Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a3a2f33322d3332203d3e20323636383332.roa
File:                     323830333a386361303a3a2f33322d3332203d3e20323636383332.roa (raw, json)
Hash identifier:          QixYdXBdgMI5YltQWTwGM1tLs4/tE3QpznODfomt+8Y=
Subject key identifier:   AB:DB:5C:82:52:6D:65:80:72:51:95:2B:CA:A5:B8:99:0F:9D:BB:9E
Certificate issuer:       /CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
Certificate serial:       6774D200506E7619CB33B8B593F8CEA9D5908B9A
Authority key identifier: CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a3a2f33322d3332203d3e20323636383332.roa
Signing time:             Fri 24 Jan 2025 17:00:01 +0000
ROA not before:           Fri 24 Jan 2025 16:55:01 +0000
ROA not after:            Fri 23 Jan 2026 17:00:01 +0000
asID:                     266832
IP address blocks:        2803:8ca0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:74:d2:00:50:6e:76:19:cb:33:b8:b5:93:f8:ce:a9:d5:90:8b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB51CF25AE68F0C858FEB51FF72D964BE568AA54
        Validity
            Not Before: Jan 24 16:55:01 2025 GMT
            Not After : Jan 23 17:00:01 2026 GMT
        Subject: CN=ABDB5C82526D65807251952BCAA5B8990F9DBB9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:78:1c:df:72:08:16:6d:08:69:5f:af:57:1d:
                    20:e2:ad:17:0f:ad:1c:5b:9f:b4:c6:13:07:86:de:
                    6f:7d:e4:86:4f:b3:03:d9:31:4c:39:e8:a9:a5:3a:
                    4b:75:bd:10:d0:f4:14:68:43:2f:72:e0:3a:fe:5b:
                    81:0f:82:ed:ed:2d:4e:c3:88:bc:c1:14:1d:1d:09:
                    03:cb:af:a1:1f:18:55:20:bf:79:42:23:cd:f5:a6:
                    69:f5:8c:5d:48:28:bf:62:51:37:03:ad:bc:21:67:
                    c6:bc:8e:5f:00:53:9e:37:60:af:d5:e1:8e:4d:8f:
                    10:38:5d:5e:1e:db:fb:a9:db:c2:a4:d7:f8:1c:65:
                    74:5e:f7:87:44:16:f3:67:3c:a6:8c:94:c1:c0:d9:
                    45:4e:d4:3b:66:c7:c6:9f:a0:01:40:8c:57:26:02:
                    7b:8f:2f:e6:f6:05:f9:0c:99:d2:9c:a7:ca:7f:4e:
                    5d:a1:c5:8c:06:a2:a7:01:f7:aa:4c:41:3e:21:27:
                    c5:ef:af:30:d8:59:d7:e4:bd:7b:02:e8:06:f1:f3:
                    70:02:cf:8d:27:91:b2:a3:09:a2:2a:8e:85:9a:cd:
                    c2:a6:6c:9f:70:52:8c:3c:a9:4f:51:fa:a8:22:cc:
                    b6:ca:32:76:ed:55:6d:7f:1b:99:00:b1:df:17:a2:
                    27:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:DB:5C:82:52:6D:65:80:72:51:95:2B:CA:A5:B8:99:0F:9D:BB:9E
            X509v3 Authority Key Identifier:
                keyid:CB:51:CF:25:AE:68:F0:C8:58:FE:B5:1F:F7:2D:96:4B:E5:68:AA:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CB51CF25AE68F0C858FEB51FF72D964BE568AA54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30CC8E928CEFD03411023C0EDE689D1B7B796364201C2AC9B99E515B83A7F74D/0/323830333a386361303a3a2f33322d3332203d3e20323636383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:31:c8:8f:fb:31:63:bd:e4:52:77:11:17:b0:f9:30:1e:5b:
         c4:b7:b0:87:63:f9:12:6d:35:92:4a:22:5f:56:f6:e3:9d:9c:
         82:da:93:db:c4:05:34:2b:99:8a:e0:5f:4c:17:6d:7c:f0:3c:
         7e:82:68:92:5f:f8:42:08:58:3e:74:31:2d:f0:63:a7:5b:11:
         32:e6:00:87:0e:3b:45:e2:5e:dc:75:f5:21:58:3a:30:a9:85:
         5b:49:a5:c5:f2:3e:03:04:0d:b4:1d:be:f4:94:a8:f0:dc:b9:
         66:51:97:72:3b:e1:5f:5b:d4:70:67:7d:16:96:5c:00:37:04:
         95:86:ab:c0:44:b7:30:7c:f9:7f:2d:70:bc:7c:73:3f:06:a5:
         11:a5:bb:fe:e3:d2:4e:20:fe:0b:b7:c4:a8:7a:9f:36:c7:f6:
         b7:a8:18:21:5c:72:e1:b0:76:f8:79:44:5a:c5:80:92:14:94:
         78:38:0c:75:0f:ce:37:6b:db:fd:a4:11:06:64:23:75:8f:29:
         27:b9:24:9f:84:45:20:ac:b1:39:42:20:19:4f:49:dc:91:61:
         04:72:24:ae:14:ae:1e:17:da:66:fe:02:c7:75:f2:90:45:f2:
         2a:96:21:5e:22:d4:38:0f:2d:e9:9a:d5:87:c9:0b:f1:8a:34:
         2f:ea:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----