Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/323830333a333831303a3a2f33322d3438203d3e20323731383339.roa
File:                     323830333a333831303a3a2f33322d3438203d3e20323731383339.roa (raw, json)
Hash identifier:          3210TdmahXk1vHiIapLHiNQOIVAyIIlWlsQSEJlbR48=
Subject key identifier:   BA:98:4C:DE:43:B2:43:D8:5D:50:8D:2B:00:57:2E:AE:71:B5:62:34
Certificate issuer:       /CN=2D8692867D0888EDE9943E1B31BAED70B4DB4811
Certificate serial:       3798F1B260CB5CDBB30F6A2341DD29DF9CD0DF35
Authority key identifier: 2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/323830333a333831303a3a2f33322d3438203d3e20323731383339.roa
Signing time:             Tue 04 Feb 2025 20:01:18 +0000
ROA not before:           Tue 04 Feb 2025 19:56:18 +0000
ROA not after:            Tue 03 Feb 2026 20:01:18 +0000
asID:                     271839
IP address blocks:        2803:3810::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:98:f1:b2:60:cb:5c:db:b3:0f:6a:23:41:dd:29:df:9c:d0:df:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D8692867D0888EDE9943E1B31BAED70B4DB4811
        Validity
            Not Before: Feb  4 19:56:18 2025 GMT
            Not After : Feb  3 20:01:18 2026 GMT
        Subject: CN=BA984CDE43B243D85D508D2B00572EAE71B56234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:d5:7d:e3:f1:98:53:5e:e0:7d:98:c6:c8:
                    b7:7e:66:d3:b7:c7:3a:b8:82:16:e3:08:d2:e0:6a:
                    34:ad:90:44:65:08:dd:f9:a5:09:e5:8a:8f:e3:3c:
                    80:19:c6:d4:1d:9d:26:3c:03:9a:2e:14:9c:cc:fe:
                    bb:37:99:bc:28:96:6d:f5:24:ff:1c:b9:10:39:2b:
                    75:9b:74:41:36:b3:48:22:6c:ef:4c:6a:1e:6d:aa:
                    73:61:14:63:46:63:78:9d:6b:9b:48:8c:5d:91:a5:
                    98:df:0e:66:f8:0d:e1:33:af:1a:bb:b7:f6:94:2e:
                    43:d1:50:d8:13:47:8e:55:fd:7e:f9:c2:94:6b:b4:
                    f8:7c:e8:d8:9a:22:8e:15:cb:e9:0f:06:15:b8:a0:
                    b7:6c:7b:4a:16:ab:85:09:68:69:aa:8d:f3:e0:53:
                    6c:00:50:b6:e1:d4:de:a8:fe:5e:b4:08:9f:0f:23:
                    ee:dc:cd:3e:38:ba:8d:5c:9e:8c:7d:77:d2:0b:fe:
                    9b:bf:fd:d0:a9:6b:70:4b:ff:b9:0a:22:65:7a:d1:
                    e8:f0:1b:d4:30:88:45:bf:36:c5:1b:d7:60:73:7b:
                    45:46:d0:4c:58:90:0e:1e:0d:8a:e2:59:3f:c1:c3:
                    6a:03:2a:65:27:b1:62:41:00:0f:f1:6d:ac:29:ac:
                    3f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:98:4C:DE:43:B2:43:D8:5D:50:8D:2B:00:57:2E:AE:71:B5:62:34
            X509v3 Authority Key Identifier:
                keyid:2D:86:92:86:7D:08:88:ED:E9:94:3E:1B:31:BA:ED:70:B4:DB:48:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2D8692867D0888EDE9943E1B31BAED70B4DB4811.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DAEE146D6347C36A81F84E6FDD597E91F78FC7EA3270A9258F33E8FA870D2880/0/323830333a333831303a3a2f33322d3438203d3e20323731383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3810::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:1c:38:7c:1c:4d:58:79:1b:95:e8:93:b5:ea:a5:3d:76:2f:
         06:d2:dd:76:19:6c:a0:2c:66:7d:39:b6:32:6b:64:88:e0:ab:
         c6:de:50:a4:d4:2f:a1:ef:8f:dd:7f:c9:bc:ff:c7:cc:87:25:
         a9:01:9d:9f:c2:eb:3b:11:5a:b1:4a:87:ab:eb:53:fa:9b:5c:
         37:90:a4:81:f6:92:7e:4d:f1:28:81:4c:cd:62:07:ee:ff:7a:
         e5:14:6a:ae:2d:13:69:be:8c:6f:93:60:c0:e7:e3:ef:a1:75:
         15:76:c8:13:6a:54:f3:bd:96:ff:b5:8f:5a:fd:19:d4:35:bf:
         a9:c6:41:be:c0:96:d6:df:7d:59:b3:15:77:e9:67:d2:c9:e7:
         d5:a9:00:3d:8f:9c:79:8d:26:df:bf:c0:cc:95:e2:c9:12:fb:
         8d:9e:e6:b4:47:b4:1b:67:1b:42:2b:f5:e3:ce:aa:b4:03:6b:
         57:0e:6e:aa:d5:95:8c:81:62:43:98:b1:84:83:6b:e1:d9:a3:
         f8:3f:03:d3:23:ed:55:f1:ff:76:9b:b0:11:43:2e:05:62:91:
         85:e7:58:03:fe:16:6c:f5:6e:e5:fc:4d:08:7a:ef:59:bc:00:
         7d:a5:eb:aa:d1:28:89:f8:b3:f8:8e:31:ec:f1:5d:46:78:55:
         26:9f:57:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----