Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/323830333a643534303a3a2f33322d3332203d3e20323636373531.roa
File:                     323830333a643534303a3a2f33322d3332203d3e20323636373531.roa (raw, json)
Hash identifier:          Z77+l7mzaGzWbAV1e5hf55EVuaXBTrlu/NjtN+e8eOU=
Subject key identifier:   5F:1B:74:6F:38:82:B4:3F:C2:45:7C:4C:31:44:B6:88:0B:D1:4A:3B
Certificate issuer:       /CN=E45FE5E7213B150375DA656763256CB72EEEE655
Certificate serial:       0C1749910BDED88FC56D9CCD3796094B8CA32C5C
Authority key identifier: E4:5F:E5:E7:21:3B:15:03:75:DA:65:67:63:25:6C:B7:2E:EE:E6:55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45FE5E7213B150375DA656763256CB72EEEE655.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/323830333a643534303a3a2f33322d3332203d3e20323636373531.roa
Signing time:             Fri 31 May 2024 19:40:00 +0000
ROA not before:           Fri 31 May 2024 19:35:00 +0000
ROA not after:            Fri 30 May 2025 19:40:00 +0000
asID:                     266751
IP address blocks:        2803:d540::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:17:49:91:0b:de:d8:8f:c5:6d:9c:cd:37:96:09:4b:8c:a3:2c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E45FE5E7213B150375DA656763256CB72EEEE655
        Validity
            Not Before: May 31 19:35:00 2024 GMT
            Not After : May 30 19:40:00 2025 GMT
        Subject: CN=5F1B746F3882B43FC2457C4C3144B6880BD14A3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:93:2c:25:35:67:eb:d1:34:e8:c8:12:43:50:
                    b1:e6:30:4c:8c:f5:79:e4:e2:5a:12:2a:24:2b:04:
                    c7:df:07:e3:76:65:45:ed:e5:f5:35:81:6f:b1:76:
                    51:11:04:96:57:f2:54:ea:2b:a4:28:bf:d9:cc:27:
                    4e:9b:5a:8c:89:07:a7:a8:fc:79:d4:8e:88:aa:56:
                    c0:e4:1e:0a:73:14:73:28:44:09:43:28:1e:bd:63:
                    b2:e0:db:77:94:60:56:30:58:50:f6:ae:5b:db:05:
                    b3:0d:03:c2:25:04:ac:90:c4:1a:fd:c8:60:11:8f:
                    91:a4:0f:c3:50:20:50:87:b7:bb:8e:95:ee:13:ad:
                    f1:1d:61:14:21:1a:83:35:57:f5:7a:ad:bb:c4:54:
                    32:05:0f:fd:1d:12:0e:f0:08:c4:ee:e3:44:5b:c0:
                    3e:32:18:e9:65:b3:6b:79:1d:fd:cf:89:db:3f:92:
                    b0:72:b5:53:72:25:db:05:5c:b7:a4:3d:12:98:df:
                    41:0c:d6:a5:50:c5:8c:c3:79:53:b4:83:63:36:5c:
                    9a:b4:ee:dd:99:ff:0e:bf:5d:f4:a9:0c:f9:eb:b9:
                    f6:68:32:c0:cb:85:4a:60:62:8b:3b:40:34:63:12:
                    b8:b5:3b:b2:8a:cc:3b:e1:3e:8a:43:eb:f7:33:2c:
                    fe:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:1B:74:6F:38:82:B4:3F:C2:45:7C:4C:31:44:B6:88:0B:D1:4A:3B
            X509v3 Authority Key Identifier:
                keyid:E4:5F:E5:E7:21:3B:15:03:75:DA:65:67:63:25:6C:B7:2E:EE:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/E45FE5E7213B150375DA656763256CB72EEEE655.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E45FE5E7213B150375DA656763256CB72EEEE655.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0F5DE5FE5414B3639D59BF50B1FD9BC019A8A484710FA86FB3773FC3157E0455/0/323830333a643534303a3a2f33322d3332203d3e20323636373531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d540::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:de:10:0c:fb:52:02:93:8d:aa:18:12:7f:4b:7c:ba:2c:a7:
         c6:4f:9a:88:30:ef:e1:b5:92:4a:6e:42:ed:53:d4:1b:b0:02:
         ec:cb:27:25:ed:2a:16:79:12:b6:8f:b3:e0:3c:de:55:50:47:
         ed:a6:33:b8:c4:bf:cd:be:3a:28:9f:81:67:be:23:5e:af:e1:
         4e:d7:69:b2:df:84:90:d7:cf:6e:68:62:82:0f:dd:2a:20:e7:
         2c:25:1e:f5:95:d2:20:18:80:4b:b6:1e:20:06:a8:1e:a4:ec:
         c8:28:6d:8d:a2:d3:44:73:e0:47:d3:68:78:50:40:0c:fb:7a:
         da:50:c4:ad:99:6c:6f:48:61:34:1a:7e:b1:bd:f5:df:a3:20:
         9d:da:f6:97:9a:81:09:3a:08:9a:c2:72:5c:35:3c:96:ab:bd:
         b0:02:6a:18:a6:b6:2f:e1:e9:0d:e3:00:bb:e7:2c:9f:57:a3:
         f6:14:40:a4:0b:1c:d7:10:fa:a1:d3:77:0e:20:20:5e:d9:15:
         dc:34:8a:4e:72:c6:6e:85:18:85:91:ad:69:94:52:c0:43:1d:
         6c:fc:c9:13:18:76:83:d8:db:71:be:d5:53:41:18:f9:17:f8:
         43:c0:ba:2b:62:81:a4:16:ca:6c:0a:86:e9:93:dd:ec:8f:ea:
         71:23:d5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----