Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a3a2f33322d3332203d3e20323633373239.roa
File:                     323830333a346638303a3a2f33322d3332203d3e20323633373239.roa (raw, json)
Hash identifier:          0wCw3/VcQnl9vU0H5hK077VO4r8phT/XrqFd2NROWVc=
Subject key identifier:   D5:1A:11:CD:F5:6B:42:C1:23:94:96:30:07:A0:51:20:36:2A:18:5A
Certificate issuer:       /CN=AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5
Certificate serial:       24BDDC7D9A70F1DAD7BC0E22CE49F2D857B07668
Authority key identifier: AB:6B:AD:4E:48:CA:90:BB:C6:E4:CE:22:67:5D:DE:58:82:BB:73:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a3a2f33322d3332203d3e20323633373239.roa
Signing time:             Tue 05 Mar 2024 18:23:00 +0000
ROA not before:           Tue 05 Mar 2024 18:18:00 +0000
ROA not after:            Tue 04 Mar 2025 18:23:00 +0000
asID:                     263729
IP address blocks:        2803:4f80::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bd:dc:7d:9a:70:f1:da:d7:bc:0e:22:ce:49:f2:d8:57:b0:76:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5
        Validity
            Not Before: Mar  5 18:18:00 2024 GMT
            Not After : Mar  4 18:23:00 2025 GMT
        Subject: CN=D51A11CDF56B42C12394963007A05120362A185A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ff:5b:f6:6c:57:0b:d6:9c:a8:59:8d:9c:9a:
                    5a:ba:63:f4:d6:8e:50:50:e5:6b:b0:37:e3:a6:52:
                    9d:a5:69:75:5f:9a:92:77:94:d2:2c:0c:ba:d1:79:
                    20:64:ec:1e:df:43:ce:25:1b:67:fd:ad:a5:9b:00:
                    de:d4:d4:16:d4:4d:3b:0f:b8:52:1e:25:82:e6:7e:
                    ae:b9:c8:e3:33:92:e7:c4:16:a0:fe:97:44:12:ec:
                    33:ff:21:b6:99:21:2b:d8:20:b4:3e:ab:2b:af:2b:
                    b6:d6:1e:c2:84:c3:37:db:73:6f:bc:a1:4e:6b:7c:
                    4e:de:69:c9:1a:9a:cc:2a:96:4d:bc:4b:c5:14:5a:
                    7a:0d:24:56:0e:df:02:30:d7:de:23:b4:e6:c4:39:
                    74:c9:04:f1:c9:f7:c1:32:3f:cd:84:47:c8:16:7d:
                    6e:ad:a8:54:04:3d:da:4e:4a:e6:30:0e:d7:87:c8:
                    9e:81:03:bb:cd:61:8e:f9:be:76:27:42:16:49:66:
                    f4:34:3d:15:ea:79:2e:e6:72:c4:9b:e8:28:f7:f1:
                    87:a6:87:14:63:46:bb:c0:4c:4a:c5:dd:70:4d:51:
                    59:a4:1d:73:8f:c2:d3:35:dd:06:bc:0d:09:91:1d:
                    55:40:77:5c:cb:af:e5:34:48:cc:8a:10:54:f3:22:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1A:11:CD:F5:6B:42:C1:23:94:96:30:07:A0:51:20:36:2A:18:5A
            X509v3 Authority Key Identifier:
                keyid:AB:6B:AD:4E:48:CA:90:BB:C6:E4:CE:22:67:5D:DE:58:82:BB:73:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AB6BAD4E48CA90BBC6E4CE22675DDE5882BB73D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/00E169E1C6AB56A5AC7B724970AF735AB4BDC073882415E4C274D52483C791B1/0/323830333a346638303a3a2f33322d3332203d3e20323633373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4f80::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:c2:b0:87:a0:ed:e9:e8:22:93:73:1a:b3:bb:55:52:e1:af:
         41:fd:c3:f3:e2:0a:e4:fa:a5:fd:15:fe:ef:49:6c:be:ba:fd:
         4c:fd:6e:cc:78:7f:60:ed:57:f5:ac:2e:16:90:76:26:2e:b8:
         d9:34:e1:56:9d:dd:35:51:cc:e2:f9:62:88:50:ad:4d:aa:7d:
         82:6d:09:0c:f5:f6:00:73:9a:9a:0b:a8:63:cf:95:0a:22:ba:
         c7:fc:69:40:4a:61:b6:40:36:4f:39:0c:a9:7a:2b:1c:02:4e:
         e3:28:02:ce:72:77:5e:46:a7:9f:97:91:0c:39:e0:90:cf:92:
         50:72:be:a3:61:54:65:eb:57:ea:5c:a5:28:c9:ec:6d:7f:e8:
         98:31:a0:fb:f5:4a:3e:49:f8:43:5c:9a:e7:d4:b9:f8:33:98:
         25:9a:4c:03:5d:3f:1f:75:4f:35:94:ce:81:45:09:29:a1:22:
         24:2e:10:2f:c7:ae:f2:1f:90:40:0c:ec:36:1b:26:33:bb:2d:
         05:74:6d:23:c0:14:17:80:80:af:61:18:49:70:56:6e:ab:22:
         68:d4:f4:dc:9d:02:28:3e:12:ff:92:db:3a:82:1e:c4:5b:37:
         88:e8:19:a9:d5:1b:5f:4b:54:c9:20:1e:ba:51:48:61:67:d5:
         0d:32:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----