Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/323830333a656130303a3a2f33322d313238203d3e203532333830.roa
File:                     323830333a656130303a3a2f33322d313238203d3e203532333830.roa (raw, json)
Hash identifier:          EJ1Q0sRGyGNM3jMDdc6Z2CPJDWHdEQsxE0BI7DFz8bY=
Subject key identifier:   3F:3D:CD:EB:1C:3B:F9:61:02:BB:F7:A1:0D:A0:4C:7F:4B:51:5A:38
Certificate issuer:       /CN=98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31
Certificate serial:       6B846981834B49EB57AD6EE7D52E5405151B253C
Authority key identifier: 98:B2:2D:5F:5F:19:79:94:0E:0B:2C:1F:A5:A6:6A:E7:28:1B:FB:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/323830333a656130303a3a2f33322d313238203d3e203532333830.roa
Signing time:             Tue 04 Feb 2025 18:09:37 +0000
ROA not before:           Tue 04 Feb 2025 18:04:37 +0000
ROA not after:            Tue 03 Feb 2026 18:09:37 +0000
asID:                     52380
IP address blocks:        2803:ea00::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:84:69:81:83:4b:49:eb:57:ad:6e:e7:d5:2e:54:05:15:1b:25:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31
        Validity
            Not Before: Feb  4 18:04:37 2025 GMT
            Not After : Feb  3 18:09:37 2026 GMT
        Subject: CN=3F3DCDEB1C3BF96102BBF7A10DA04C7F4B515A38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a8:fc:71:68:d5:29:b3:c9:cf:4b:fa:d8:aa:
                    c0:07:d0:ea:73:fd:02:e4:ba:2c:e6:77:06:3d:1e:
                    51:63:cc:90:c8:c6:5c:c0:78:14:f3:3f:75:d0:c7:
                    d7:09:44:75:e4:1c:fd:9b:6c:68:e4:ab:62:8a:6c:
                    33:0e:51:b8:d9:c2:44:a0:15:64:fa:e0:4a:6b:67:
                    49:13:c2:19:bf:ac:b1:ab:06:27:c7:a7:5f:86:7d:
                    d0:e5:ff:69:e2:cf:1e:1d:c3:58:7c:11:e7:21:ed:
                    02:60:0a:12:da:c2:f9:49:b5:3f:29:d0:cd:e0:0f:
                    d1:26:f1:2c:a1:57:ff:9a:ad:5c:3b:38:5a:27:42:
                    e8:8c:13:e2:7b:7d:b8:a0:a3:5e:ad:70:bb:96:b1:
                    bc:99:49:37:3b:d3:97:d2:1d:5f:85:43:99:3e:26:
                    94:e8:e7:2c:ff:bd:d1:4b:b2:e0:06:d8:57:69:8c:
                    a5:d3:9f:8a:ac:78:7b:cb:eb:63:e4:da:be:8f:49:
                    cc:2d:68:b7:f2:1f:41:85:b3:76:d2:93:ee:da:80:
                    04:69:85:23:4c:19:f5:85:c0:e4:80:1d:5a:3d:c8:
                    22:1f:05:eb:ac:b1:c1:a9:5a:68:a9:89:03:07:95:
                    8a:b3:53:24:c0:d6:d9:58:c6:32:ca:c1:c5:11:07:
                    7a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3D:CD:EB:1C:3B:F9:61:02:BB:F7:A1:0D:A0:4C:7F:4B:51:5A:38
            X509v3 Authority Key Identifier:
                keyid:98:B2:2D:5F:5F:19:79:94:0E:0B:2C:1F:A5:A6:6A:E7:28:1B:FB:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98B22D5F5F1979940E0B2C1FA5A66AE7281BFB31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ECE2B09953305E0EDD80B1558121ADE40CD64C4A80183C09BE0315B9BFA55A42/0/323830333a656130303a3a2f33322d313238203d3e203532333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea00::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:8d:64:7f:df:1e:42:f4:e9:f1:52:03:96:b8:a2:01:e2:68:
         42:8f:bf:02:52:18:76:0e:6e:78:e6:08:76:09:37:00:b5:8e:
         41:d9:a2:19:34:c6:6d:8d:47:70:1f:73:97:3a:e9:61:3b:ff:
         2c:0e:47:d8:54:83:cc:88:c8:9c:0a:a1:fb:0f:12:94:ff:ef:
         a7:33:27:5b:d0:4e:84:3c:8f:6d:d8:99:2b:d7:c6:43:88:a2:
         09:71:b0:a9:d8:f7:fa:83:74:e3:a3:4e:52:95:26:d6:37:58:
         1f:02:b4:4b:3d:40:67:34:d7:89:f8:f7:6e:e5:3d:99:a4:5a:
         a8:ba:e1:49:0c:8d:4f:32:88:e5:10:b9:b7:84:54:c8:80:a7:
         95:5f:64:1a:9d:c0:32:18:9d:98:f9:32:19:60:ca:05:a7:82:
         5b:3b:bf:8c:7b:53:41:2b:3a:d8:61:09:fd:14:7d:b1:d2:6d:
         05:d6:c9:f7:a8:45:70:83:fc:2d:1e:f9:33:45:90:b0:ce:46:
         3b:2f:73:6b:0d:7f:82:66:a3:a4:a1:8f:c1:94:57:07:fb:7d:
         ce:98:7e:0a:e5:76:46:15:71:cb:60:43:3c:df:22:4c:d3:d4:
         00:62:ca:21:56:6f:95:3f:28:54:51:48:ef:25:3d:ef:b5:47:
         12:36:69:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----