Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/323830333a353030303a3a2f33322d3332203d3e203237383737.roa
File:                     323830333a353030303a3a2f33322d3332203d3e203237383737.roa (raw, json)
Hash identifier:          dy/oGUAPkqNtqs0dguFuFwoVUmuMFJhnEZ0w5rvhZFM=
Subject key identifier:   45:D4:27:C0:ED:5A:E4:01:E3:41:0E:2E:AC:A1:E5:B1:A0:85:A3:E3
Certificate issuer:       /CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
Certificate serial:       240B7732069AC09BE1D81E10E71E22B7A10E2B7E
Authority key identifier: 1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/323830333a353030303a3a2f33322d3332203d3e203237383737.roa
Signing time:             Tue 04 Feb 2025 18:36:54 +0000
ROA not before:           Tue 04 Feb 2025 18:31:54 +0000
ROA not after:            Tue 03 Feb 2026 18:36:54 +0000
asID:                     27877
IP address blocks:        2803:5000::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0b:77:32:06:9a:c0:9b:e1:d8:1e:10:e7:1e:22:b7:a1:0e:2b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EF3435C38C02A32C5521ED72EAEE2325D41541F
        Validity
            Not Before: Feb  4 18:31:54 2025 GMT
            Not After : Feb  3 18:36:54 2026 GMT
        Subject: CN=45D427C0ED5AE401E3410E2EACA1E5B1A085A3E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:68:a1:77:7b:80:3d:b2:2a:38:4f:7c:a4:
                    ef:3a:b9:bd:3e:25:1a:bb:8b:9d:f3:d2:cc:7b:d5:
                    8e:8a:b8:35:94:fa:d0:4c:af:e8:33:c1:16:33:67:
                    3b:58:3b:78:6e:b2:52:f8:c6:be:83:e1:47:30:0e:
                    39:ea:9e:46:c4:03:6f:d4:e5:25:ef:61:56:5d:f0:
                    8e:9f:7d:6c:31:5b:ee:9c:d0:c8:7e:ef:8f:22:7a:
                    e9:00:f3:fb:c6:de:1e:65:5f:8f:88:2c:c9:74:13:
                    ca:b4:fe:29:2c:48:63:a5:0f:bb:ac:80:87:9d:25:
                    a2:06:e9:75:90:a1:d9:6b:e1:f1:19:a2:08:39:d7:
                    89:6e:5b:31:22:e1:fe:7b:13:e5:2d:cf:47:4b:01:
                    ac:8a:05:3c:61:e6:39:02:26:d5:80:6f:ef:4d:e2:
                    a2:b8:45:c8:4c:df:ec:75:c6:8c:38:7a:e7:bd:0a:
                    c5:d9:94:5d:cd:a6:a2:13:9d:07:dc:ac:0c:4c:ac:
                    8a:db:f4:17:98:f9:7b:42:94:37:5f:c3:3b:33:a8:
                    af:d0:9f:16:5d:6d:0a:28:c5:8a:ba:66:fe:08:ca:
                    a3:c5:0b:78:fa:74:8f:a8:5b:37:51:b9:05:68:4e:
                    8e:f9:38:fe:e3:8b:51:5f:6b:57:57:41:6a:78:73:
                    08:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D4:27:C0:ED:5A:E4:01:E3:41:0E:2E:AC:A1:E5:B1:A0:85:A3:E3
            X509v3 Authority Key Identifier:
                keyid:1E:F3:43:5C:38:C0:2A:32:C5:52:1E:D7:2E:AE:E2:32:5D:41:54:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/1EF3435C38C02A32C5521ED72EAEE2325D41541F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD69A7E31343095562D77E9BAB618F4F10B2E01C61CDA018DDFB488D65B14E60/0/323830333a353030303a3a2f33322d3332203d3e203237383737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5000::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:a3:2a:dd:26:4e:ff:fb:f1:f0:75:f5:a1:7a:b8:c0:75:9d:
         71:ee:56:a3:38:ee:51:44:57:ef:65:76:2d:5a:72:6b:47:56:
         46:b7:a6:cf:30:17:f1:5d:25:cc:4d:7a:ae:ad:b8:db:1e:c1:
         15:78:1f:88:95:9e:0f:ef:b1:c7:92:47:d6:87:10:69:9a:31:
         80:b4:ac:a0:ee:04:2e:ce:b1:c5:02:69:b9:69:a4:50:c4:77:
         a9:5f:02:30:90:29:9c:bf:8d:ba:1f:c6:fc:97:5c:35:49:e5:
         3c:98:58:b1:d0:86:85:ff:9f:3e:e6:1c:89:68:a5:08:79:5c:
         18:5b:80:8a:7a:4f:a8:d1:aa:db:15:36:0a:dc:17:b1:dd:60:
         ba:ad:34:3b:55:7f:a2:f5:62:bb:62:14:c2:c4:4e:4b:c5:b3:
         f5:23:17:44:7e:b8:54:ee:ca:a7:5b:fe:72:1d:07:6a:e6:5e:
         60:82:40:b1:74:f6:0e:1f:54:83:03:4f:80:84:5f:04:5f:9e:
         3b:a0:ab:1e:01:b3:64:2d:64:ae:ba:8f:2e:0c:39:e3:39:bb:
         27:7e:21:cc:20:8c:ad:90:de:f4:db:dc:7a:da:81:59:a9:d0:
         21:b2:9b:15:79:e1:37:ac:95:c7:0b:c2:96:c0:c9:7f:a9:bd:
         6e:6d:00:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----