Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/323830333a343231303a3a2f33322d3438203d3e20323731383938.roa
File:                     323830333a343231303a3a2f33322d3438203d3e20323731383938.roa (raw, json)
Hash identifier:          ZHf0biY+US6uZj5TRi5pd6O9HO9vRvtbjp33J69L8rY=
Subject key identifier:   56:72:CC:27:95:01:E9:A8:00:EC:B6:44:34:7F:6B:B0:BE:F2:86:5F
Certificate issuer:       /CN=15AE320A4DE21615CC1ABBF64113CDEFC2D255CA
Certificate serial:       2E1DED6FC8922BA0C0DFABC55BE3746B397E46DC
Authority key identifier: 15:AE:32:0A:4D:E2:16:15:CC:1A:BB:F6:41:13:CD:EF:C2:D2:55:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/323830333a343231303a3a2f33322d3438203d3e20323731383938.roa
Signing time:             Tue 05 Mar 2024 18:18:29 +0000
ROA not before:           Tue 05 Mar 2024 18:13:29 +0000
ROA not after:            Tue 04 Mar 2025 18:18:29 +0000
asID:                     271898
IP address blocks:        2803:4210::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:1d:ed:6f:c8:92:2b:a0:c0:df:ab:c5:5b:e3:74:6b:39:7e:46:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15AE320A4DE21615CC1ABBF64113CDEFC2D255CA
        Validity
            Not Before: Mar  5 18:13:29 2024 GMT
            Not After : Mar  4 18:18:29 2025 GMT
        Subject: CN=5672CC279501E9A800ECB644347F6BB0BEF2865F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fe:ff:e2:bd:c3:81:71:41:0f:ba:3c:35:a7:
                    fa:de:06:f6:b3:45:a4:da:a7:9e:30:0c:16:e0:41:
                    da:f7:20:82:17:bf:2f:68:82:51:aa:66:a9:3a:8a:
                    d5:f5:2f:65:b8:0a:70:68:92:5a:29:da:9a:fd:0b:
                    45:16:5f:fe:3d:38:a3:83:bc:11:dc:47:e1:92:35:
                    48:ee:dc:ee:ba:ca:8c:64:aa:d0:77:cb:8f:26:2a:
                    91:2d:64:a8:76:43:da:f9:76:ee:41:f9:42:54:37:
                    00:f5:70:a6:69:3e:d1:37:b9:c6:6f:51:76:2a:3c:
                    1d:94:85:5e:68:ee:e2:87:8b:78:60:91:ac:68:92:
                    46:ae:28:80:d8:9d:bb:8b:99:a9:5c:aa:4f:62:45:
                    b5:40:cd:3a:c0:a7:55:65:cb:e4:86:24:76:26:47:
                    27:4f:32:ed:2f:69:85:cb:a4:e5:77:41:e5:02:2b:
                    1e:ec:ce:70:78:83:25:17:86:30:e4:f1:c0:c0:19:
                    41:3f:bb:fc:73:00:3b:0e:85:75:92:81:b3:6f:30:
                    28:ac:20:ec:2d:1f:e4:1f:73:36:52:19:b8:6c:82:
                    cc:b6:5e:09:73:0e:0c:62:2b:b8:d4:ce:6e:8f:a3:
                    1b:09:a3:58:cd:82:8a:29:be:bf:b2:d2:13:bb:4d:
                    b4:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:72:CC:27:95:01:E9:A8:00:EC:B6:44:34:7F:6B:B0:BE:F2:86:5F
            X509v3 Authority Key Identifier:
                keyid:15:AE:32:0A:4D:E2:16:15:CC:1A:BB:F6:41:13:CD:EF:C2:D2:55:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/15AE320A4DE21615CC1ABBF64113CDEFC2D255CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00C329626CCD6186E2E4B428F5A036887847FB4FA82BC22B45E6ADD4CAB2B7C1/0/323830333a343231303a3a2f33322d3438203d3e20323731383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4210::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:19:56:89:96:9f:36:21:8c:fd:37:2b:e0:7b:fc:ea:bc:cd:
         72:26:2f:5b:c9:bf:cf:92:01:b8:0a:ae:a2:61:f6:5b:6f:5a:
         08:93:4f:85:67:e1:61:80:2d:14:ab:fd:ff:a7:ab:ca:1c:40:
         24:44:88:d3:06:e2:0c:f6:01:8b:04:97:c8:de:8e:3d:35:db:
         c9:3f:f4:44:47:2b:a9:9c:3b:90:58:df:0a:f5:dd:ad:bc:e5:
         34:d4:ac:b9:43:88:38:d7:41:53:8d:c5:6d:9a:db:29:fe:48:
         ca:dd:a4:f1:23:64:d0:ee:61:ee:f4:2d:ba:41:6b:fc:47:b9:
         2c:64:fb:a6:2b:bc:3e:db:7c:ff:96:c4:68:e3:ab:8f:b2:15:
         2a:a6:4e:f5:9b:bf:b9:b3:b3:e1:eb:17:14:9d:6b:39:c9:25:
         7a:65:fb:f3:7f:59:cd:4c:75:f2:a6:85:2c:1e:41:14:55:da:
         e7:3a:8b:ab:ed:53:27:68:34:06:9b:cf:cf:2b:86:b8:dd:47:
         b2:8e:99:0e:1b:4f:d6:49:4e:b2:55:d5:a7:71:92:c9:b0:ed:
         12:3e:25:ff:2e:e7:ba:6d:0b:46:79:4c:69:b5:6e:33:c6:98:
         63:04:fd:f1:23:b2:79:3f:8e:59:a8:97:d8:41:ab:c4:9d:62:
         55:83:1e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----