Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323030303a3a2f33392d3430203d3e20323635353534.roa
File:                     323830333a616261303a323030303a3a2f33392d3430203d3e20323635353534.roa (raw, json)
Hash identifier:          K+5DGrISMk2C18H6opI0GESyN35gbAtPGqeVUD/HTLk=
Subject key identifier:   5F:38:44:AD:AC:54:5E:E2:DE:5C:4B:AD:DC:92:0E:31:41:6F:60:1E
Certificate issuer:       /CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
Certificate serial:       65599CF6BD3BD6C38005613D59C4AB5C9197A937
Authority key identifier: 64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323030303a3a2f33392d3430203d3e20323635353534.roa
Signing time:             Tue 05 Mar 2024 18:08:09 +0000
ROA not before:           Tue 05 Mar 2024 18:03:09 +0000
ROA not after:            Tue 04 Mar 2025 18:08:09 +0000
asID:                     265554
IP address blocks:        2803:aba0:2000::/39 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:59:9c:f6:bd:3b:d6:c3:80:05:61:3d:59:c4:ab:5c:91:97:a9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=643132A8FE5198797F39AACB314EC77EE8C6D84D
        Validity
            Not Before: Mar  5 18:03:09 2024 GMT
            Not After : Mar  4 18:08:09 2025 GMT
        Subject: CN=5F3844ADAC545EE2DE5C4BADDC920E31416F601E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:f1:d8:95:d3:f5:cc:f3:91:fb:97:d3:b6:
                    6d:15:c5:f7:7e:e1:34:b8:25:2c:e3:5e:44:65:6f:
                    6e:2c:9c:1b:a1:71:e2:72:66:0e:31:54:5e:17:a4:
                    68:54:83:2b:b9:a4:0f:9d:98:e1:71:13:80:26:71:
                    03:03:c4:5b:0b:fd:95:ea:f9:6b:dc:04:e6:78:cd:
                    8c:85:a5:b5:26:3c:75:fa:70:4b:70:4a:22:26:61:
                    c2:d5:2e:27:59:01:d2:4a:e1:da:af:d9:49:b3:e8:
                    66:72:b9:d5:f0:ac:fa:8d:74:e0:d8:9a:64:35:35:
                    95:e5:55:d8:3b:d6:f4:cc:e6:04:4a:55:81:aa:d8:
                    11:de:08:3d:df:44:6c:a0:ef:21:60:84:84:1e:fd:
                    50:e9:54:8e:2f:19:0f:a5:07:3f:1b:67:a2:4e:c4:
                    ce:73:13:9d:2f:4f:c5:50:cf:51:1a:82:a2:0c:b0:
                    a1:5b:6c:c9:8f:27:ef:af:8d:83:61:95:3f:c0:e1:
                    88:da:0d:fa:e5:2b:a2:a5:3f:9e:56:d3:66:c5:ec:
                    95:a5:ba:81:52:34:8f:8f:13:11:d9:10:f6:6a:04:
                    05:47:7a:eb:5c:4c:82:84:1f:6d:89:61:71:cd:eb:
                    be:e4:9e:2c:7f:fc:0d:50:eb:b5:9b:95:76:ed:5c:
                    dc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:38:44:AD:AC:54:5E:E2:DE:5C:4B:AD:DC:92:0E:31:41:6F:60:1E
            X509v3 Authority Key Identifier:
                keyid:64:31:32:A8:FE:51:98:79:7F:39:AA:CB:31:4E:C7:7E:E8:C6:D8:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/643132A8FE5198797F39AACB314EC77EE8C6D84D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22C22A0764E4CD4584E43059513763E943365C9305045EFB301F51547350A540/0/323830333a616261303a323030303a3a2f33392d3430203d3e20323635353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aba0:2000::/39

    Signature Algorithm: sha256WithRSAEncryption
         9c:64:42:fa:20:e8:38:c6:ac:ba:e1:4a:7c:bc:a1:1c:33:65:
         eb:83:65:11:f4:df:e6:c8:02:e5:ef:60:5b:8a:ba:3a:0a:eb:
         9d:7f:42:26:70:b9:70:e7:29:88:6c:44:d4:72:c4:52:6a:20:
         34:5f:0c:dd:da:27:e2:e8:6f:ee:62:dc:a4:83:e1:1c:4c:fd:
         9d:bb:59:a3:01:c0:d7:a9:b4:b1:f0:ac:4a:d5:ec:10:d2:80:
         9b:f8:d2:bd:53:70:77:77:1e:1a:af:ed:33:4e:41:52:02:0b:
         23:5d:b7:cf:1c:23:48:11:c2:ad:64:6d:78:77:74:e9:df:d8:
         21:fe:02:39:89:52:03:24:f7:18:fc:58:82:d6:ee:aa:fe:73:
         1c:e6:fc:0e:e8:84:ce:6e:2d:22:1e:4d:64:26:f5:f6:c2:98:
         8a:64:f6:7e:31:09:5d:fc:d2:dc:42:c8:fe:3e:07:9d:35:05:
         ba:d6:f7:47:0e:04:25:97:43:53:10:f6:1b:b7:fe:55:a3:65:
         c4:4e:38:75:cb:a2:78:20:19:16:f8:ca:d6:4d:7e:58:86:37:
         d9:61:a8:ba:53:af:95:42:34:a3:41:3a:28:37:b4:26:49:d2:
         d1:8c:bc:7b:fa:48:86:ec:2f:86:68:f4:0f:ec:55:70:91:c3:
         2e:f8:59:a7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----