Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/323830333a313561303a3a2f33322d3332203d3e203237393236.roa
File:                     323830333a313561303a3a2f33322d3332203d3e203237393236.roa (raw, json)
Hash identifier:          73rbZuS5Wo1qz3FETimsH+37APCJc8kkvehoJpqltro=
Subject key identifier:   DB:F2:38:75:75:F7:E4:AE:9A:CD:AB:54:35:CF:DD:3B:4F:46:80:31
Certificate issuer:       /CN=6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F
Certificate serial:       653D46FD14C765583AD342D958D760566D023507
Authority key identifier: 6A:21:82:9D:C4:22:50:CC:0D:3D:D3:59:4F:F6:FB:4A:3A:8D:70:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/323830333a313561303a3a2f33322d3332203d3e203237393236.roa
Signing time:             Tue 05 Mar 2024 17:50:13 +0000
ROA not before:           Tue 05 Mar 2024 17:45:13 +0000
ROA not after:            Tue 04 Mar 2025 17:50:13 +0000
asID:                     27926
IP address blocks:        2803:15a0::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3d:46:fd:14:c7:65:58:3a:d3:42:d9:58:d7:60:56:6d:02:35:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F
        Validity
            Not Before: Mar  5 17:45:13 2024 GMT
            Not After : Mar  4 17:50:13 2025 GMT
        Subject: CN=DBF2387575F7E4AE9ACDAB5435CFDD3B4F468031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:96:8a:91:d5:9e:aa:da:39:30:43:2b:cb:5b:
                    89:42:ab:9c:d3:0c:10:37:38:27:79:fe:2b:1a:2c:
                    53:18:28:6c:02:73:0a:0b:fe:13:11:c5:ec:9a:37:
                    42:53:e9:c3:66:a3:0a:d9:01:67:2d:dd:08:56:6a:
                    e1:59:22:4e:1a:4f:b1:05:ac:ba:90:87:15:a1:73:
                    dc:68:c1:13:ef:e6:04:71:09:57:23:e4:8e:44:c9:
                    16:ed:eb:0b:cf:f6:09:b6:49:3d:65:81:2d:e5:d2:
                    e3:7a:ac:7d:09:ec:60:ba:87:92:00:b8:27:d4:fe:
                    11:c5:09:00:12:10:1a:51:91:52:8b:bc:b7:11:3e:
                    fa:34:0b:f6:a1:88:2b:22:1c:cd:3a:a5:22:17:2a:
                    fe:c6:7e:31:a6:11:36:31:7f:ea:6a:df:27:5d:89:
                    dc:81:74:2d:5b:32:d4:7d:28:41:e8:d6:78:4a:ea:
                    90:68:92:9c:0d:be:ec:dc:87:6b:51:0a:81:3b:bc:
                    52:6b:67:0b:3b:f7:de:ac:f8:04:b1:37:89:00:31:
                    ef:c5:68:58:df:8d:10:19:3e:bb:73:a4:f6:b6:a4:
                    64:61:bf:c7:f2:fa:85:7f:0d:8f:b7:e2:6e:8b:71:
                    c3:c0:aa:45:a4:17:c7:8d:de:93:0d:71:64:82:fb:
                    94:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F2:38:75:75:F7:E4:AE:9A:CD:AB:54:35:CF:DD:3B:4F:46:80:31
            X509v3 Authority Key Identifier:
                keyid:6A:21:82:9D:C4:22:50:CC:0D:3D:D3:59:4F:F6:FB:4A:3A:8D:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6A21829DC42250CC0D3DD3594FF6FB4A3A8D704F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0AA76D2199AA0688AAAA74E580ADFB77C4D420EBD679DECC43120565068289EC/0/323830333a313561303a3a2f33322d3332203d3e203237393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:15a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:60:cc:c2:1e:34:ed:1e:8a:33:80:0e:c2:6b:6d:e4:f1:25:
         a2:aa:59:ce:4e:3b:5c:e3:04:cf:dc:35:77:ac:21:43:7b:77:
         ed:ca:2d:c9:37:0e:2a:ef:ce:02:e9:62:b7:37:75:e2:cf:35:
         86:57:9d:19:cb:54:b3:42:f7:58:a7:17:67:42:d2:2a:a7:2e:
         17:08:aa:41:a0:5d:33:46:df:ee:95:d7:34:02:70:1d:8e:c2:
         9c:48:f7:f8:89:46:de:9c:a0:d1:d0:ae:cc:f1:95:b3:4c:39:
         87:4d:91:b7:3b:b4:c3:d5:5d:85:37:aa:d6:3f:27:68:32:da:
         83:db:df:0c:2d:72:43:f7:44:fd:ff:49:49:da:c9:69:91:19:
         92:b4:3c:c3:91:bb:ab:b9:74:6f:84:bd:13:30:fc:16:c4:1a:
         d5:da:c0:c7:da:9d:80:b4:4f:89:bf:61:d2:9e:86:da:96:8b:
         98:e2:09:ac:ff:cf:03:51:73:28:f6:c3:03:cf:6e:c4:f8:b7:
         f5:5d:2a:1c:56:46:d6:29:8e:4b:05:61:e7:14:fe:47:15:8f:
         bd:16:f0:28:23:fb:f5:e5:da:06:ae:5c:ab:61:fa:46:16:7c:
         05:64:18:4c:64:8c:7c:3d:9b:e3:b2:c9:55:1c:44:22:f9:5c:
         e5:e3:00:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----