Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20323730303339.roa
File:                     323830333a643565303a3a2f33322d3438203d3e20323730303339.roa (raw, json)
Hash identifier:          ExaX8Ju9uJFBF+LrjLAeYhNIYbLBTlvkvrP+07nvC2o=
Subject key identifier:   1F:FF:99:67:5D:E7:C2:31:E0:F6:8F:C6:40:8C:15:47:66:3F:D3:0A
Certificate issuer:       /CN=534C99354C22A0048A232EFCDC85F70E7478E04F
Certificate serial:       0F9A5BBFD2DB087E9D54A7AF8BE20BC98743A0A4
Authority key identifier: 53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20323730303339.roa
Signing time:             Tue 04 Feb 2025 18:48:20 +0000
ROA not before:           Tue 04 Feb 2025 18:43:20 +0000
ROA not after:            Tue 03 Feb 2026 18:48:20 +0000
asID:                     270039
IP address blocks:        2803:d5e0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:9a:5b:bf:d2:db:08:7e:9d:54:a7:af:8b:e2:0b:c9:87:43:a0:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=534C99354C22A0048A232EFCDC85F70E7478E04F
        Validity
            Not Before: Feb  4 18:43:20 2025 GMT
            Not After : Feb  3 18:48:20 2026 GMT
        Subject: CN=1FFF99675DE7C231E0F68FC6408C1547663FD30A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a5:a2:89:9b:5d:72:19:41:e1:a1:e7:dc:40:
                    2b:f8:b3:ae:5f:43:9c:f3:16:2c:49:66:8c:a1:fa:
                    80:77:58:06:d5:bf:7a:16:b5:93:57:0e:d3:e7:3d:
                    61:fd:88:5c:db:f7:48:c9:76:9d:52:f2:f5:dc:19:
                    77:1b:d9:ce:5b:57:e3:87:95:79:9a:93:c1:de:61:
                    70:b3:7c:60:78:0f:9e:17:e2:72:33:c2:9d:15:f8:
                    3a:f8:68:66:ba:be:86:bf:9a:12:13:fd:fd:76:65:
                    c7:f3:19:45:f1:4d:ff:bd:f1:ff:ad:c1:48:1c:3b:
                    86:ef:ab:b6:c9:d7:ce:d8:a6:77:77:46:5b:e5:b4:
                    bb:2d:4e:4f:85:a2:10:70:31:a3:d1:6e:b5:08:9a:
                    17:dd:fe:a4:05:e0:b1:08:04:b4:57:69:aa:48:10:
                    fb:f6:62:47:e3:05:e0:8e:f6:8e:50:49:1a:3f:28:
                    c6:cb:20:64:69:9c:4c:cc:6b:36:39:b2:fc:a9:38:
                    8b:7f:41:27:60:de:da:8a:c0:ce:3a:fb:54:19:9b:
                    61:28:e3:dd:3a:74:c1:b4:d5:e5:8d:66:7f:00:7b:
                    e4:27:ee:1a:d5:16:bb:59:28:e6:e6:b2:02:7a:c2:
                    a2:cb:28:72:74:8a:0f:b4:3e:9e:34:68:30:1d:18:
                    0d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FF:99:67:5D:E7:C2:31:E0:F6:8F:C6:40:8C:15:47:66:3F:D3:0A
            X509v3 Authority Key Identifier:
                keyid:53:4C:99:35:4C:22:A0:04:8A:23:2E:FC:DC:85:F7:0E:74:78:E0:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/534C99354C22A0048A232EFCDC85F70E7478E04F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/534C99354C22A0048A232EFCDC85F70E7478E04F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DA66D71721CB7155993C1E47A85FA41D91EE0B6D9891A58CA8A444AE267E5638/0/323830333a643565303a3a2f33322d3438203d3e20323730303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d5e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:19:c7:39:2a:0c:28:cf:9d:e5:0d:ea:82:90:7a:99:39:
         ea:18:dd:65:8f:52:c6:44:5b:f1:37:a1:d9:56:db:c4:ca:94:
         5a:7a:19:4c:24:e8:ab:d4:ce:da:0d:b4:d5:26:28:1b:fd:cc:
         fd:05:fc:a1:dd:28:d6:3d:61:bb:82:a1:d7:d6:d1:b6:15:eb:
         3e:0b:66:59:50:0c:4d:6d:32:5c:e5:bb:30:75:20:44:dd:6f:
         5c:58:14:8c:16:d0:ad:cc:97:ef:48:70:bc:a2:27:e1:65:f8:
         57:07:ec:7f:73:f7:29:d1:bc:0a:ce:7a:d2:4b:61:89:4d:b3:
         dc:b9:ef:93:1e:20:e2:9a:e0:7d:01:49:75:b1:44:ff:94:3f:
         06:41:fe:b5:47:de:7b:15:ec:99:fd:22:c3:e4:75:c5:91:5e:
         02:f0:38:2a:be:f9:42:cc:21:e4:ec:d0:5d:5a:28:57:b0:e8:
         2a:cf:c3:e2:f2:92:b0:e8:f2:d4:32:8d:f8:a6:f8:e3:11:6f:
         91:fb:e4:8b:a5:da:95:00:1c:65:72:5d:50:dd:66:28:27:f7:
         4e:15:13:00:2c:42:00:89:cf:0a:da:d5:16:8c:e4:aa:9f:33:
         40:18:ea:92:70:04:97:1c:5b:08:49:7b:3e:65:de:04:44:03:
         11:97:d3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----