Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa
File:                     323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa (raw, json)
Hash identifier:          DhqaBpq65DZXe2+aAKhs2hj2WSWXsIBzn0BmULJDxnA=
Subject key identifier:   17:22:55:DB:CD:CD:8C:84:9C:D3:53:F3:EE:6F:A4:D5:85:0F:9E:58
Certificate issuer:       /CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
Certificate serial:       0EF1B58C87D09CB27E3AECAB1035265FE18EC663
Authority key identifier: AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa
Signing time:             Tue 04 Feb 2025 18:28:06 +0000
ROA not before:           Tue 04 Feb 2025 18:23:06 +0000
ROA not after:            Tue 03 Feb 2026 18:28:06 +0000
asID:                     272869
IP address blocks:        2803:7290:500::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f1:b5:8c:87:d0:9c:b2:7e:3a:ec:ab:10:35:26:5f:e1:8e:c6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA4138555E38BF0984DD9CC6D87B98B58F3D88
        Validity
            Not Before: Feb  4 18:23:06 2025 GMT
            Not After : Feb  3 18:28:06 2026 GMT
        Subject: CN=172255DBCDCD8C849CD353F3EE6FA4D5850F9E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c9:b1:31:ed:86:17:3d:82:74:d8:09:5a:95:
                    5c:0d:97:dd:07:17:71:2f:17:d3:6e:66:51:cf:36:
                    e6:32:04:32:37:01:f8:c1:af:02:25:69:95:4c:d7:
                    ac:03:36:9c:98:a8:72:ed:0f:30:56:1c:54:47:f8:
                    99:92:c3:ec:63:80:82:4b:25:67:33:87:68:01:1b:
                    f1:07:d8:d2:cb:7a:28:0f:77:26:44:1c:86:85:a0:
                    94:a9:3c:8d:2b:0b:b8:4c:d3:53:3a:ad:b0:99:18:
                    22:0c:2f:a0:a1:03:2f:15:9e:d9:59:96:83:f6:d7:
                    af:0d:84:a0:76:a4:fc:0a:7f:e9:62:83:f3:33:4e:
                    b0:26:5b:90:14:8c:d5:b6:7f:2d:36:7e:0d:1b:1c:
                    ea:cc:42:a2:d1:44:85:75:95:79:fe:5e:fc:04:24:
                    16:80:64:a2:f9:da:aa:93:7c:ab:e7:69:e5:0f:75:
                    b7:62:40:b2:60:b1:40:08:75:18:b4:bf:23:f2:02:
                    fc:78:58:7d:56:5e:53:3f:51:07:95:00:aa:cf:4d:
                    66:b6:39:68:35:40:69:17:0e:7d:6f:94:3d:a0:d4:
                    9f:7a:18:d3:b7:8d:ab:d7:ec:bc:8c:3d:b6:9e:76:
                    a9:45:ee:12:a6:fe:a0:e5:6d:2b:68:9a:b7:1a:c8:
                    13:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:22:55:DB:CD:CD:8C:84:9C:D3:53:F3:EE:6F:A4:D5:85:0F:9E:58
            X509v3 Authority Key Identifier:
                keyid:AE:DA:41:38:55:5E:38:BF:09:84:DD:9C:C6:D8:7B:98:B5:8F:3D:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AEDA4138555E38BF0984DD9CC6D87B98B58F3D88.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EFD47FE509B3E64564E5815935D08E7559B5703FABFC8F219F3F8E142FFF6AA4/0/323830333a373239303a3530303a3a2f34302d3430203d3e20323732383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7290:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         75:09:d4:34:b7:56:46:f2:5a:bc:81:75:c1:f5:63:15:44:b6:
         91:69:f1:6a:41:75:bb:91:bd:5d:17:7c:47:46:38:7b:22:ac:
         88:11:d5:68:14:ba:3c:72:36:d1:c7:57:49:17:e3:13:c4:73:
         fd:b1:b1:da:58:30:93:5b:06:7b:f7:4f:6b:d9:b9:fc:8f:db:
         1e:a0:5f:f7:00:c4:78:4b:08:13:73:6a:4e:e4:0d:ea:8d:55:
         c2:05:c7:e9:af:74:17:ad:38:68:ee:67:19:d6:20:a1:13:7a:
         7d:e6:a4:e1:2a:d3:9b:c7:aa:5f:f9:c8:04:f9:a2:98:3f:c4:
         ef:74:25:a6:20:60:fc:a2:2a:24:15:c6:63:d2:92:5a:fe:89:
         ce:c2:82:8b:a6:47:b3:71:7c:5f:a8:d9:08:78:e8:97:44:09:
         86:85:90:f3:3d:13:3e:e8:b1:78:ad:0c:65:ac:1a:c7:9a:b6:
         5b:ed:24:f0:e2:98:a4:1a:78:3e:00:a8:7a:68:cb:67:0b:cc:
         2b:55:28:a3:15:2e:d1:a3:f2:44:81:b2:20:2d:c6:9a:e2:de:
         35:f7:5f:82:88:5e:54:b9:36:d5:65:1e:f6:33:f2:8a:28:c1:
         1c:a1:d6:31:f6:f1:bc:b3:6b:e5:dd:05:ce:75:71:b7:2f:70:
         e9:50:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----