Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3230303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3230303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          VSl1uqLFLvGzuaSTwqUxHY10OBx+9J2+yqzktUZTonw=
Subject key identifier:   51:4E:BC:96:13:82:9D:E4:32:D2:58:FE:DB:5B:A7:EC:D4:6A:44:21
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       29B444DA4E0D63F1E1082215EEA51E5704B9B55B
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3230303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 04 Feb 2025 18:28:07 +0000
ROA not before:           Tue 04 Feb 2025 18:23:07 +0000
ROA not after:            Tue 03 Feb 2026 18:28:07 +0000
asID:                     272869
IP address blocks:        2803:7290:200::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b4:44:da:4e:0d:63:f1:e1:08:22:15:ee:a5:1e:57:04:b9:b5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Feb  4 18:23:07 2025 GMT
            Not After : Feb  3 18:28:07 2026 GMT
        Subject: CN=514EBC9613829DE432D258FEDB5BA7ECD46A4421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:38:93:f1:41:75:42:bd:44:f5:e5:ee:c9:5f:
                    36:0f:ed:00:01:d2:a8:f3:4f:40:4f:11:c2:a5:34:
                    fa:55:1a:a4:b2:f6:92:d0:bf:35:43:12:57:72:fa:
                    e9:e3:fb:bc:af:51:c1:82:2c:96:ed:df:45:b0:be:
                    97:7d:ee:f9:c8:c1:89:4a:93:13:d8:75:d4:0a:13:
                    bd:11:f8:d8:6a:33:93:ba:d8:28:21:4c:3d:f8:98:
                    4b:f6:dd:aa:cd:5f:ed:ba:d3:0f:e3:92:34:1a:20:
                    54:38:80:2c:21:dd:ee:27:1e:ba:ad:1d:8d:ac:3e:
                    21:96:e9:45:46:03:30:f0:8c:4d:31:53:7b:86:86:
                    06:c0:ab:77:28:37:35:89:df:dc:90:c5:12:7e:8a:
                    30:7e:26:68:eb:5f:b3:9b:ab:5d:35:68:2f:6a:d8:
                    2b:8f:7d:a8:be:13:da:82:dc:51:28:51:dc:42:8e:
                    06:72:10:d9:3c:0f:9d:4b:a2:fb:f7:2a:26:30:f2:
                    18:62:6b:ed:40:b5:61:fd:a7:7a:6e:4f:82:10:81:
                    06:d1:73:17:51:51:59:70:cd:d6:00:91:2f:c2:76:
                    80:67:31:1e:de:32:bf:a1:c4:41:b4:59:1b:52:59:
                    b5:29:73:f3:d0:ea:d2:46:99:48:20:a3:c5:7f:08:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:4E:BC:96:13:82:9D:E4:32:D2:58:FE:DB:5B:A7:EC:D4:6A:44:21
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3230303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:1e:a2:d2:80:0f:01:c4:2f:d6:82:05:f7:e1:37:1c:57:9d:
         0a:c5:bd:cb:93:bc:56:93:80:d9:ed:db:c2:43:06:e4:43:ef:
         51:ba:bb:c5:0a:eb:15:65:92:a8:20:71:f9:d9:79:aa:53:03:
         51:90:ab:11:9f:29:1d:bc:70:0b:63:02:85:3c:e3:3a:7d:77:
         3d:cb:59:74:2e:a2:b3:5b:ab:74:17:12:dc:14:8f:70:81:cf:
         f1:11:93:4f:fd:91:4c:46:5c:1f:c8:16:01:b6:ca:10:41:51:
         c1:5a:b5:20:7f:ab:46:6b:d3:23:ed:8a:2f:ff:23:07:90:79:
         21:e9:00:31:69:15:5f:7b:48:21:82:7b:83:99:6c:8e:da:b0:
         6c:60:91:ca:d3:d9:88:07:41:c3:c9:9f:25:95:88:f6:d1:ac:
         8e:4b:a1:03:9e:c2:e5:5b:b4:45:69:9e:a6:de:0e:5f:aa:af:
         b9:1b:0b:04:0b:5c:3f:68:52:e8:ba:52:80:da:45:c6:5e:0e:
         4c:db:dc:ee:5e:81:0e:fd:e6:ea:ce:aa:d6:c4:74:85:29:f9:
         a6:cc:6f:b4:68:a3:04:d9:7b:16:df:86:79:1d:a2:8f:27:e6:
         ec:80:77:be:25:9c:ba:6b:18:6b:75:11:64:78:52:c4:52:52:
         68:dc:3e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----