Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e20323635363739.roa
File:                     323830333a633163303a3a2f33322d3332203d3e20323635363739.roa (raw, json)
Hash identifier:          wq5tUkKuUReQVSGTdTpSqn4lCVZZpi7Q7lYTlkravNw=
Subject key identifier:   8C:DB:78:A0:7F:E6:CA:32:F3:28:F9:7F:DB:6F:11:1C:E9:54:CB:EA
Certificate issuer:       /CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
Certificate serial:       05366CE0175D8164A401330F9D024BCD2049D8EC
Authority key identifier: 60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e20323635363739.roa
Signing time:             Tue 04 Feb 2025 18:19:29 +0000
ROA not before:           Tue 04 Feb 2025 18:14:29 +0000
ROA not after:            Tue 03 Feb 2026 18:19:29 +0000
asID:                     265679
IP address blocks:        2803:c1c0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:36:6c:e0:17:5d:81:64:a4:01:33:0f:9d:02:4b:cd:20:49:d8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=604B953E7CDFD156CD44C7E9BEDC37AE69B43881
        Validity
            Not Before: Feb  4 18:14:29 2025 GMT
            Not After : Feb  3 18:19:29 2026 GMT
        Subject: CN=8CDB78A07FE6CA32F328F97FDB6F111CE954CBEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b4:e5:0e:9f:18:b0:cf:d7:8f:7c:51:ad:c0:
                    81:ae:15:ad:1c:28:11:e0:0b:68:af:70:eb:97:6d:
                    99:6d:31:71:b6:12:55:4d:f5:24:03:97:fd:c6:df:
                    f2:17:31:05:c9:ae:1f:b6:0c:b0:f7:c0:7a:79:15:
                    5e:76:c8:60:5c:cf:6e:ce:00:47:91:00:fb:61:18:
                    18:65:40:a6:6e:9b:eb:43:15:4c:04:56:8c:22:24:
                    9f:a6:9e:d1:f0:d9:b7:da:cc:30:a4:9f:9b:d1:ea:
                    90:c4:97:99:9c:d6:04:1d:85:2e:70:01:e3:74:0b:
                    09:ca:b7:30:7d:1d:c5:df:8b:60:95:d2:fb:e9:29:
                    2e:a5:53:8b:56:6e:aa:cf:16:48:3a:ad:01:cc:e9:
                    75:2e:28:90:1b:a7:9b:d1:39:c6:dc:ac:da:b5:e8:
                    19:8c:e3:bf:20:f0:df:87:76:c8:f1:51:c0:f5:e7:
                    c2:dc:7b:3b:45:d3:1b:00:b4:af:fc:84:d3:1d:9f:
                    72:da:19:46:ac:26:f4:3d:a3:1d:81:ca:4f:22:20:
                    ce:c6:43:0e:15:85:a6:0a:7f:c3:7b:db:01:ef:7a:
                    d5:45:84:62:85:f5:79:f4:6d:07:af:19:ac:81:e4:
                    d4:08:0f:c7:c9:e4:8e:1d:a9:f6:e0:3a:f2:a0:0a:
                    51:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DB:78:A0:7F:E6:CA:32:F3:28:F9:7F:DB:6F:11:1C:E9:54:CB:EA
            X509v3 Authority Key Identifier:
                keyid:60:4B:95:3E:7C:DF:D1:56:CD:44:C7:E9:BE:DC:37:AE:69:B4:38:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/604B953E7CDFD156CD44C7E9BEDC37AE69B43881.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D537967189F4B25A1A7EBED3A2A9C45EBC99DE9BB68ECAE6D5F60D1354ED6387/0/323830333a633163303a3a2f33322d3332203d3e20323635363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c5:3e:6f:2f:5e:f6:22:ef:a2:13:1a:71:3d:00:ae:84:ef:ef:
         65:49:8a:a4:9b:d2:2c:57:0c:72:60:74:43:7b:06:62:d8:cc:
         98:0f:46:d2:84:5c:bf:77:d8:35:fa:b0:81:84:d5:63:66:93:
         3c:59:fc:d0:da:72:c4:e9:ed:8e:2e:f3:26:69:27:e2:e2:31:
         b1:31:73:1b:86:f8:e0:50:b2:4b:ca:80:af:3e:0a:bf:1f:e6:
         a1:9a:65:ce:f7:74:22:de:33:1c:58:9f:07:52:9b:08:3d:e3:
         55:73:e5:7c:69:81:ec:a1:01:fe:a4:4e:f7:d8:d5:be:b4:d6:
         06:f6:a7:ab:d2:ee:b5:03:c1:36:c7:c7:be:f0:08:89:21:22:
         48:09:f5:bf:8d:47:6a:9b:84:b1:0d:a4:0e:f2:59:0c:39:d2:
         7c:6b:9e:28:91:55:51:a6:e9:8f:dd:e3:50:e7:2a:97:12:c6:
         d7:30:cc:f2:aa:97:c1:70:df:65:0a:0c:35:a0:d9:08:de:f5:
         20:0f:74:c1:64:f6:fe:bd:70:96:5b:ff:5d:6d:82:fd:77:e4:
         21:3f:ae:7d:3c:6c:13:d8:e3:99:d9:a9:31:79:2a:d1:0a:01:
         bb:79:79:7b:ac:aa:31:7d:07:14:ce:1f:ac:05:cb:78:3a:0d:
         d3:45:46:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----