Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3634203d3e203238303037.roa
File:                     323830333a363334303a3a2f33322d3634203d3e203238303037.roa (raw, json)
Hash identifier:          Wxnyc+m5zzFjA+xvCOCBuEUgBaG5KSSV/TdMxeJ2uLI=
Subject key identifier:   A9:91:D1:89:88:EF:D7:42:FD:3C:06:42:27:04:4E:35:B7:34:8B:12
Certificate issuer:       /CN=3D8CF3696583CC1AFB700F202360AEB49355D862
Certificate serial:       308C64BFD383E2367487C50990F964628CD2D998
Authority key identifier: 3D:8C:F3:69:65:83:CC:1A:FB:70:0F:20:23:60:AE:B4:93:55:D8:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D8CF3696583CC1AFB700F202360AEB49355D862.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3634203d3e203238303037.roa
Signing time:             Tue 04 Feb 2025 18:49:18 +0000
ROA not before:           Tue 04 Feb 2025 18:44:18 +0000
ROA not after:            Tue 03 Feb 2026 18:49:18 +0000
asID:                     28007
IP address blocks:        2803:6340::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:8c:64:bf:d3:83:e2:36:74:87:c5:09:90:f9:64:62:8c:d2:d9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D8CF3696583CC1AFB700F202360AEB49355D862
        Validity
            Not Before: Feb  4 18:44:18 2025 GMT
            Not After : Feb  3 18:49:18 2026 GMT
        Subject: CN=A991D18988EFD742FD3C064227044E35B7348B12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:12:b8:ef:2a:72:3f:b5:9a:91:e8:76:56:de:
                    fe:af:21:4a:2a:93:ba:8a:84:ab:e8:e4:66:fa:7d:
                    1a:c1:be:29:ac:ec:4b:f5:9f:28:0d:a3:c0:ab:22:
                    3c:58:6c:4d:21:59:ea:2d:4e:73:b4:3d:6b:44:b2:
                    01:77:68:c1:c8:f6:37:3c:69:d6:93:1b:30:25:a4:
                    83:5c:54:80:bb:37:b4:9d:b0:27:e3:76:33:c5:d0:
                    6e:ee:21:65:72:e7:8f:18:8d:63:64:49:2d:9d:fd:
                    40:5b:34:07:c2:75:3f:5e:c1:e0:4b:44:e9:08:a3:
                    de:16:78:c0:4d:02:ad:75:61:df:df:da:da:b9:9e:
                    0b:21:61:0f:06:62:06:25:39:27:b8:13:f3:b6:86:
                    f5:60:f6:d3:79:56:d2:eb:23:6f:11:86:7a:ed:7d:
                    a6:19:e0:eb:24:58:f7:62:7c:c3:34:a2:14:df:84:
                    ce:d3:a1:c5:37:11:dd:69:9c:fc:3d:43:9d:b0:a6:
                    91:30:4f:44:64:ff:74:0c:71:4c:24:63:9a:cf:c5:
                    b6:cd:c1:3d:f9:73:4e:ac:d2:d6:4b:45:48:60:bf:
                    f6:89:17:98:1d:18:9b:43:db:5e:1c:de:e9:22:5f:
                    f4:6c:9d:44:b6:60:f0:00:4c:4c:e3:6a:81:ee:d6:
                    37:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:91:D1:89:88:EF:D7:42:FD:3C:06:42:27:04:4E:35:B7:34:8B:12
            X509v3 Authority Key Identifier:
                keyid:3D:8C:F3:69:65:83:CC:1A:FB:70:0F:20:23:60:AE:B4:93:55:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/3D8CF3696583CC1AFB700F202360AEB49355D862.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3D8CF3696583CC1AFB700F202360AEB49355D862.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E579BF8D5E48275B6F11AB178D05BB56B07B67D522BA447C8114064F9FC77CA5/0/323830333a363334303a3a2f33322d3634203d3e203238303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6340::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:ce:9e:d5:f7:ba:21:9c:28:65:1e:03:69:c2:c6:8a:55:c2:
         a4:42:37:58:b1:a0:4b:04:ce:e1:b3:6c:a3:37:96:9c:10:87:
         19:13:e4:1d:2c:cc:43:4e:71:aa:9c:5d:48:87:b8:9f:b8:ac:
         32:1a:60:8e:da:30:1a:da:37:89:27:7a:9a:0e:8e:ac:cf:6a:
         1a:87:a8:26:22:31:22:6e:42:19:6f:8d:f7:aa:fc:9b:d2:78:
         2c:84:59:8e:79:f2:34:a5:15:12:df:b5:50:80:87:1d:fc:45:
         95:8a:d7:69:52:d3:a1:4e:b9:0d:b3:96:ba:ed:b0:bc:b0:4f:
         59:77:a6:32:85:47:6b:6f:5d:50:03:6e:fc:c2:6c:23:60:23:
         b4:58:c8:1c:48:9d:d5:4c:16:f6:27:2b:18:4a:52:a2:23:3e:
         2f:20:16:80:26:5e:43:c0:fc:46:1f:4b:fe:9e:43:bf:94:fb:
         3b:f7:70:8a:68:a5:8a:86:b2:8b:34:89:af:3d:20:29:96:db:
         a4:3b:6d:47:d7:0a:87:28:8c:76:6d:81:17:8c:54:b9:d8:42:
         4c:af:23:4e:c0:75:07:27:64:82:a3:77:a4:de:16:08:ff:0a:
         72:f2:b2:b5:6f:aa:c3:52:fa:cd:ee:11:1a:27:19:eb:4e:79:
         b0:38:e8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----