Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/323830333a386638303a3a2f33322d3332203d3e20323633383239.roa
File:                     323830333a386638303a3a2f33322d3332203d3e20323633383239.roa (raw, json)
Hash identifier:          2u0dftYB47kjwXQ/8bRf/ZNymxq4PxtCGh2sxIxGJfU=
Subject key identifier:   AF:3A:2A:6F:8A:AA:92:D6:A2:CF:55:8F:62:45:3D:07:66:DB:4F:85
Certificate issuer:       /CN=533F533C8354549C5674B43113DA207BD7EF1A31
Certificate serial:       0C286F2654AFC4165E0EE2326B5479D0FC10FB93
Authority key identifier: 53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/323830333a386638303a3a2f33322d3332203d3e20323633383239.roa
Signing time:             Tue 04 Feb 2025 18:40:14 +0000
ROA not before:           Tue 04 Feb 2025 18:35:14 +0000
ROA not after:            Tue 03 Feb 2026 18:40:14 +0000
asID:                     263829
IP address blocks:        2803:8f80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:28:6f:26:54:af:c4:16:5e:0e:e2:32:6b:54:79:d0:fc:10:fb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533F533C8354549C5674B43113DA207BD7EF1A31
        Validity
            Not Before: Feb  4 18:35:14 2025 GMT
            Not After : Feb  3 18:40:14 2026 GMT
        Subject: CN=AF3A2A6F8AAA92D6A2CF558F62453D0766DB4F85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:65:71:19:cb:5b:16:e9:e4:57:c2:bb:16:9f:
                    77:b6:d3:93:18:48:1d:25:fb:a4:8d:fd:55:60:c6:
                    0a:ed:f0:17:37:58:5f:ab:b9:d4:1f:63:82:b1:71:
                    59:04:a0:dd:13:88:35:0c:39:50:72:bb:a8:7c:71:
                    2b:c9:37:51:f7:7c:b9:cb:8b:1d:da:c9:88:42:f2:
                    a2:7a:d6:ce:05:8a:ff:a9:e0:e3:92:4d:87:e2:bb:
                    ec:a3:eb:ce:aa:43:75:a4:66:f0:f5:8f:90:ea:f7:
                    8f:a5:36:b3:f3:6f:f8:50:a7:99:d0:8b:ba:bd:a2:
                    45:60:a7:69:1f:6c:6f:70:c1:6e:7a:ff:35:cd:f9:
                    89:ca:35:c0:da:ff:d9:bb:5d:a2:13:bd:b7:7f:24:
                    c3:50:53:d7:28:36:ec:aa:d1:fb:14:7e:e7:20:39:
                    8a:cb:94:4e:4b:08:61:25:94:86:6f:86:20:45:62:
                    63:d6:8b:c4:30:a2:a0:9b:37:4c:fa:9c:0d:23:81:
                    5b:0e:10:d8:9f:00:38:40:9a:b5:5a:5b:88:91:32:
                    a1:69:20:63:90:ab:fb:88:77:f9:df:11:ab:49:89:
                    2f:b0:c3:83:eb:2f:67:4b:85:42:33:e6:78:a4:b1:
                    85:3a:1b:ee:70:14:46:19:bc:8b:6c:fd:32:9f:2d:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:3A:2A:6F:8A:AA:92:D6:A2:CF:55:8F:62:45:3D:07:66:DB:4F:85
            X509v3 Authority Key Identifier:
                keyid:53:3F:53:3C:83:54:54:9C:56:74:B4:31:13:DA:20:7B:D7:EF:1A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/533F533C8354549C5674B43113DA207BD7EF1A31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/533F533C8354549C5674B43113DA207BD7EF1A31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FC60C9DA0B072FAAB19BC51C5DE33A8E7138352000994794564E328D959CF17D/0/323830333a386638303a3a2f33322d3332203d3e20323633383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:a9:eb:76:3e:d5:b1:cb:c5:af:47:16:c5:a3:bc:af:77:3f:
         60:b7:55:66:8c:34:4a:04:4f:2b:af:47:36:e3:6c:3b:3b:d1:
         f5:22:c8:0f:5a:8f:f7:c1:b2:57:23:b0:91:49:bf:41:58:53:
         68:77:6a:41:0c:b4:8e:f9:5e:22:1b:c8:41:68:d2:1b:25:dd:
         6b:45:b8:5e:c1:47:b8:68:37:5c:26:57:ef:4a:fc:15:8f:69:
         da:34:d6:7a:53:26:16:bb:31:1d:a6:d2:14:11:74:63:18:af:
         84:58:74:a5:08:1e:66:4b:fe:76:9e:f8:c6:e2:7b:88:f6:63:
         c1:73:4f:27:a9:8c:37:18:d3:e6:60:73:64:0c:bc:3a:c5:4c:
         80:94:59:ee:82:89:90:01:a4:7b:51:c7:c1:05:f2:c6:01:12:
         c9:ce:2d:4a:e4:8e:59:14:96:bb:c7:d7:f7:0d:aa:6c:5b:d7:
         b3:c4:9f:43:95:93:1e:9f:21:16:c8:42:4d:27:c3:e4:3e:b1:
         fd:20:7a:df:28:89:7d:6a:fc:70:ea:d7:2b:6c:d6:89:92:e6:
         8f:d6:1a:a9:aa:60:26:e4:0a:68:2a:76:ab:49:47:64:55:5f:
         61:04:48:50:b0:97:ef:18:1e:de:47:94:eb:76:98:59:9b:11:
         44:3e:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----