Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/323830333a363431303a3a2f33322d3430203d3e20323731383535.roa
File:                     323830333a363431303a3a2f33322d3430203d3e20323731383535.roa (raw, json)
Hash identifier:          5dJBZRg1BrGUv146UeQdLumwOwJ4U63YZ2cnCAJF35w=
Subject key identifier:   61:51:97:96:63:AB:08:EA:1D:AA:04:5B:D4:B6:67:73:4C:46:85:34
Certificate issuer:       /CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
Certificate serial:       0ABF63A7F47899A3862B8A27BC389AFB650BEDAA
Authority key identifier: 82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/323830333a363431303a3a2f33322d3430203d3e20323731383535.roa
Signing time:             Tue 26 Nov 2024 05:20:00 +0000
ROA not before:           Tue 26 Nov 2024 05:15:00 +0000
ROA not after:            Tue 25 Nov 2025 05:20:00 +0000
asID:                     271855
IP address blocks:        2803:6410::/32 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:bf:63:a7:f4:78:99:a3:86:2b:8a:27:bc:38:9a:fb:65:0b:ed:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7
        Validity
            Not Before: Nov 26 05:15:00 2024 GMT
            Not After : Nov 25 05:20:00 2025 GMT
        Subject: CN=6151979663AB08EA1DAA045BD4B667734C468534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2c:11:51:18:0d:98:05:f6:8d:88:7d:d6:70:
                    41:fd:32:8b:e9:cb:41:a8:95:be:de:4b:15:47:34:
                    3d:5d:86:a0:c8:1c:49:ec:f8:29:b7:1b:c3:6c:79:
                    1f:c7:97:b0:6c:d7:6f:e9:ce:b2:ea:4b:59:8c:f8:
                    ed:67:c6:75:e6:8b:1f:b9:c4:07:bf:06:26:53:dc:
                    89:b4:a2:ae:33:86:3d:9c:39:1b:31:bf:05:24:bc:
                    f0:02:ed:e4:ef:d5:e2:b7:d6:6c:52:1f:a7:31:88:
                    dc:d9:de:01:6a:f6:e0:18:f3:53:f3:62:5f:8f:8a:
                    fc:a5:76:cc:da:77:9a:56:ad:95:63:08:5a:33:50:
                    e6:38:fd:7b:02:43:c2:f6:9a:2e:39:db:43:43:e2:
                    dc:44:f0:9a:61:e3:03:c1:1c:d7:4f:e7:86:5e:6a:
                    6b:d3:db:2d:fa:b7:a3:cb:8b:01:58:82:83:f3:3b:
                    a5:da:08:c2:ab:66:f3:c1:72:a3:7c:e5:f4:4c:a1:
                    32:8d:53:3d:84:ff:38:de:a2:52:d9:39:ea:70:94:
                    65:02:1b:33:9e:9d:9d:7c:d0:1e:5d:d0:45:e9:4e:
                    b6:54:7b:45:52:9f:f1:3b:c6:9d:60:46:0b:75:32:
                    19:39:61:d6:ae:4c:63:76:c9:e7:46:f6:2c:bf:8a:
                    dd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:51:97:96:63:AB:08:EA:1D:AA:04:5B:D4:B6:67:73:4C:46:85:34
            X509v3 Authority Key Identifier:
                keyid:82:25:D5:85:11:74:DA:30:BC:CC:AA:6A:CF:25:AB:C8:BB:FE:92:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8225D5851174DA30BCCCAA6ACF25ABC8BBFE92B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/D99C172212C57D1B2054505ECFA0D366FEFE462AB283AC99AF3117A1002B528A/0/323830333a363431303a3a2f33322d3430203d3e20323731383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6410::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:6c:4b:b4:88:af:2e:48:6d:47:88:58:17:92:7c:11:b7:31:
         5b:d0:ca:f4:9b:28:45:41:c2:c5:05:97:f6:ca:d1:e5:91:c2:
         20:cb:88:bd:05:3e:b5:27:aa:a5:d1:61:4a:12:67:2b:f4:a9:
         bc:9a:da:dd:9e:4e:69:31:2f:00:e5:53:a7:f0:ab:91:a9:b7:
         bd:eb:23:fc:e5:76:42:c2:ac:2e:0d:40:49:03:1a:d0:06:a2:
         58:c4:2b:d2:b8:ca:07:ef:90:25:d2:49:ae:b4:46:00:09:af:
         be:ef:f9:e0:e2:2d:24:62:11:22:78:3b:fa:e5:95:42:21:1d:
         69:1c:45:a8:6b:d7:a2:a2:9a:8b:6a:c8:f1:70:00:a2:df:9e:
         c3:dd:3a:3c:44:1c:75:e6:0d:3f:c3:2f:c3:66:e7:4a:1c:92:
         54:83:d9:ba:06:94:6c:2c:4e:44:63:66:39:90:cf:d2:b1:d5:
         3b:bf:6a:5b:98:cc:ce:01:db:7a:ba:1e:c6:a4:d4:92:da:a8:
         98:f2:e5:fa:9c:49:8d:6d:8c:f7:6a:5e:ae:eb:63:ab:83:83:
         63:1c:c1:48:6d:05:48:b7:3d:be:0a:2b:8e:b5:8d:88:98:74:
         22:11:b0:b5:1d:bc:11:5b:47:43:da:ec:b3:e8:38:d6:1e:65:
         bf:d1:08:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----