Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a6130303a3a2f34302d3430203d3e203130373533.roa
File:                     323830333a356365303a6130303a3a2f34302d3430203d3e203130373533.roa (raw, json)
Hash identifier:          dv6LbQp69Z0VeyyIebkn29AkZPJaFDhnrA9+cn+cKIo=
Subject key identifier:   20:87:69:15:07:B9:84:90:17:EE:6B:F4:6A:FA:C4:1A:6F:D5:E4:00
Certificate issuer:       /CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
Certificate serial:       733362866D51DD50709C126AF9A4E7E0F44B2314
Authority key identifier: 52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a6130303a3a2f34302d3430203d3e203130373533.roa
Signing time:             Tue 04 Feb 2025 18:23:04 +0000
ROA not before:           Tue 04 Feb 2025 18:18:04 +0000
ROA not after:            Tue 03 Feb 2026 18:23:04 +0000
asID:                     10753
IP address blocks:        2803:5ce0:a00::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:33:62:86:6d:51:dd:50:70:9c:12:6a:f9:a4:e7:e0:f4:4b:23:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52C33A1BA9015DB4E50D07D3A35E931827FFAC41
        Validity
            Not Before: Feb  4 18:18:04 2025 GMT
            Not After : Feb  3 18:23:04 2026 GMT
        Subject: CN=2087691507B9849017EE6BF46AFAC41A6FD5E400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:19:55:60:a8:3b:6b:4f:26:2e:4f:32:67:
                    ce:ae:a2:f2:53:17:58:ee:9b:bf:7c:7f:80:e8:d7:
                    aa:e8:ff:a9:9b:d7:1a:62:fb:d6:48:28:1b:69:96:
                    5f:cb:c7:1a:2a:60:0b:79:04:d8:13:5a:72:89:5e:
                    b0:0c:7e:e4:e9:d1:41:f8:4b:a5:67:e1:c6:7b:0c:
                    7a:2f:aa:da:1b:a8:bf:48:88:ef:da:49:81:9b:45:
                    81:a4:5f:36:a3:70:6f:77:7b:29:42:1a:8e:02:74:
                    2f:85:43:e6:98:1c:d3:64:e1:4b:56:75:d1:4b:2a:
                    cd:87:56:19:44:89:62:3a:1d:3a:8b:17:5e:1d:5f:
                    55:6c:a7:e7:24:02:f2:f0:f9:1f:75:b1:cd:1c:1b:
                    7e:56:4f:2b:c7:af:f9:e3:ce:84:97:0c:ba:78:2e:
                    0d:a5:a1:17:2a:87:eb:e5:18:3b:61:12:31:2d:91:
                    c5:f8:05:99:42:eb:8d:be:ae:f5:d9:2a:13:89:b5:
                    ab:d5:df:0b:17:37:c0:49:fe:1f:a4:da:aa:ed:1f:
                    05:ad:25:9f:35:ca:00:bc:77:a9:72:f3:db:5c:9d:
                    5b:0e:41:4a:07:21:03:d9:47:ef:c6:cd:71:70:ea:
                    37:31:0f:30:b7:87:cb:65:dc:df:88:e6:5f:1e:77:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:87:69:15:07:B9:84:90:17:EE:6B:F4:6A:FA:C4:1A:6F:D5:E4:00
            X509v3 Authority Key Identifier:
                keyid:52:C3:3A:1B:A9:01:5D:B4:E5:0D:07:D3:A3:5E:93:18:27:FF:AC:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/52C33A1BA9015DB4E50D07D3A35E931827FFAC41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E4E99759ACF013EA166F0DA90DBE63F30FAB64CCF1310D5F0FA69271B35D85AC/0/323830333a356365303a6130303a3a2f34302d3430203d3e203130373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5ce0:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:05:70:e9:be:a5:e4:12:e9:0c:1e:5e:91:cc:99:f2:f3:e2:
         a4:2f:42:7a:75:de:d2:77:e4:6c:95:c2:d0:00:35:63:42:c3:
         24:2e:b2:25:6a:39:1a:99:e5:1b:42:48:24:72:bb:27:a1:0f:
         a4:d5:81:1b:02:76:42:9d:41:ea:99:6e:a7:53:28:ef:f0:84:
         47:ed:69:a8:97:5b:53:73:a8:35:6c:6e:65:7d:bf:3a:ea:f9:
         c4:37:73:6d:21:d4:f9:df:24:6a:75:40:f4:32:bf:23:2d:6f:
         b2:80:c2:a9:3d:4a:51:b2:91:3d:69:2b:f7:d3:e8:c8:f2:a7:
         b7:57:46:5d:0a:32:bc:8a:3a:de:22:06:df:b6:68:7c:3f:03:
         f0:04:ab:3c:b5:e5:5c:fa:e9:1d:95:c1:ee:cc:c7:ca:24:5e:
         25:78:4c:66:04:2c:ef:7c:f4:bd:4f:27:3b:72:15:ac:da:40:
         68:33:68:cd:83:9e:bc:5f:7d:d7:39:6f:d4:c8:e8:bb:25:b3:
         86:9d:ec:91:42:d8:83:72:b3:9c:de:34:0b:13:b0:ce:d5:13:
         c9:40:c0:9b:52:38:68:08:33:17:12:a2:c9:6b:c1:be:6b:32:
         bc:c8:c6:ed:34:24:bf:28:1f:b4:82:81:2d:d3:14:0f:12:00:
         6f:06:7a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----