Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203237393634.roa
File:                     323830333a366565303a3a2f33322d3438203d3e203237393634.roa (raw, json)
Hash identifier:          IMyfiIi5kWO77qojzIoFe7MDtL1Pc4B6iPqdhB7uXO0=
Subject key identifier:   31:30:AA:EB:5D:AC:AD:0F:D8:B8:E8:81:E9:5D:57:A9:29:17:35:3F
Certificate issuer:       /CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
Certificate serial:       4407B674D80112EE3E6EB16AF70DF6BFBC9C3552
Authority key identifier: 69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203237393634.roa
Signing time:             Mon 17 Jun 2024 15:30:00 +0000
ROA not before:           Mon 17 Jun 2024 15:25:00 +0000
ROA not after:            Mon 16 Jun 2025 15:30:00 +0000
asID:                     27964
IP address blocks:        2803:6ee0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:07:b6:74:d8:01:12:ee:3e:6e:b1:6a:f7:0d:f6:bf:bc:9c:35:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696560FC9F340B2A7EF395599D9F7FC5D9619C58
        Validity
            Not Before: Jun 17 15:25:00 2024 GMT
            Not After : Jun 16 15:30:00 2025 GMT
        Subject: CN=3130AAEB5DACAD0FD8B8E881E95D57A92917353F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:7f:8b:3b:36:2f:b7:fb:c3:2a:a0:19:8d:
                    56:2b:12:7a:95:70:22:1d:94:21:71:b2:0e:b1:b0:
                    7a:ea:2f:97:5c:76:87:47:a4:54:6e:bd:3e:77:46:
                    5d:9a:15:fc:24:39:26:7a:2e:30:f1:89:e1:89:95:
                    60:7e:df:6c:54:43:d8:c5:3e:85:da:af:de:86:f0:
                    21:ed:97:03:ad:55:6e:4b:71:50:27:20:3f:b1:f7:
                    49:5d:58:65:07:8a:d3:e7:c2:97:71:0b:3e:d2:92:
                    d4:36:dc:b4:11:88:37:fc:19:ab:23:55:ed:d2:e7:
                    62:9f:f4:31:75:45:fc:b1:78:6f:2c:62:59:3d:4b:
                    92:a4:b6:20:34:24:07:af:0d:a6:12:3a:00:17:ed:
                    85:eb:96:91:60:7b:cf:79:0a:1e:5f:f2:91:c9:c4:
                    9a:15:6d:b5:c4:85:6c:74:05:91:df:7e:1c:4a:ee:
                    bf:ab:27:9b:3a:5e:0f:dc:48:cf:b1:dd:e8:7d:64:
                    42:a9:6a:f0:19:0a:b7:6b:4b:02:51:96:52:07:6f:
                    b5:6f:5e:01:e5:8a:d9:2b:ba:97:65:b0:db:74:e2:
                    e7:93:39:a0:20:f0:60:6b:5a:ea:e3:04:56:40:c1:
                    85:32:f6:27:01:fd:b9:2f:a6:d5:e0:b1:04:c2:ba:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:30:AA:EB:5D:AC:AD:0F:D8:B8:E8:81:E9:5D:57:A9:29:17:35:3F
            X509v3 Authority Key Identifier:
                keyid:69:65:60:FC:9F:34:0B:2A:7E:F3:95:59:9D:9F:7F:C5:D9:61:9C:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/696560FC9F340B2A7EF395599D9F7FC5D9619C58.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0224E820BEF78B3B0B35B89B491CEBF2D8FD674034C6478CF53BF5647F6FCAD9/0/323830333a366565303a3a2f33322d3438203d3e203237393634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:37:07:f5:80:db:d1:3b:9c:74:0f:6f:a3:97:13:fe:01:50:
         73:80:59:c7:2b:7c:96:64:fa:d7:77:4e:0e:a4:d5:79:12:2a:
         db:d4:b4:eb:bb:e5:8e:b9:42:8f:2b:38:e6:3e:21:43:8a:fd:
         2b:e8:c5:d4:24:c5:03:99:1a:73:73:74:c8:f0:8a:c6:3a:74:
         85:3d:c0:d6:89:1b:86:cf:3f:87:1b:26:23:59:89:02:8e:bc:
         ce:fd:c9:0e:af:7d:9f:ce:54:1f:01:17:fe:f5:43:77:08:16:
         f7:e9:4d:87:e4:4e:bb:09:23:c4:66:72:e1:fa:07:53:41:02:
         58:9d:68:d6:06:00:ca:b3:fb:bc:06:a8:87:38:c2:25:cf:ea:
         01:b5:62:81:bd:49:7b:65:66:51:3f:0b:6c:11:39:55:6c:bc:
         22:4f:b6:d8:a7:7f:e9:25:e2:d1:13:1b:50:5e:ab:91:0a:e3:
         bb:2e:62:a9:c7:1d:49:80:ef:98:ff:c6:5d:49:61:26:99:2d:
         cd:c2:c4:ec:dc:3a:2c:92:df:ea:ab:5c:ac:c3:67:15:55:6c:
         03:10:42:b3:97:75:45:6c:69:bb:62:cc:cc:29:94:7d:f1:e5:
         d9:1e:00:f7:f4:15:88:29:f5:2f:6b:a1:5e:b0:1f:0a:a7:e9:
         5d:83:28:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----