Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/323830333a323836303a3a2f33322d3438203d3e203230343733.roa
File:                     323830333a323836303a3a2f33322d3438203d3e203230343733.roa (raw, json)
Hash identifier:          bLxtNySbeN//p2FKxiBAK0jOudycaSQOcyVjqkZuohI=
Subject key identifier:   37:56:D8:2D:73:2E:EB:25:FA:D3:B3:B2:F8:0C:A2:2B:D4:1A:F7:C1
Certificate issuer:       /CN=F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6
Certificate serial:       530D57EA30E35D871119741F884696EDD0F1AEDC
Authority key identifier: F2:A9:A9:DA:87:D3:2B:11:C2:7F:39:0E:0A:9B:E1:BA:A0:B9:9C:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/323830333a323836303a3a2f33322d3438203d3e203230343733.roa
Signing time:             Tue 04 Feb 2025 18:43:58 +0000
ROA not before:           Tue 04 Feb 2025 18:38:58 +0000
ROA not after:            Tue 03 Feb 2026 18:43:58 +0000
asID:                     20473
IP address blocks:        2803:2860::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:0d:57:ea:30:e3:5d:87:11:19:74:1f:88:46:96:ed:d0:f1:ae:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6
        Validity
            Not Before: Feb  4 18:38:58 2025 GMT
            Not After : Feb  3 18:43:58 2026 GMT
        Subject: CN=3756D82D732EEB25FAD3B3B2F80CA22BD41AF7C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8e:99:19:cf:d7:ba:d5:57:91:25:6d:1b:97:
                    8c:68:52:50:21:66:06:5c:2a:81:45:96:60:ae:81:
                    b1:d4:bb:73:65:51:a0:49:0f:aa:51:9f:db:ee:46:
                    51:5f:c2:b6:b1:e9:91:5b:47:49:cf:6e:fa:2a:84:
                    d7:ff:e0:a6:34:65:19:7f:f8:97:32:9c:82:5e:4a:
                    75:99:64:4e:50:ce:41:09:61:f5:4e:06:ad:59:9d:
                    c5:22:f9:a3:2e:cd:eb:d7:3d:5f:ad:68:b2:47:96:
                    aa:77:4b:22:af:91:34:3e:0e:e2:36:ea:ad:4f:7f:
                    74:91:74:9f:54:0d:81:41:3e:bd:93:77:af:bc:75:
                    21:a7:f0:13:61:b3:9c:6e:6f:0a:33:11:c2:af:15:
                    f6:6e:6a:21:96:78:45:65:8c:a4:01:8f:35:c6:a9:
                    e8:c0:2f:d7:17:5e:30:07:f7:d3:61:23:db:12:99:
                    a8:25:32:07:30:d4:71:55:3a:84:da:37:4a:86:06:
                    1e:84:32:64:8b:6b:b2:3c:09:31:cb:73:c7:bd:08:
                    c7:6f:54:dc:2a:d3:d6:e7:2e:9b:97:52:01:de:04:
                    93:e9:21:a9:d3:45:f4:c8:f5:ab:2d:8d:2b:0d:45:
                    9d:eb:47:ef:d4:04:fa:2e:8b:85:69:59:f0:6e:f2:
                    49:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:56:D8:2D:73:2E:EB:25:FA:D3:B3:B2:F8:0C:A2:2B:D4:1A:F7:C1
            X509v3 Authority Key Identifier:
                keyid:F2:A9:A9:DA:87:D3:2B:11:C2:7F:39:0E:0A:9B:E1:BA:A0:B9:9C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F2A9A9DA87D32B11C27F390E0A9BE1BAA0B99CC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E2D080F34ADE6572DB718BA77FAD60199000622DABBA805DD91B07AF79D53B66/0/323830333a323836303a3a2f33322d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2860::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:79:eb:df:10:2f:60:15:c2:ae:96:b2:2d:ca:bd:40:6d:54:
         69:7f:96:5a:29:9f:4f:87:b8:11:d6:9a:37:d8:06:1e:9d:c9:
         fc:53:90:41:06:32:42:66:5f:19:16:41:e7:b2:c2:c9:30:9e:
         1c:b1:e4:c5:6e:0e:40:ad:21:25:2d:6e:d3:79:32:c7:28:fc:
         1d:23:6a:9b:f6:22:00:f8:5d:85:37:f4:82:38:39:09:3d:54:
         b9:95:2c:9a:b7:63:6d:ea:0c:8c:83:cc:dc:44:0a:4d:60:2a:
         6f:4e:53:3e:ee:44:d5:ee:c2:93:50:d1:8e:62:05:fe:3e:e4:
         ee:37:f9:23:b3:f5:ad:9c:be:92:e3:32:74:e7:c4:33:57:11:
         2a:7d:43:a1:1d:5f:4b:3c:8c:1f:d2:ba:9a:da:f1:76:33:b9:
         ce:c7:8a:17:ac:a5:06:d8:24:fa:05:c8:54:15:be:ac:f0:67:
         a4:42:49:6f:82:c6:a2:a8:66:c7:89:fa:a4:92:7c:06:ad:fe:
         c9:10:86:e6:87:51:24:33:de:44:96:5a:4e:d2:c7:37:0f:82:
         28:5a:f9:99:78:54:d4:58:b7:c4:55:f7:df:e5:0b:2e:e5:9d:
         eb:1f:dd:21:54:bd:34:e0:f7:51:43:73:87:19:4f:a0:b8:af:
         50:cc:da:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----