Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323633323338.roa
File:                     323830333a643232303a3a2f33322d3438203d3e20323633323338.roa (raw, json)
Hash identifier:          z8suASAtscWqW0GdXkGenggMQuFU3YkHs4KWvqOY36M=
Subject key identifier:   83:E5:DB:77:D8:FA:F4:EE:CA:25:37:02:B6:A2:6F:3D:47:40:79:53
Certificate issuer:       /CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
Certificate serial:       431FF3456FA027EF999C3A2CE4C35C592FC1BB3D
Authority key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323633323338.roa
Signing time:             Thu 27 Mar 2025 14:05:00 +0000
ROA not before:           Thu 27 Mar 2025 14:00:00 +0000
ROA not after:            Thu 26 Mar 2026 14:05:00 +0000
asID:                     263238
IP address blocks:        2803:d220::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:1f:f3:45:6f:a0:27:ef:99:9c:3a:2c:e4:c3:5c:59:2f:c1:bb:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66
        Validity
            Not Before: Mar 27 14:00:00 2025 GMT
            Not After : Mar 26 14:05:00 2026 GMT
        Subject: CN=83E5DB77D8FAF4EECA253702B6A26F3D47407953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d2:de:8d:d5:03:b5:5d:9c:e0:ee:31:8b:5e:
                    2d:ee:ea:6c:56:d0:25:78:6e:49:c3:83:03:44:c6:
                    ee:1e:bb:64:01:1f:48:c5:56:74:21:68:d3:7d:2b:
                    84:38:8e:85:d5:8f:5d:c5:55:40:da:95:f7:a2:b1:
                    fe:62:4b:ef:b8:12:05:70:4a:79:42:85:54:1e:72:
                    67:b2:0f:2d:b4:0a:39:6e:8f:51:53:9f:cd:b9:f6:
                    50:4c:51:68:13:09:49:32:10:c4:66:e4:1e:66:0b:
                    28:13:47:b2:60:6b:ca:87:3e:fa:5a:2d:cb:ae:fe:
                    9f:a6:f7:1b:01:0a:6c:9f:6f:44:a1:45:10:8e:e1:
                    2c:b3:1f:7f:b0:eb:ac:d4:ef:f5:df:d6:41:a6:da:
                    d5:4c:9a:c7:75:56:8d:df:f3:85:cf:15:7f:85:38:
                    b8:c6:f1:c3:26:8f:cd:f4:64:7a:e7:c8:89:38:d2:
                    9e:07:7c:03:f3:d9:cd:ef:39:42:e1:9b:49:04:ef:
                    eb:cc:32:84:ec:dc:fa:51:e7:cf:9a:b4:e4:95:53:
                    8f:51:55:27:e1:18:6a:25:f1:a8:9d:c5:66:0a:1e:
                    4f:25:b4:cc:ec:ab:15:0d:ce:52:ef:1a:0c:59:d5:
                    72:a4:c0:78:54:10:fa:1f:c4:19:96:33:45:45:38:
                    cc:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E5:DB:77:D8:FA:F4:EE:CA:25:37:02:B6:A2:6F:3D:47:40:79:53
            X509v3 Authority Key Identifier:
                keyid:B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/323830333a643232303a3a2f33322d3438203d3e20323633323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d220::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:c1:a6:76:81:d1:43:2c:7a:68:f4:23:48:a0:b5:9b:2d:1b:
         11:f7:b6:54:dc:e3:d8:73:e7:ff:64:f6:a9:10:38:88:ca:2f:
         05:b6:a6:2f:18:c3:10:52:10:5c:44:64:09:b4:e6:68:ee:a3:
         28:24:12:07:4b:5f:36:92:f0:df:0b:22:5a:d7:cf:cf:36:4a:
         fd:26:0b:6e:dd:a8:94:fa:28:98:4d:33:3b:75:f4:89:10:44:
         19:2c:8c:dc:fc:77:a1:24:8a:cf:8d:62:34:09:7d:77:3a:28:
         2e:af:b9:3d:cf:d5:49:3f:54:eb:e1:6e:89:c8:0f:50:f3:e2:
         eb:16:6b:d5:a5:35:fa:35:04:bf:6b:c6:64:47:fc:05:e6:db:
         60:48:9e:47:8d:a9:68:9b:f8:16:68:75:07:a5:16:a0:a5:f3:
         23:68:6c:05:60:76:58:4e:ec:57:b8:a7:f4:ce:ae:d4:41:fb:
         a0:c0:8e:a4:28:3f:c1:48:30:30:87:64:7a:7c:22:52:53:fc:
         a2:6e:34:af:4f:9e:1d:cf:e8:a6:5a:18:2f:ac:27:77:7c:2b:
         4e:db:45:a1:c3:c7:e3:7d:71:06:12:03:12:01:1b:fb:59:73:
         7d:07:e2:89:40:99:f1:c4:77:48:ff:c9:6a:5c:52:bc:c6:3d:
         47:2a:c1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----