Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/E66F41530C98FEAB90B67385C10AF168E331CA506D2A598B8AA3DFAB912BAD1F/0/323830333a313531303a3a2f33322d3438203d3e20323732303237.roa
File:                     323830333a313531303a3a2f33322d3438203d3e20323732303237.roa (raw, json)
Hash identifier:          fXny+a3IN6xvyoEYG2x2BRA6tQspwBPDA7fqpccuFsM=
Subject key identifier:   49:B1:85:8E:A7:95:F3:EE:40:56:9B:C2:71:58:F9:B7:54:98:4E:E2
Certificate issuer:       /CN=B087712C95D8C501C593EFB0F014E7F1C39F8A55
Certificate serial:       07A821EE5E8F00C2FC0EBCF81C48044C5C568138
Authority key identifier: B0:87:71:2C:95:D8:C5:01:C5:93:EF:B0:F0:14:E7:F1:C3:9F:8A:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B087712C95D8C501C593EFB0F014E7F1C39F8A55.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/E66F41530C98FEAB90B67385C10AF168E331CA506D2A598B8AA3DFAB912BAD1F/0/323830333a313531303a3a2f33322d3438203d3e20323732303237.roa
Signing time:             Tue 04 Feb 2025 18:19:54 +0000
ROA not before:           Tue 04 Feb 2025 18:14:54 +0000
ROA not after:            Tue 03 Feb 2026 18:19:54 +0000
asID:                     272027
IP address blocks:        2803:1510::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:a8:21:ee:5e:8f:00:c2:fc:0e:bc:f8:1c:48:04:4c:5c:56:81:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B087712C95D8C501C593EFB0F014E7F1C39F8A55
        Validity
            Not Before: Feb  4 18:14:54 2025 GMT
            Not After : Feb  3 18:19:54 2026 GMT
        Subject: CN=49B1858EA795F3EE40569BC27158F9B754984EE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:69:c9:a3:38:bc:ab:f4:23:96:f1:56:fc:a6:
                    ac:c0:89:87:dc:c6:0a:78:0f:f7:40:13:ca:8f:69:
                    b5:ba:6c:c4:fd:b7:cd:13:a9:6a:ca:b5:a4:da:1a:
                    e8:4a:e2:f0:a0:0c:67:8d:a3:ef:d6:55:34:81:9d:
                    e3:16:8b:48:34:a1:f7:81:ff:e2:81:bd:30:d4:6c:
                    9a:20:3c:11:15:fd:14:e8:33:2f:1a:3d:2d:3d:19:
                    c7:c5:d4:a4:88:f2:d2:03:0e:c7:84:9b:b5:68:4f:
                    e1:a6:af:de:6d:e8:8d:ba:8d:0c:8a:14:79:9b:3b:
                    6f:ed:48:02:40:6e:b5:e3:2e:59:73:c3:ff:c8:2b:
                    2d:c8:78:06:f6:5d:8a:2c:72:f9:9c:22:9c:57:d7:
                    0b:f1:11:e4:90:6c:19:2a:a7:7d:20:c7:b5:4c:fa:
                    80:d0:9e:98:0b:72:c9:2e:22:ca:96:2b:e4:e2:fb:
                    59:4a:e2:8b:f6:4f:c3:60:28:03:95:16:2d:e3:99:
                    6c:bc:00:ec:7d:35:f8:8e:bd:3d:b3:c4:77:b4:e0:
                    69:11:82:6d:85:b8:94:31:c5:ec:8b:8e:e9:9a:64:
                    58:b2:06:e1:a5:20:2a:5c:56:5b:d7:75:7f:ec:16:
                    9d:f6:fe:88:68:fe:34:42:db:64:cb:29:27:ed:cb:
                    93:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B1:85:8E:A7:95:F3:EE:40:56:9B:C2:71:58:F9:B7:54:98:4E:E2
            X509v3 Authority Key Identifier:
                keyid:B0:87:71:2C:95:D8:C5:01:C5:93:EF:B0:F0:14:E7:F1:C3:9F:8A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/E66F41530C98FEAB90B67385C10AF168E331CA506D2A598B8AA3DFAB912BAD1F/0/B087712C95D8C501C593EFB0F014E7F1C39F8A55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B087712C95D8C501C593EFB0F014E7F1C39F8A55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/E66F41530C98FEAB90B67385C10AF168E331CA506D2A598B8AA3DFAB912BAD1F/0/323830333a313531303a3a2f33322d3438203d3e20323732303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1510::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:c6:4b:b6:86:93:c3:41:33:6c:d1:01:fa:de:0d:31:e5:df:
         8d:d0:67:a5:86:fa:33:e7:15:59:1d:21:f7:68:71:2c:50:3c:
         07:22:25:d3:29:f8:6b:4e:4d:88:0e:b7:f2:85:55:89:2d:fa:
         f0:fa:06:b5:8f:29:1a:f1:0e:ba:16:26:63:0b:c0:90:b7:86:
         ff:97:fe:48:69:c3:4c:d4:ef:92:5e:dd:e0:e9:c0:61:f5:66:
         48:31:7f:54:b2:04:29:61:4e:77:c5:4d:0f:1f:75:a8:97:9e:
         20:e8:ec:fa:df:26:da:05:95:c2:a3:1e:5b:c4:c6:1d:30:be:
         3b:02:d0:2a:e6:76:8b:96:b1:8b:f9:05:cd:e8:16:9f:fa:a8:
         04:1c:ad:a4:04:9f:4e:63:a5:b1:9e:d0:96:75:96:e7:37:bb:
         70:92:fa:54:d0:6d:f3:83:c7:f6:aa:65:55:ef:d8:b4:db:eb:
         7f:f0:a6:06:95:d1:77:ed:39:bd:f9:1b:a8:5d:3e:fa:03:5d:
         0c:83:4e:dd:58:02:8a:c3:63:42:1a:98:ab:0f:18:fa:62:3b:
         ff:b1:d9:81:5c:1b:9e:5a:24:e0:b6:f6:3c:3d:fa:4d:e1:1c:
         7e:b7:ca:cd:d2:a8:2d:a9:b5:a4:2c:72:24:ff:7d:ba:80:5a:
         0c:78:99:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----