Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a343030303a3a2f33362d3336203d3e20323636383332.roa
File:                     323830333a386361303a343030303a3a2f33362d3336203d3e20323636383332.roa (raw, json)
Hash identifier:          8K2dZtG9Umcg9zl9ZTxHCohGbYgHwFaedddM2QoDsB0=
Subject key identifier:   BD:43:88:0C:05:6F:6E:86:BE:2B:D0:AC:B2:E4:C4:F8:A5:F5:45:E4
Certificate issuer:       /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial:       38AE0FEE6A1B390B75CA45F51AFC282F63CE45C2
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a343030303a3a2f33362d3336203d3e20323636383332.roa
Signing time:             Fri 24 Jan 2025 17:00:01 +0000
ROA not before:           Fri 24 Jan 2025 16:55:01 +0000
ROA not after:            Fri 23 Jan 2026 17:00:01 +0000
asID:                     266832
IP address blocks:        2803:8ca0:4000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ae:0f:ee:6a:1b:39:0b:75:ca:45:f5:1a:fc:28:2f:63:ce:45:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
        Validity
            Not Before: Jan 24 16:55:01 2025 GMT
            Not After : Jan 23 17:00:01 2026 GMT
        Subject: CN=BD43880C056F6E86BE2BD0ACB2E4C4F8A5F545E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d0:66:2e:8e:1d:ae:92:c1:a7:68:cc:17:5d:
                    78:bf:b0:e4:ed:83:50:ad:4f:27:27:d0:4c:c7:33:
                    a7:35:08:5e:c8:67:39:60:1f:c0:e4:47:50:a4:a6:
                    61:22:7d:15:d2:ad:f7:1e:27:e7:b9:e8:59:b4:31:
                    5e:b6:f9:4b:26:39:2d:1b:f6:05:3b:7d:59:09:7f:
                    c1:7d:14:a4:13:89:c2:a8:d6:77:7d:61:0c:50:f5:
                    f2:92:71:64:82:5a:88:95:ed:21:bd:79:08:64:dc:
                    a3:73:d8:8e:06:5f:29:21:3c:0c:d5:be:a3:f9:20:
                    19:e2:86:6c:56:bf:cf:76:2e:20:c4:8a:1b:99:45:
                    32:95:75:b3:d8:ed:51:1d:d7:86:0f:bf:38:05:40:
                    15:54:b1:ee:b2:ce:8c:9d:cc:9c:ed:53:21:65:98:
                    49:b8:b6:34:d9:98:e3:e4:56:85:fd:e6:3e:04:43:
                    18:d4:a9:f4:39:4e:92:a4:ae:33:f1:7e:85:6a:65:
                    2d:c1:e9:bf:e5:a5:f2:de:52:80:75:3b:71:5a:50:
                    bc:85:f1:72:86:15:f7:a1:c4:b3:0a:f7:ae:cd:88:
                    fc:70:bb:bf:cb:ee:26:70:5f:42:7b:46:a2:e0:8a:
                    53:fa:41:e7:87:f2:1a:13:01:e8:d0:03:fe:ed:9f:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:43:88:0C:05:6F:6E:86:BE:2B:D0:AC:B2:E4:C4:F8:A5:F5:45:E4
            X509v3 Authority Key Identifier:
                keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a343030303a3a2f33362d3336203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ca0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         90:ac:d2:a4:f8:7c:0a:9f:64:d6:e1:1e:90:89:75:15:aa:94:
         cc:43:a4:3f:2f:d5:99:b2:dd:30:9f:38:e0:0d:7b:12:1d:61:
         18:77:69:16:5d:d7:86:a7:1d:26:1f:47:4b:22:a9:55:c6:8d:
         ad:44:bd:a2:d3:d1:ef:f4:6c:87:89:74:bb:f2:2c:7f:55:f6:
         51:a2:86:5d:ee:fb:48:cb:04:5a:ba:9d:d4:25:fe:cf:f4:49:
         23:b7:98:62:9b:0f:9e:e1:8f:30:f6:d3:97:60:78:a3:27:4a:
         d8:54:26:39:00:63:d1:ca:3f:c7:9a:70:75:b4:a1:2f:ab:e1:
         4d:ab:ab:65:98:38:e9:aa:d0:0b:82:aa:a4:1c:41:ed:0e:de:
         08:61:b7:91:64:04:df:35:57:5b:e9:bb:e8:63:b4:e1:ff:0f:
         84:0a:38:c1:b8:a4:98:bc:c7:3e:1d:d6:7c:0b:c1:b8:ed:b6:
         e5:bf:b7:66:75:81:51:20:7f:9a:01:ee:10:34:5c:f0:28:70:
         8f:f7:f3:f8:e8:33:70:44:85:97:28:b1:c3:62:52:0c:55:9f:
         0c:03:fa:8c:48:fe:2f:6b:6f:78:28:1c:99:a1:41:1d:1a:76:
         d0:bc:84:09:e5:29:a9:e6:63:1b:0f:64:4a:e3:f9:40:5c:c8:
         12:97:52:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----