Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/323830333a376263303a3a2f33322d3438203d3e20323635373631.roa
File:                     323830333a376263303a3a2f33322d3438203d3e20323635373631.roa (raw, json)
Hash identifier:          XXO+H6jtgFk9WwnnPN36gFfUM0tHnORdRBYbGm2aQjE=
Subject key identifier:   32:8C:52:E2:F4:F0:11:DB:11:D1:40:E5:7A:9D:87:40:25:9F:62:6A
Certificate issuer:       /CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
Certificate serial:       15EE3CD690D9A0129CEF0F8C612C23EC1A9695DB
Authority key identifier: 78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/323830333a376263303a3a2f33322d3438203d3e20323635373631.roa
Signing time:             Tue 04 Feb 2025 19:59:12 +0000
ROA not before:           Tue 04 Feb 2025 19:54:12 +0000
ROA not after:            Tue 03 Feb 2026 19:59:12 +0000
asID:                     265761
IP address blocks:        2803:7bc0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ee:3c:d6:90:d9:a0:12:9c:ef:0f:8c:61:2c:23:ec:1a:96:95:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ABC1DD6864C3CC9FE181927560C7F10B82B44D
        Validity
            Not Before: Feb  4 19:54:12 2025 GMT
            Not After : Feb  3 19:59:12 2026 GMT
        Subject: CN=328C52E2F4F011DB11D140E57A9D8740259F626A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:48:13:9e:3c:91:9d:4a:e4:d7:a7:72:36:
                    8c:77:4e:31:17:4d:50:77:67:7b:ae:15:1c:f0:8a:
                    30:58:c4:77:9d:d8:d0:29:8d:01:00:f4:35:3b:8b:
                    52:e3:2a:2f:65:d3:f8:7d:1b:dc:8a:19:e8:8f:89:
                    ba:3c:b6:41:43:79:fd:19:d0:29:ab:b7:5d:f6:2b:
                    e1:19:03:75:c8:e4:4c:88:6c:cb:67:c9:43:0d:f8:
                    03:0c:a7:7d:b1:5e:5a:3b:40:63:75:d6:17:89:5a:
                    b0:31:2f:fa:74:48:4e:0c:73:03:5d:d7:c3:c2:5e:
                    5c:f5:2d:c1:d9:4a:e7:51:bb:11:39:69:dd:8f:11:
                    94:0b:8f:df:4c:d5:5f:26:dd:f9:1e:21:66:45:d3:
                    db:b1:94:0c:a7:91:92:79:72:46:99:e9:d0:9d:24:
                    0a:25:cd:27:23:fc:dc:e8:8a:9d:0c:22:ed:1e:92:
                    da:60:f2:e6:db:6f:b2:0c:b4:f9:e6:65:ef:d9:74:
                    64:29:9f:93:d8:d5:2b:0f:50:50:64:a2:41:da:63:
                    39:b7:ee:0d:b4:9c:8a:51:f7:f3:07:e2:ad:82:95:
                    3a:d5:3b:54:b3:f9:c6:ff:a6:10:88:a5:b7:3b:75:
                    fc:47:22:ca:01:e2:c4:21:c2:66:76:53:c5:97:0f:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8C:52:E2:F4:F0:11:DB:11:D1:40:E5:7A:9D:87:40:25:9F:62:6A
            X509v3 Authority Key Identifier:
                keyid:78:AB:C1:DD:68:64:C3:CC:9F:E1:81:92:75:60:C7:F1:0B:82:B4:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/78ABC1DD6864C3CC9FE181927560C7F10B82B44D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EE3EBADD86990AADBF734B20944DDC28E3B4574BE4C602ED0BD6036237D473AB/0/323830333a376263303a3a2f33322d3438203d3e20323635373631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7bc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:04:de:ec:22:cf:82:14:b6:0f:0e:86:5a:90:a6:55:fd:8c:
         9c:9d:4c:e4:18:ca:8b:5f:4f:2b:73:52:80:f9:cb:df:c6:e6:
         c3:14:64:f5:e7:3b:23:60:2d:2c:c2:1b:fb:8a:0f:94:05:74:
         fd:21:b1:28:2f:25:53:24:5e:09:a7:61:d7:be:5b:05:c2:91:
         d4:7e:09:7e:6e:80:e7:d2:69:de:77:f8:a4:18:9b:f2:8b:59:
         0f:dd:fd:62:a2:bd:16:8c:51:9c:cd:b3:b4:19:2d:a4:0e:1d:
         9b:10:2d:b9:5d:73:5b:7a:e1:e6:1c:79:dc:70:0c:4c:d4:6a:
         b5:12:32:5b:99:97:97:a4:4b:8f:8b:6c:fe:1d:f1:18:3d:de:
         c3:51:b5:32:fa:5a:90:09:cd:3b:f6:30:56:f8:11:ea:ff:e3:
         24:86:bb:53:a7:53:8f:9c:f8:78:81:6e:59:04:3a:ab:5d:09:
         5b:b3:44:88:3e:af:cd:54:f2:a2:f8:b9:a9:d9:d7:05:fc:7c:
         f4:bd:9f:7f:0b:43:c6:f2:67:6c:0e:e0:c2:f1:0d:75:19:dc:
         71:d4:2a:77:08:6d:ef:2a:e7:5e:a8:e3:53:e7:3c:ce:da:18:
         c1:fc:3a:d1:e8:a4:05:b6:85:5a:8c:24:9e:c5:86:9a:d3:dd:
         38:1a:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----