Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/323830333a316231303a3a2f33322d3332203d3e20323732303831.roa
File:                     323830333a316231303a3a2f33322d3332203d3e20323732303831.roa (raw, json)
Hash identifier:          9eKSqrkGW9KIzpU19FEQQ+VWSs6mE3hgETLWczzI7EY=
Subject key identifier:   CE:4A:54:BD:77:BA:8A:88:95:CE:B6:9E:C0:34:09:E3:BC:A1:81:D4
Certificate issuer:       /CN=5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF
Certificate serial:       2FAA54144B8A2D8EC54FDC6D9DAA3D1254456CE7
Authority key identifier: 5E:3B:51:99:EA:DA:73:29:A3:92:EF:17:44:EC:7D:C8:B1:9B:9A:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/323830333a316231303a3a2f33322d3332203d3e20323732303831.roa
Signing time:             Tue 04 Feb 2025 18:23:48 +0000
ROA not before:           Tue 04 Feb 2025 18:18:48 +0000
ROA not after:            Tue 03 Feb 2026 18:23:48 +0000
asID:                     272081
IP address blocks:        2803:1b10::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:aa:54:14:4b:8a:2d:8e:c5:4f:dc:6d:9d:aa:3d:12:54:45:6c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF
        Validity
            Not Before: Feb  4 18:18:48 2025 GMT
            Not After : Feb  3 18:23:48 2026 GMT
        Subject: CN=CE4A54BD77BA8A8895CEB69EC03409E3BCA181D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ce:d5:ef:f9:61:df:27:1b:a3:3b:49:07:cd:
                    3f:49:59:db:fd:1c:ff:81:6b:36:7a:9f:0e:e7:ef:
                    b5:d6:b9:de:34:60:15:96:07:64:f0:d9:6b:75:11:
                    7d:a6:20:83:54:81:06:f4:54:78:3e:0b:65:9d:e2:
                    53:2a:4f:68:5d:c4:85:21:cf:1d:e6:74:54:56:08:
                    17:a6:ac:fa:6a:48:eb:d8:c7:bb:f7:1a:f0:7d:28:
                    1d:df:f3:05:96:cb:df:1b:6a:22:97:16:cc:c8:5b:
                    ea:3b:90:3a:21:e9:8f:0a:84:3f:e8:6e:10:bc:f3:
                    e0:6d:ca:b3:44:06:ed:1b:e4:e9:3b:a7:e1:be:36:
                    28:2f:05:dd:5a:12:d1:a8:e7:3f:b9:c5:dd:17:c5:
                    5b:7b:cb:22:b8:d9:45:66:ec:ab:f3:77:8d:47:c3:
                    79:db:0f:13:ca:0a:c8:a5:d4:85:d7:e2:2b:b8:e6:
                    ae:3b:d4:6a:6b:b3:f2:b1:99:86:00:b8:a5:9d:0a:
                    f8:d2:96:75:43:2d:12:39:3e:a5:e5:ac:ba:70:59:
                    23:d9:94:2e:ae:87:92:9f:c3:76:71:20:ce:6c:93:
                    78:83:ce:8e:47:0d:fd:89:33:f4:db:d1:2a:c4:48:
                    18:4c:4d:76:e4:a3:61:3c:29:4f:81:61:0d:d6:58:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:4A:54:BD:77:BA:8A:88:95:CE:B6:9E:C0:34:09:E3:BC:A1:81:D4
            X509v3 Authority Key Identifier:
                keyid:5E:3B:51:99:EA:DA:73:29:A3:92:EF:17:44:EC:7D:C8:B1:9B:9A:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5E3B5199EADA7329A392EF1744EC7DC8B19B9ACF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DB8B2F673D662B65AD2E8A459FFD515222420C3A74D6106243A17133B175E224/0/323830333a316231303a3a2f33322d3332203d3e20323732303831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         7e:1f:2c:38:33:b3:34:66:67:b3:a0:5b:6b:2a:88:7e:dc:cb:
         6d:cf:ff:9f:40:1b:ca:f8:d9:23:58:21:ac:35:77:ff:40:c7:
         c0:6f:0b:2a:2b:d0:de:c3:49:ec:8a:c6:ef:30:96:7e:d5:69:
         dd:44:4f:d3:9b:d1:a8:3a:ab:af:2f:22:ce:1f:4c:3a:c9:ae:
         f2:1e:29:e5:a8:92:23:1f:47:26:ac:65:56:15:6b:86:e1:3b:
         d1:c7:47:7f:37:b7:04:96:cc:7e:0d:bc:73:46:13:21:c3:a3:
         f2:10:77:fa:ce:fd:8b:24:e2:d8:8c:91:3b:52:6a:98:18:ad:
         d7:ce:89:e9:2c:ee:b1:5b:1a:64:a9:d2:ed:a3:ff:b4:75:72:
         73:ad:7b:90:93:cc:bc:d2:59:81:73:6e:bf:6c:66:b9:51:ef:
         69:b4:0c:d1:a2:ad:18:9f:97:c0:f9:26:6f:8f:29:bb:a4:b9:
         55:33:93:4c:5c:4c:1b:d3:08:fa:e5:b2:c2:68:2b:00:de:82:
         ac:e9:d2:41:8c:99:b1:88:9f:13:b7:9e:84:0d:9c:67:9e:87:
         13:23:c8:a0:35:dd:d9:ea:37:e0:dd:4f:fc:1f:39:f0:ff:f1:
         d0:1e:7f:e5:a2:a5:c7:5c:7c:f0:33:70:8e:da:d6:4c:29:14:
         07:e7:a6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----