EA08376409CA7C9D760217CC109B95D7AD4D731C1271/0/323830333a383336303a3a2f33322d3438203d3e20323639373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8360::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:a8:39:d5:70:52:06:dd:4f:fb:d4:38:e1:6b:1e:60:03:f6:
         76:f0:e5:c1:d8:1f:09:42:08:10:b1:69:81:d8:29:a1:7f:ba:
         32:b4:1e:a8:a4:0b:2b:19:d7:b7:09:00:22:67:9d:73:16:d7:
         48:b0:75:be:c9:47:68:b0:09:d5:0a:6b:af:c9:d2:00:bf:f5:
         91:0c:c6:dd:cd:2d:04:1d:e5:f6:9c:1a:d0:da:60:b6:c2:d6:
         6d:49:6d:4b:5f:47:94:6b:6c:65:2f:a7:3f:5f:72:ee:ac:6a:
         f4:c6:04:68:c4:11:ac:c1:72:fd:3c:0a:3a:07:70:6b:77:3f:
         41:d3:e0:9e:21:91:47:e3:c9:13:95:7e:2e:35:b8:2b:b9:3b:
         a9:e0:ba:fe:f6:5c:34:ed:2d:11:4b:d1:9a:53:53:30:61:73:
         d7:25:fe:52:29:7a:f2:e3:b9:13:b7:64:a1:2e:d0:6f:51:b1:
         f5:36:ba:35:83:bf:ed:3e:e2:57:d8:dd:9b:58:1f:00:de:86:
         f5:dd:64:3f:2e:53:48:0f:e3:39:eb:8a:30:79:c5:51:96:f4:
         47:aa:10:c0:f7:21:7f:db:76:dc:ed:2b:d9:7d:53:0f:c6:43:
         2f:37:2d:34:c7:8c:0e:13:c8:c2:d4:69:23:e1:9e:35:04:47:
         62:bd:58:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----