Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/323830333a376232303a3a2f33322d3634203d3e20323636373533.roa
File:                     323830333a376232303a3a2f33322d3634203d3e20323636373533.roa (raw, json)
Hash identifier:          Eog0q3GysFrbb1jUgdXg8SGYQEoH5lpbMEMbRDK4Y/A=
Subject key identifier:   DC:F3:D8:64:8E:DE:09:3F:EF:97:42:66:56:B0:DA:03:65:61:59:91
Certificate issuer:       /CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
Certificate serial:       600A282FE081894E8F6E692A15A2C0A0D6FF5192
Authority key identifier: 30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/323830333a376232303a3a2f33322d3634203d3e20323636373533.roa
Signing time:             Tue 12 Mar 2024 19:40:00 +0000
ROA not before:           Tue 12 Mar 2024 19:35:00 +0000
ROA not after:            Tue 11 Mar 2025 19:40:00 +0000
asID:                     266753
IP address blocks:        2803:7b20::/32 maxlen: 64
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:0a:28:2f:e0:81:89:4e:8f:6e:69:2a:15:a2:c0:a0:d6:ff:51:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30B89C5AE85A486E451A9A04540DBDA45D52A5D5
        Validity
            Not Before: Mar 12 19:35:00 2024 GMT
            Not After : Mar 11 19:40:00 2025 GMT
        Subject: CN=DCF3D8648EDE093FEF97426656B0DA0365615991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:68:9b:d8:69:eb:3f:aa:81:e4:c1:5e:23:
                    19:a1:f7:4d:30:54:0d:38:21:f1:43:e3:bf:86:11:
                    6f:d1:56:40:88:79:81:47:56:c5:83:d0:1b:0d:3f:
                    e4:f1:17:ef:1d:84:66:84:15:1b:9a:85:da:8e:15:
                    8f:7b:2b:15:45:75:75:0c:49:17:22:d3:83:03:79:
                    05:13:9c:89:26:8d:9e:08:3c:a0:5f:f1:69:47:79:
                    6c:cb:cb:e3:fc:57:17:a9:1f:b1:7a:aa:5c:57:f0:
                    f0:c3:65:b8:ec:fe:f7:60:b3:3a:fe:8c:88:37:a2:
                    fa:28:17:1c:6b:d0:c4:21:32:96:6b:7d:f2:b0:d0:
                    8b:e5:52:43:77:5a:c9:dc:f6:72:24:8b:a0:a0:48:
                    28:47:eb:0f:3d:c1:71:42:a9:d0:b8:41:cc:39:0b:
                    52:ce:9d:18:18:dc:e6:98:45:ef:0a:2b:91:6d:74:
                    0f:1a:b6:00:ba:21:09:9c:ca:cb:9d:ab:dc:4e:9a:
                    5b:36:3f:48:e2:1c:f7:d3:95:89:ba:65:fe:fe:8c:
                    41:49:7b:f9:f6:0f:99:61:32:6f:d8:c9:7a:5f:64:
                    8d:eb:ec:1b:7e:de:19:50:d5:6f:e8:81:a6:56:15:
                    95:80:71:8c:72:68:53:06:2a:d5:a6:02:a5:d7:9c:
                    15:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F3:D8:64:8E:DE:09:3F:EF:97:42:66:56:B0:DA:03:65:61:59:91
            X509v3 Authority Key Identifier:
                keyid:30:B8:9C:5A:E8:5A:48:6E:45:1A:9A:04:54:0D:BD:A4:5D:52:A5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/30B89C5AE85A486E451A9A04540DBDA45D52A5D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1A4BED27D4740E14E97C241B5C9D89C0448B69347B4568A603DFFD5B5F72A677/0/323830333a376232303a3a2f33322d3634203d3e20323636373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:dd:d5:70:6e:8a:8e:3f:a0:cf:96:22:5a:2d:36:32:d6:67:
         18:f7:3f:19:83:e6:ba:fa:5a:34:41:0a:83:ed:44:cb:08:96:
         19:fb:b5:0e:7e:4e:1c:12:13:bc:88:dd:c3:4b:a2:49:f3:a4:
         2e:a3:a7:7d:fe:5d:66:e2:ca:5e:46:82:50:16:da:ba:e3:e8:
         b4:81:e3:65:e9:f6:0c:36:d7:94:cf:3c:08:c6:b0:a9:d7:24:
         7d:28:64:ec:af:0f:ed:4c:f5:de:e8:eb:ed:cc:8b:a6:39:ae:
         d6:00:c8:ee:9b:12:ef:97:72:cb:27:1f:21:d7:32:43:f2:95:
         e4:23:1d:4e:90:1f:9d:43:3a:0a:40:fa:dd:ea:5a:77:ca:37:
         39:ff:60:40:ad:50:00:bf:0b:65:00:3b:93:a0:2f:56:88:c8:
         28:7c:33:a5:15:bf:78:8e:3c:a6:6b:17:15:da:2b:43:1c:55:
         2d:d0:d6:f1:0f:d3:a4:ea:e3:4b:82:15:0c:48:85:14:2a:73:
         8c:7b:e0:30:e9:14:4f:4e:c6:27:95:b8:ab:35:f1:67:55:49:
         6a:cf:d4:f4:12:4d:54:d4:b8:72:e5:42:7f:c7:2a:ab:27:2a:
         d6:d1:a4:e7:28:d7:aa:99:6b:cf:1c:5f:8b:b0:78:96:48:0b:
         99:33:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----