Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/323830333a643864303a3a2f33322d3332203d3e20323733393935.roa
File:                     323830333a643864303a3a2f33322d3332203d3e20323733393935.roa (raw, json)
Hash identifier:          jiLdM2vdlzmPunh+cW5SRHSX3nZO+qa8HP7tMDw1suU=
Subject key identifier:   C8:87:BA:DA:EF:7B:F4:0B:1B:27:EA:A1:17:98:93:0B:58:57:E0:23
Certificate issuer:       /CN=074AFFA3641D50770C47BF506125425107CF524A
Certificate serial:       0CC367F96FFE1B96E52FB525DF5FE7211A8F6534
Authority key identifier: 07:4A:FF:A3:64:1D:50:77:0C:47:BF:50:61:25:42:51:07:CF:52:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/074AFFA3641D50770C47BF506125425107CF524A.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/323830333a643864303a3a2f33322d3332203d3e20323733393935.roa
Signing time:             Tue 17 Dec 2024 19:25:00 +0000
ROA not before:           Tue 17 Dec 2024 19:20:00 +0000
ROA not after:            Tue 16 Dec 2025 19:25:00 +0000
asID:                     273995
IP address blocks:        2803:d8d0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c3:67:f9:6f:fe:1b:96:e5:2f:b5:25:df:5f:e7:21:1a:8f:65:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=074AFFA3641D50770C47BF506125425107CF524A
        Validity
            Not Before: Dec 17 19:20:00 2024 GMT
            Not After : Dec 16 19:25:00 2025 GMT
        Subject: CN=C887BADAEF7BF40B1B27EAA11798930B5857E023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:30:c8:96:ba:8b:9a:4a:65:be:b1:39:30:fa:
                    47:16:2f:a9:eb:5f:76:55:28:6b:68:c7:17:dc:dd:
                    14:22:6b:f2:57:85:9f:2c:86:1f:8f:9e:c7:a2:df:
                    c7:e0:7e:42:91:ed:0d:14:4a:40:37:d1:3d:d8:35:
                    72:e7:38:7a:62:4d:b6:28:da:8b:ca:99:72:96:45:
                    c9:d6:bb:cf:7a:bb:46:20:3d:98:74:0b:14:21:ed:
                    6f:9f:c0:cc:b6:2a:fe:5c:6a:9d:d4:52:11:1c:22:
                    77:da:29:8c:e2:08:fb:47:d9:a9:81:89:76:d5:22:
                    35:3c:b9:c0:fa:ce:c2:36:56:60:c5:fb:94:c8:8f:
                    42:fb:ba:72:2f:b5:cb:88:f7:cf:b0:b6:9b:33:9e:
                    5b:db:6b:17:87:d1:ee:9c:56:24:d9:eb:36:99:69:
                    05:1c:3f:c2:66:29:a4:3d:f0:e8:f9:cd:78:3b:52:
                    4f:22:30:4d:46:1f:0e:82:86:c6:89:39:ff:b4:7f:
                    a4:73:21:06:a5:d1:cc:d1:56:e3:a3:3f:72:05:69:
                    d9:53:fa:18:9d:ce:27:f4:aa:dc:d9:22:24:ab:fc:
                    c2:58:9d:72:0e:f5:b4:11:b3:d8:70:a8:17:cd:68:
                    fc:17:52:1f:7e:c4:4d:59:5a:b4:4e:6b:7f:c3:4b:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:87:BA:DA:EF:7B:F4:0B:1B:27:EA:A1:17:98:93:0B:58:57:E0:23
            X509v3 Authority Key Identifier:
                keyid:07:4A:FF:A3:64:1D:50:77:0C:47:BF:50:61:25:42:51:07:CF:52:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/074AFFA3641D50770C47BF506125425107CF524A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/074AFFA3641D50770C47BF506125425107CF524A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/B65A7CB4D40689A76255E9C07091CB6CDF05F307ADD0B21B11F21E6EFC27DCDA/0/323830333a643864303a3a2f33322d3332203d3e20323733393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d8d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:7a:72:9c:3b:00:44:6d:50:86:c8:55:e4:c1:22:27:dd:df:
         d7:5d:c9:6b:b9:e8:1b:eb:0e:e4:41:4e:f5:1f:72:07:f2:e2:
         c7:f8:ab:1d:bc:ca:ca:f8:06:e6:3f:58:8c:61:69:0e:18:31:
         08:0c:7e:b3:cc:67:bc:3e:20:f7:a1:f2:79:76:aa:e9:05:c0:
         06:8a:55:10:a9:e7:c0:b1:a8:d8:4b:ea:8e:db:0b:99:6b:10:
         db:02:e4:d4:f9:3d:01:3b:27:0e:89:38:6a:9b:d7:cf:10:9c:
         ea:7c:ba:8c:fe:d8:97:5e:93:72:5b:03:61:a2:20:99:f1:c2:
         fa:53:95:49:b6:3a:e2:35:40:73:23:ab:90:e4:df:6f:dc:bb:
         9d:53:b7:5a:53:ad:1c:c1:8a:83:34:d5:06:b3:68:5e:ee:c1:
         3d:5a:26:df:04:04:6e:d5:3b:64:62:db:ad:b6:73:b8:50:fe:
         d4:b9:12:c9:8e:5c:b8:63:77:6b:46:06:69:9a:da:f5:cd:fd:
         b5:0b:bf:b4:92:bf:17:2c:8f:36:6d:54:75:3f:f7:19:8e:ef:
         05:e7:53:f3:a1:a6:5d:41:ab:5a:c9:3c:4f:17:7d:80:46:26:
         36:e8:39:4e:c2:d5:a4:90:e8:1d:46:0f:0a:af:4d:68:05:a1:
         aa:3f:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----