Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/323830333a666632303a3a2f33322d3438203d3e20323636383136.roa
File:                     323830333a666632303a3a2f33322d3438203d3e20323636383136.roa (raw, json)
Hash identifier:          nzXSRMH0L1KRBVuca/8UwMbodafSaOrHuqfWrqkbqLk=
Subject key identifier:   92:D4:CB:B3:88:7D:99:E2:93:E3:33:1C:D8:21:6E:F9:FB:D1:A9:1C
Certificate issuer:       /CN=6EE358D5638125E1616F9AF891B9621DFB84CDB8
Certificate serial:       3A2006C89C103EF5E3A61877106979F61DECB3EF
Authority key identifier: 6E:E3:58:D5:63:81:25:E1:61:6F:9A:F8:91:B9:62:1D:FB:84:CD:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/323830333a666632303a3a2f33322d3438203d3e20323636383136.roa
Signing time:             Thu 23 Jan 2025 02:30:00 +0000
ROA not before:           Thu 23 Jan 2025 02:25:00 +0000
ROA not after:            Thu 22 Jan 2026 02:30:00 +0000
asID:                     266816
IP address blocks:        2803:ff20::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:20:06:c8:9c:10:3e:f5:e3:a6:18:77:10:69:79:f6:1d:ec:b3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6EE358D5638125E1616F9AF891B9621DFB84CDB8
        Validity
            Not Before: Jan 23 02:25:00 2025 GMT
            Not After : Jan 22 02:30:00 2026 GMT
        Subject: CN=92D4CBB3887D99E293E3331CD8216EF9FBD1A91C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:ee:8e:4c:1e:6f:c9:6b:36:5c:37:08:60:
                    3b:60:02:fc:a5:49:83:1f:ad:06:1b:96:8e:7e:76:
                    c8:fd:b5:15:e5:64:74:e3:2e:11:b9:68:32:6f:5c:
                    38:7c:4b:aa:ec:a6:ce:f4:ae:4c:f4:77:a0:35:be:
                    33:ff:79:be:43:6d:c5:19:49:27:a7:7d:e7:3b:fd:
                    1b:2e:af:e7:65:f3:09:0f:2a:e9:c2:0c:0a:24:a9:
                    a9:ce:e9:42:d2:fa:4b:8d:60:75:ac:ee:87:fb:4d:
                    c9:6f:4e:5d:a1:0e:3d:dd:0c:98:d9:2d:58:18:ae:
                    27:de:02:ea:6b:f1:b3:d5:35:66:9b:b4:97:2a:17:
                    fa:18:a3:8d:42:d0:8f:0c:62:9f:8d:8a:ba:6a:ab:
                    23:ce:c7:3f:75:f5:7c:c4:ac:54:b1:20:a6:29:0c:
                    49:0b:cd:1a:cc:1c:ad:bb:c4:35:0e:31:10:2e:b0:
                    eb:00:84:2a:db:64:e4:df:cb:6f:b2:2c:e5:dc:9a:
                    8c:31:5a:b9:d8:7c:b3:0a:c0:44:2f:3a:d6:c0:ce:
                    a2:e4:3f:71:c1:a0:34:fb:4d:29:8c:a6:b4:6f:7c:
                    0a:47:a3:c5:14:6b:54:89:2a:42:a6:3f:ec:ce:6c:
                    aa:87:67:76:1f:e2:f9:83:a1:70:7c:6f:06:3b:51:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D4:CB:B3:88:7D:99:E2:93:E3:33:1C:D8:21:6E:F9:FB:D1:A9:1C
            X509v3 Authority Key Identifier:
                keyid:6E:E3:58:D5:63:81:25:E1:61:6F:9A:F8:91:B9:62:1D:FB:84:CD:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6EE358D5638125E1616F9AF891B9621DFB84CDB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B3F537BC12C419CB91DE2B05705C31107E013A030A46C0382BF3B008B07D4E3A/0/323830333a666632303a3a2f33322d3438203d3e20323636383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ff20::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:6b:9b:bd:55:db:cc:77:7f:d0:54:10:5a:5a:0a:59:e8:92:
         bb:df:4d:29:c7:aa:ec:13:90:b7:7c:2e:f5:bf:70:5f:cb:af:
         b6:83:a7:32:51:7d:6a:99:fb:4d:ce:8b:70:1e:6f:b9:f6:08:
         7c:59:dd:3a:d9:c0:50:11:45:56:b2:c0:8a:c3:c8:67:31:61:
         d6:9c:8a:20:39:4b:cb:76:78:36:af:26:ec:59:17:2b:ef:fa:
         dd:c9:31:15:f9:5b:dc:dd:49:ab:b0:31:bc:00:55:b7:a1:de:
         a0:51:a2:ba:42:89:c8:46:be:c1:c4:de:58:c8:89:31:5b:e1:
         77:34:33:05:eb:fa:22:e7:d6:fd:63:52:cd:b1:55:68:bb:66:
         a5:db:32:e9:18:18:45:c6:68:56:b8:d6:be:7d:00:67:5f:c9:
         25:42:1b:05:71:65:d1:ba:8d:91:84:60:84:6a:9b:b3:88:74:
         6e:f2:88:04:92:81:64:f4:44:38:6c:62:1e:01:c6:ff:39:67:
         06:4e:be:44:a2:fe:a4:89:85:38:49:25:bb:d5:04:92:b6:2c:
         38:c1:41:32:c4:9f:90:13:45:fb:55:7d:f8:fc:86:8c:a4:60:
         d7:08:4d:7b:fe:ae:19:41:2d:c0:3f:33:70:90:46:79:a4:69:
         04:8c:bb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----