Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/323830333a643230303a3a2f33322d3332203d3e203238303836.roa
File:                     323830333a643230303a3a2f33322d3332203d3e203238303836.roa (raw, json)
Hash identifier:          vT/4hK6exTg1Uv7NRX1QMJTMVvJVFdypl7eh86bPvWs=
Subject key identifier:   FE:AA:4B:67:2F:3B:BF:67:97:9C:13:E0:0A:7F:A1:45:AA:FE:94:08
Certificate issuer:       /CN=7576B30485208191B54BA2BD59339967753E0699
Certificate serial:       4AE3F109F49F4E6406DCFD52A989C875A0055529
Authority key identifier: 75:76:B3:04:85:20:81:91:B5:4B:A2:BD:59:33:99:67:75:3E:06:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/323830333a643230303a3a2f33322d3332203d3e203238303836.roa
Signing time:             Tue 04 Feb 2025 18:55:00 +0000
ROA not before:           Tue 04 Feb 2025 18:50:00 +0000
ROA not after:            Tue 03 Feb 2026 18:55:00 +0000
asID:                     28086
IP address blocks:        2803:d200::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e3:f1:09:f4:9f:4e:64:06:dc:fd:52:a9:89:c8:75:a0:05:55:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7576B30485208191B54BA2BD59339967753E0699
        Validity
            Not Before: Feb  4 18:50:00 2025 GMT
            Not After : Feb  3 18:55:00 2026 GMT
        Subject: CN=FEAA4B672F3BBF67979C13E00A7FA145AAFE9408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5b:5a:95:c3:98:6c:ed:60:0a:32:17:2e:74:
                    d7:f8:6f:4f:22:f1:bd:87:c0:12:14:28:2f:d8:d0:
                    91:71:8f:e5:10:56:29:9d:b5:7a:c7:88:e8:b2:ee:
                    01:ad:42:28:de:4e:b6:03:04:a7:f6:f4:7f:96:a5:
                    e4:c0:dc:55:5e:ee:63:28:cd:98:2c:23:1a:77:87:
                    76:10:8a:11:91:84:5c:04:e5:20:a2:c4:a7:87:fb:
                    cd:6f:4b:5a:39:1d:7f:bd:26:08:81:a2:8c:e7:63:
                    25:77:a3:0a:52:e8:46:3c:0f:9a:be:47:72:18:cf:
                    ed:3a:28:57:38:40:4e:dc:b0:a3:16:ff:5c:02:ff:
                    5c:f0:31:67:04:8a:dd:72:31:1f:ec:87:c1:75:a9:
                    31:70:54:93:1e:a2:5a:a4:8c:82:53:24:bc:90:17:
                    27:69:1b:0a:5c:9a:45:bf:08:ee:db:40:d8:cf:9e:
                    51:d0:5f:84:5c:f6:a4:5d:19:1d:3b:bd:1e:0f:44:
                    f2:a2:99:9d:50:dc:f5:0f:f7:35:0f:5e:e5:45:df:
                    05:ad:c5:83:2f:a3:3d:bf:dc:86:8b:d7:cb:39:c4:
                    36:03:90:c5:00:66:b4:9e:53:1f:3c:4f:ae:65:f6:
                    0b:e3:1b:81:3f:a9:dd:eb:b0:86:d2:36:28:c5:3b:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AA:4B:67:2F:3B:BF:67:97:9C:13:E0:0A:7F:A1:45:AA:FE:94:08
            X509v3 Authority Key Identifier:
                keyid:75:76:B3:04:85:20:81:91:B5:4B:A2:BD:59:33:99:67:75:3E:06:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/7576B30485208191B54BA2BD59339967753E0699.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7576B30485208191B54BA2BD59339967753E0699.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FB312F853A363B8255AABD25954A11A432350EFBEA8F18F431E800E4C2AE0F07/0/323830333a643230303a3a2f33322d3332203d3e203238303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d200::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:9d:a7:71:13:44:02:66:e8:33:b4:d7:ba:47:93:78:c5:77:
         ec:c4:82:46:9a:60:68:6f:0b:3e:63:d1:2d:04:20:82:61:2d:
         7a:6a:45:a7:d6:56:f0:ad:c5:8b:1d:e4:d7:cf:48:38:f4:cd:
         e1:14:20:3f:cb:65:70:e8:7c:53:67:f6:48:37:6a:0e:b4:fb:
         4f:c9:e4:09:1a:fe:fe:5e:c7:65:48:d8:ef:10:a6:91:1a:d5:
         b6:ac:c5:4d:a6:9c:5b:bd:f4:e1:e5:35:40:10:f0:ff:65:91:
         b1:3a:c3:da:00:a7:66:76:3d:99:71:39:19:54:25:f9:62:b1:
         27:bf:87:b3:5b:22:ce:ea:e6:ba:26:7d:d9:b8:78:c8:17:3b:
         14:86:15:b0:e5:ee:97:d4:38:70:02:09:33:68:33:0f:4d:33:
         e5:de:65:f2:7e:0f:4f:5e:a8:07:69:61:4e:0f:5d:1f:15:68:
         b1:61:2b:a8:fe:37:5c:93:0d:16:59:be:8b:60:3b:ca:13:1c:
         55:4f:53:4d:b7:d3:3b:71:13:c7:5a:fe:bf:d0:41:09:3d:b0:
         2f:55:5d:74:09:0e:03:25:f7:f8:4a:79:fd:36:84:7b:1c:82:
         d9:a3:87:32:9a:38:c9:54:a7:6b:0e:1b:93:3d:4d:a6:89:19:
         74:5a:53:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----