Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/323830333a356534303a3a2f33322d3332203d3e203532353130.roa
File:                     323830333a356534303a3a2f33322d3332203d3e203532353130.roa (raw, json)
Hash identifier:          z+cYkH/o+dMeUYprUK8A4AtHcsEgBuXlJ5OdhYZtrfc=
Subject key identifier:   1F:E6:5F:55:DC:3E:4B:EC:95:C9:19:E6:F4:8E:6B:06:0C:73:A1:1B
Certificate issuer:       /CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
Certificate serial:       7E6A360E509BF61ED04F207DF45958867126A8AE
Authority key identifier: 26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/323830333a356534303a3a2f33322d3332203d3e203532353130.roa
Signing time:             Tue 04 Feb 2025 18:31:42 +0000
ROA not before:           Tue 04 Feb 2025 18:26:42 +0000
ROA not after:            Tue 03 Feb 2026 18:31:42 +0000
asID:                     52510
IP address blocks:        2803:5e40::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6a:36:0e:50:9b:f6:1e:d0:4f:20:7d:f4:59:58:86:71:26:a8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D
        Validity
            Not Before: Feb  4 18:26:42 2025 GMT
            Not After : Feb  3 18:31:42 2026 GMT
        Subject: CN=1FE65F55DC3E4BEC95C919E6F48E6B060C73A11B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:20:be:de:1e:2a:ea:96:ab:d3:48:38:45:62:
                    43:51:b6:27:d6:b2:50:60:ce:a8:47:46:31:98:df:
                    70:0f:89:a8:38:56:75:c1:ec:8d:36:49:a1:04:ca:
                    da:55:7f:ec:84:c2:5b:f6:10:7f:16:96:e1:85:9b:
                    98:07:59:90:d4:55:a5:9a:49:02:be:5f:75:31:10:
                    70:2e:65:ea:84:76:06:ac:03:1b:61:24:ab:20:f6:
                    3e:ef:67:b4:82:53:70:7b:0b:8c:79:0b:4d:c5:0d:
                    9d:89:aa:9a:ad:c6:86:3e:68:7c:35:3a:3b:3f:43:
                    25:bd:cc:6a:a4:bc:15:a0:60:de:65:af:3a:c2:f6:
                    5f:cc:1f:3e:c1:19:3d:48:23:46:a0:32:a2:c6:c5:
                    2f:82:44:11:fd:3b:7d:e6:d3:30:d9:a7:ac:27:80:
                    42:54:a5:02:1b:49:7d:48:73:dd:fe:e4:67:67:1b:
                    1b:77:20:57:73:09:38:30:63:f0:d1:f1:cf:fc:19:
                    77:6c:b4:79:64:9d:ae:df:14:5d:07:08:73:b3:9b:
                    b2:fc:36:2c:99:8c:30:b9:f4:da:b6:16:38:b6:91:
                    54:14:04:02:21:f7:87:14:cc:64:68:0b:8d:fd:91:
                    fd:fd:e2:02:66:1a:69:f9:1f:a6:e8:c1:73:a0:92:
                    88:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:E6:5F:55:DC:3E:4B:EC:95:C9:19:E6:F4:8E:6B:06:0C:73:A1:1B
            X509v3 Authority Key Identifier:
                keyid:26:36:D4:CB:ED:BE:7A:0F:4D:43:DC:16:21:DE:3D:19:36:64:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2636D4CBEDBE7A0F4D43DC1621DE3D1936645F3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/DE025ADE63A9177898D7E1EF1103089E82D18CE0541050F4C849516A60F77423/0/323830333a356534303a3a2f33322d3332203d3e203532353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:99:d4:4e:08:e2:cb:2e:c8:01:f0:cd:59:7b:b4:89:4a:23:
         00:fa:1d:37:f1:46:03:05:94:f0:0f:d6:59:6d:23:89:25:cf:
         80:3d:07:5b:78:4c:af:53:90:1a:f5:a8:c3:28:db:1f:80:3e:
         44:91:2b:a1:a9:b7:93:0e:9a:d7:cd:ce:28:c3:f3:53:0d:d7:
         a0:6c:07:42:69:4e:fa:fe:4e:ef:99:45:52:25:4f:dd:c8:f1:
         da:ff:c0:50:c9:d7:f6:17:29:91:34:b5:59:fc:a4:65:33:40:
         98:f6:5f:4e:48:f6:52:75:75:af:9f:75:98:3b:33:8e:4e:df:
         5a:83:38:95:a6:a6:17:68:61:16:ff:04:f3:6d:a6:e6:eb:e2:
         e7:8a:d1:d0:71:36:7c:84:f5:be:38:e7:a0:13:c9:35:f0:42:
         c9:62:11:d2:fa:68:39:ea:5e:2e:51:b4:53:0d:cc:5a:44:db:
         77:7d:e6:ba:14:35:1e:74:a0:f8:28:e1:ce:a2:de:5a:61:d0:
         2b:82:70:b0:0e:6b:a1:c6:45:0e:4c:fe:25:2b:0f:08:59:d1:
         7e:d9:e0:ee:8c:c1:4b:ff:34:46:50:2f:67:5c:9b:fb:4d:54:
         d9:59:27:4e:0e:56:d6:9e:c2:29:59:ae:e9:a0:3f:7b:f0:1a:
         c9:0b:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----